$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa File: 8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa (raw, json) Hash identifier: LgUUGBsWwIu8TzMzL2smrNgvuEJnwhbjS0vu8tji3Qg= Subject key identifier: AF:CE:0E:E6:1B:3A:5D:2C:AA:F6:13:B2:6E:05:13:55:33:86:83:B1 Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F4328584B76F229CBE6FBEE4C1A32AC00 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 55244 IP address blocks: 192.16.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:29:cb:e6:fb:ee:4c:1a:32:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=30a7e7a2-96ce-49d9-8339-b471d38ce941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c6:fd:12:15:8a:db:51:83:72:6e:a3:d9:5f: b6:06:0f:43:f6:06:e0:28:b5:7b:51:40:df:41:b8: b6:bf:0d:e6:9f:cd:00:0b:fa:63:f5:82:c4:64:1f: 78:87:8f:16:de:21:87:41:18:37:1e:51:b9:91:1c: b9:6a:e1:8d:9a:50:d2:e5:d5:fe:4e:c5:4a:82:82: 52:4b:bb:b6:9f:e0:bb:f5:0d:a6:e2:eb:a2:f2:8c: 9d:1f:dc:ab:98:dc:fa:95:3d:a7:07:b8:a0:be:af: fb:9a:02:90:03:5b:61:94:81:4d:c8:d3:95:49:08: 29:eb:20:34:3c:7d:c8:bc:2d:42:6a:ef:9c:15:93: e6:0c:42:b1:93:81:4a:46:d8:09:78:63:20:cd:a6: 29:23:96:16:e7:a1:5c:f8:b3:6c:73:37:e6:97:92: 24:8e:e5:fa:ec:06:1d:a6:27:46:dc:a0:95:47:f4: ba:d7:29:e5:58:65:a8:2e:df:1b:b0:5e:4e:c3:d9: d5:b6:57:79:16:b6:4b:e6:f6:ba:1d:82:23:5b:ad: 83:36:bc:94:64:14:b5:55:a1:18:9e:b6:4a:a3:08: a8:e6:88:eb:75:c9:ed:5f:31:cb:2d:8a:65:ed:4e: 14:24:d0:c0:8a:96:9b:6f:11:fb:c6:6f:97:21:31: 81:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CE:0E:E6:1B:3A:5D:2C:AA:F6:13:B2:6E:05:13:55:33:86:83:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 192.16.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cc:ea:86:8e:e3:54:83:70:0a:3e:c0:82:62:1d:b6:b3:22: 3e:80:84:85:57:ca:78:5a:43:25:d6:60:38:eb:38:6d:b9:2c: 5c:b9:cf:3a:5f:b3:92:a4:f0:a5:ac:59:d2:4d:56:4b:e6:68: 05:03:98:72:4b:3d:5c:13:27:48:6a:0a:61:bc:41:0a:52:09: 0a:6d:ed:33:3c:65:c0:35:c4:51:05:a3:e2:59:6f:17:53:bf: 0e:c5:7f:d8:1e:f1:93:d9:06:b0:0d:c8:a1:25:b3:92:6b:f6: 5e:51:b1:77:9c:03:38:a6:4b:6e:fe:2c:bb:43:bd:6b:b2:49: a9:a0:fa:e8:63:b2:ce:f6:9f:c7:2c:6f:9a:ad:a8:92:cd:ed: f1:19:31:74:23:5f:4a:a6:fd:c5:72:e9:9b:ce:93:22:e8:b6: 6d:59:ea:30:be:2d:62:f7:8b:d9:d3:4b:9c:8c:bb:21:ce:0b: 63:63:ae:44:d6:57:3e:ce:5f:14:a7:e7:55:1b:24:22:9c:bd: 0a:06:36:57:7a:9e:35:ae:88:34:59:a4:d2:54:cb:d8:2b:7d: a6:c9:90:c0:c7:5c:3f:33:33:e9:61:03:82:32:b3:8b:ee:2d: da:8a:66:0f:c0:d2:49:04:d0:59:26:cf:25:0a:16:b8:22:15: 58:d1:b1:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28inL5vvuTBoyrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzBhN2U3YTItOTZjZS00OWQ5LTgzMzktYjQ3MWQzOGNlOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mb9EhWK21GDcm6j2V+2Bg9D9gbgKLV7UUDf Qbi2vw3mn80AC/pj9YLEZB94h48W3iGHQRg3HlG5kRy5auGNmlDS5dX+TsVKgoJS S7u2n+C79Q2m4uui8oydH9yrmNz6lT2nB7igvq/7mgKQA1thlIFNyNOVSQgp6yA0 PH3IvC1Cau+cFZPmDEKxk4FKRtgJeGMgzaYpI5YW56Fc+LNsczfml5IkjuX67AYd pidG3KCVR/S61ynlWGWoLt8bsF5Ow9nVtld5FrZL5va6HYIjW62DNryUZBS1VaEY nrZKowio5ojrdcntXzHLLYpl7U4UJNDAipabbxH7xm+XITGB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/ODuYbOl0sqvYTsm4FE1UzhoOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvOGI0NzJjOGYtM2FjYi0z OWZmLWI3OGQtZTI0MDRhZGJkMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBBMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbM6oaO41SDcAo+wIJiHbazIj6AhIVXynhaQyXWYDjrOG25LFy5zzpf s5Kk8KWsWdJNVkvmaAUDmHJLPVwTJ0hqCmG8QQpSCQpt7TM8ZcA1xFEFo+JZbxdT vw7Ff9ge8ZPZBrANyKEls5Jr9l5RsXecAzimS27+LLtDvWuySamg+uhjss72n8cs b5qtqJLN7fEZMXQjX0qm/cVy6ZvOkyLotm1Z6jC+LWL3i9nTS5yMuyHOC2NjrkTW Vz7OXxSn51UbJCKcvQoGNld6njWuiDRZpNJUy9grfabJkMDHXD8zM+lhA4Iys4vu LdqKZg/A0kkE0FkmzyUKFrgiFVjRsWE= -----END CERTIFICATE-----Generated at Tue Oct 21 14:21:23 2025 by rpki-client