$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa File: 8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa (raw, json) Hash identifier: SRR7fgaQtHAS8voCF5hh6wfBLkD99/t2vKQzBues3l4= Subject key identifier: B8:2D:23:07:22:E9:3D:D1:9E:57:20:B8:CE:A9:12:DA:E7:87:A0:55 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584B821E21AE52E9D92DD681C940 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 26548 IP address blocks: 172.111.48.0/24 maxlen: 24 199.253.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:21:ae:52:e9:d9:2d:d6:81:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f41d535c-40f1-498e-8c16-cd3c27420c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:dd:af:01:91:5b:4b:0e:19:f3:e2:70:6c: 7f:c4:92:32:11:36:cd:af:71:53:14:3f:83:69:de: 20:f5:08:d5:ca:67:12:73:22:1e:26:34:fb:a5:21: b3:4f:c1:41:98:6d:d7:8b:f3:56:d5:30:c9:a1:dc: ea:26:de:9b:4c:0a:59:43:d9:c0:43:c3:26:b8:c0: fa:88:77:cd:56:53:4c:40:77:19:a1:83:fd:92:60: fd:b4:47:8e:02:75:ed:4d:0c:5f:58:7f:fe:c4:fc: b6:16:4b:bd:fa:3a:b5:db:bc:67:af:1f:13:fe:21: 51:58:34:0e:62:83:3b:36:2c:85:2d:74:22:41:d1: 99:0d:81:3e:22:5d:d5:16:40:50:88:76:d1:bc:9c: 97:45:28:7f:c0:70:6e:54:a8:f1:7c:9e:7c:a0:ce: b7:80:6f:a3:5e:4c:df:6c:41:60:6a:dd:e0:cb:ee: e4:db:e1:23:54:ae:04:b1:3f:07:24:d6:e8:6c:18: 73:75:e7:02:fc:16:db:9e:b8:75:47:b2:9f:f0:8d: 4e:e1:33:0a:6f:57:c6:6d:64:4f:cc:10:5d:0a:3a: ee:96:03:f8:ff:88:48:14:6a:24:b5:4c:2d:32:4f: 39:84:07:6e:ba:8c:1a:ae:5b:a6:10:ac:24:ce:d4: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:23:07:22:E9:3D:D1:9E:57:20:B8:CE:A9:12:DA:E7:87:A0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.48.0/24 199.253.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bd:b3:38:b8:6d:0d:ff:80:c8:2c:17:95:2c:46:71:b2:0a: b9:e6:e6:ff:6d:9a:98:d1:81:ac:da:48:34:5c:ca:f7:18:76: f8:15:d3:2f:30:d6:7e:ac:a5:8f:bc:39:28:30:ef:2e:97:2b: 4a:9f:41:62:b2:85:ce:3c:26:19:06:95:0e:56:9a:86:f1:44: 92:7b:75:c1:f7:ad:17:e8:d9:82:74:25:dc:1c:b0:d9:e8:36: 16:b9:6f:94:54:49:b4:bb:81:30:7f:53:87:00:ed:04:45:ff: 6d:4d:d8:83:af:34:90:f4:17:94:73:5b:e1:83:6e:f1:e4:fb: 68:1b:ea:bf:16:17:80:d0:ed:ed:7e:04:f7:ea:6c:28:2a:00: 63:8c:97:46:58:09:3c:39:2e:e3:88:85:08:f3:10:cf:c9:e3: 99:82:06:2f:07:7c:7c:fa:c0:91:ed:2e:ef:4f:ae:c2:0e:0c: 07:a4:76:a2:8e:0b:fe:37:30:ee:cf:75:45:fc:a2:dc:a3:6f: 25:be:30:cd:fb:31:be:70:22:ca:3f:15:31:c4:5b:17:90:43: a5:7a:47:de:66:a8:a2:e4:30:68:c0:9a:48:a9:34:68:63:7f: 7c:b9:fd:f9:d3:5c:9b:48:de:8d:55:c1:70:73:34:56:6c:f3: c7:a1:de:ce -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuCHiGuUunZLdaByUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjQxZDUzNWMtNDBmMS00OThlLThjMTYtY2QzYzI3NDIwYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9bdrwGRW0sOGfPicGx/xJIyETbNr3FTFD+D ad4g9QjVymcScyIeJjT7pSGzT8FBmG3Xi/NW1TDJodzqJt6bTApZQ9nAQ8MmuMD6 iHfNVlNMQHcZoYP9kmD9tEeOAnXtTQxfWH/+xPy2Fku9+jq127xnrx8T/iFRWDQO YoM7NiyFLXQiQdGZDYE+Il3VFkBQiHbRvJyXRSh/wHBuVKjxfJ58oM63gG+jXkzf bEFgat3gy+7k2+EjVK4EsT8HJNbobBhzdecC/Bbbnrh1R7Kf8I1O4TMKb1fGbWRP zBBdCjrulgP4/4hIFGoktUwtMk85hAduuowarlumEKwkztQSQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLgtIwci6T3RnlcguM6pEtrnh6BVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGE5MjBlZmQtYWI1ZC0z NWNiLTllYmEtMWEyNmU4OWQ3MDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG8wAwQA x/0eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE69szi4bQ3/gMgsF5UsRnGyCrnm5v9tmpjRgazaSDRcyvcY dvgV0y8w1n6spY+8OSgw7y6XK0qfQWKyhc48JhkGlQ5WmobxRJJ7dcH3rRfo2YJ0 JdwcsNnoNha5b5RUSbS7gTB/U4cA7QRF/21N2IOvNJD0F5RzW+GDbvHk+2gb6r8W F4DQ7e1+BPfqbCgqAGOMl0ZYCTw5LuOIhQjzEM/J45mCBi8HfHz6wJHtLu9PrsIO DAekdqKOC/43MO7PdUX8otyjbyW+MM37Mb5wIso/FTHEWxeQQ6V6R95mqKLkMGjA mkipNGhjf3y5/fnTXJtI3o1VwXBzNFZs88eh3s4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:08 2025 by rpki-client