$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa File: d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa (raw, json) Hash identifier: XkB5igIAqCDW37jt/Sl6H948GZyJUISfsRUvA3nHW6E= Subject key identifier: 4A:ED:19:8F:C4:22:14:19:03:FC:B7:C9:EE:91:59:D8:88:2B:51:EF Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584B4E7716FF093621757D9F61C0 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 3425 IP address blocks: 192.74.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:16:ff:09:36:21:75:7d:9f:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c4adc89d-3956-4d32-9755-7a302ba3c677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:3a:08:b5:3d:97:27:e8:2a:98:8e:fc:5d: 6d:41:3e:7c:86:1e:6a:77:f0:02:7f:18:1c:1f:c5: 67:d2:60:3c:d6:72:5f:52:61:e2:f0:b9:87:22:a5: ef:2a:c4:3b:b4:56:55:0e:51:66:d4:f4:45:2c:1c: 76:9e:9e:ae:74:b1:31:a7:01:9e:51:6b:23:57:b7: e2:57:cc:f0:15:a9:19:40:19:fe:92:5d:71:5f:42: df:08:2c:6c:16:1a:d7:46:0d:75:e6:d6:27:e3:e7: 48:84:09:bb:26:41:9e:60:b2:fd:0d:15:34:ae:88: 66:6a:d9:33:f6:11:53:4a:d5:b3:6b:3b:eb:c1:b5: 34:43:c6:50:ed:e0:55:7a:22:64:a4:69:85:8a:24: ed:ca:c7:31:03:ac:3b:86:04:dc:5c:90:28:b1:00: 15:c6:90:d7:0c:57:e6:ff:a1:2c:5b:42:57:eb:08: e4:57:22:aa:a3:6c:9a:da:78:fc:63:4d:0e:80:6a: f1:86:b6:25:8c:92:88:9e:38:9c:e9:8e:ac:10:a5: fb:7a:12:62:f7:0e:a9:4b:02:ba:f8:58:57:1f:06: ac:22:a2:94:cc:74:a7:d8:1e:8f:b1:6e:91:3e:48: b7:91:12:89:f3:31:aa:e2:ba:bc:34:6b:ea:b3:02: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:19:8F:C4:22:14:19:03:FC:B7:C9:EE:91:59:D8:88:2B:51:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/d0117176-eb5b-314e-8ad6-2a8244e84fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.74.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:71:dc:77:d0:c1:15:88:4d:d7:28:07:76:95:7d:f8:e2:ba: c1:e2:28:a3:82:5f:ac:13:0d:ee:97:02:99:c3:e9:3c:b7:29: fd:7e:16:22:64:f5:ee:70:dc:92:e2:25:c4:5d:40:85:f7:f2: bb:9c:94:ab:fd:97:0e:62:dd:8c:19:33:2a:1a:6e:3c:fb:15: e8:c4:51:44:6d:90:ff:64:ff:31:71:6c:d3:89:86:ad:7f:bb: 70:34:a7:86:eb:55:2b:c5:cd:bc:94:f4:12:c4:95:4b:d6:44: fa:6f:fb:55:f4:d8:9c:d6:21:f4:a3:e7:bd:d3:40:94:49:aa: 32:27:77:53:0f:51:fb:66:bf:5c:d9:ce:29:27:84:ae:12:9f: e5:d3:6f:7a:a2:01:c1:fa:6c:53:af:5a:f1:a6:0e:b1:a4:0d: 67:a2:55:d1:c8:b8:26:22:d0:73:c2:76:65:d7:70:06:1b:3c: 36:2c:c0:18:03:9b:0a:00:d5:bc:e9:51:da:f6:d6:e7:2a:0a: c2:d1:8b:b4:4d:bd:27:85:a8:55:cc:49:fa:a9:51:1c:c4:ac: 80:ba:ac:dd:f0:e4:63:27:a1:27:f1:90:25:86:2b:33:52:07: 9b:f7:f1:d7:d4:53:31:c9:e5:44:36:bd:66:bd:c8:2c:0c:21: ec:f2:89:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxb/CTYhdX2fYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzRhZGM4OWQtMzk1Ni00ZDMyLTk3NTUtN2EzMDJiYTNjNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcg6CLU9lyfoKpiO/F1tQT58hh5qd/ACfxgc H8Vn0mA81nJfUmHi8LmHIqXvKsQ7tFZVDlFm1PRFLBx2np6udLExpwGeUWsjV7fi V8zwFakZQBn+kl1xX0LfCCxsFhrXRg115tYn4+dIhAm7JkGeYLL9DRU0rohmatkz 9hFTStWzazvrwbU0Q8ZQ7eBVeiJkpGmFiiTtyscxA6w7hgTcXJAosQAVxpDXDFfm /6EsW0JX6wjkVyKqo2ya2nj8Y00OgGrxhrYljJKInjic6Y6sEKX7ehJi9w6pSwK6 +FhXHwasIqKUzHSn2B6PsW6RPki3kRKJ8zGq4rq8NGvqswKFtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErtGY/EIhQZA/y3ye6RWdiIK1HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvZDAxMTcxNzYtZWI1Yi0z MTRlLThhZDYtMmE4MjQ0ZTg0ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwErTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9x3HfQwRWITdcoB3aVffjiusHiKKOCX6wTDe6XApnD6Ty3Kf1+FiJk 9e5w3JLiJcRdQIX38ruclKv9lw5i3YwZMyoabjz7FejEUURtkP9k/zFxbNOJhq1/ u3A0p4brVSvFzbyU9BLElUvWRPpv+1X02JzWIfSj573TQJRJqjInd1MPUftmv1zZ ziknhK4Sn+XTb3qiAcH6bFOvWvGmDrGkDWeiVdHIuCYi0HPCdmXXcAYbPDYswBgD mwoA1bzpUdr21ucqCsLRi7RNvSeFqFXMSfqpURzErIC6rN3w5GMnoSfxkCWGKzNS B5v38dfUUzHJ5UQ2vWa9yCwMIezyiak= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:47 2025 by rpki-client