$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa File: 400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json) Hash identifier: Qm6ckyrwCH2Mt/xUFpHWGaJd84edjzkElR7+tealn0E= Subject key identifier: 8A:3C:80:F9:DE:B0:1D:18:D5:EC:B0:99:9C:F5:83:19:D5:41:92:96 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B4081AA05196BC381AD30A280 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 63240 IP address blocks: 192.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:aa:05:19:6b:c3:81:ad:30:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=62e3222e-b770-4e4f-8bf5-5abf2088f754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:bc:f0:d4:6d:aa:fb:2c:63:10:f7:95:9d: 48:f6:d7:3a:de:48:0d:67:f7:7d:05:b4:fb:92:15: ad:51:46:74:2b:f5:06:07:de:2e:2c:2f:26:58:a3: 9d:c8:45:41:3e:fe:85:5b:fa:9c:24:d7:e2:5b:55: 4b:7c:61:63:27:d7:0f:b3:b0:47:e5:6f:fa:03:2e: 0f:29:70:7d:c5:e9:f5:0e:d7:da:51:5d:05:cc:13: ef:ac:98:b9:e6:86:53:11:1c:8c:fa:23:c7:91:64: 55:21:fe:18:c5:c0:fc:c2:09:a3:41:d6:65:dd:09: 67:7a:4d:14:b4:2a:06:28:d0:74:82:33:02:a5:05: a7:bd:fb:17:46:62:49:b8:cd:62:6d:87:29:22:1a: 2a:1c:58:d2:d0:65:7c:91:e4:85:3a:d8:b4:78:fb: da:7f:3b:b8:50:c9:a2:bb:cd:ed:18:01:1a:af:44: 4c:6b:f8:8d:a1:44:4e:05:06:7e:22:eb:32:8b:fd: b5:2e:c0:b2:b8:fa:6f:b7:bd:91:36:d7:79:d4:29: 10:5c:df:74:85:a7:a7:a8:ea:50:bd:30:12:33:78: 67:31:67:72:25:7e:5c:2f:8c:e7:9b:62:4e:c2:8f: 37:64:e6:ea:c6:94:a3:2c:53:23:a6:69:a2:7d:e7: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3C:80:F9:DE:B0:1D:18:D5:EC:B0:99:9C:F5:83:19:D5:41:92:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:54:f8:a6:5a:72:0e:9b:46:e1:d2:6b:51:ca:1a:27:11:a0: 7a:95:d5:48:f5:92:e5:bc:20:09:e7:1e:1c:4c:d5:47:4b:10: f7:cf:1d:c6:c0:68:10:ac:d0:de:a6:44:78:64:32:35:4d:d4: a7:9c:62:bf:26:34:f5:d6:24:15:78:47:3a:20:be:b3:6c:49: d8:cc:d4:05:7c:8a:46:e6:18:76:fe:c7:18:01:e5:4f:64:2d: d3:c1:c7:bb:44:6a:2a:6e:d0:24:42:ca:a3:a6:70:01:65:78: b6:01:7a:02:45:d1:d6:05:0b:38:4c:d8:cd:e5:c7:d2:fe:6a: 59:53:1b:0e:d9:e0:b1:6b:33:9b:88:00:57:60:3d:78:e1:c8: fd:af:89:4d:b3:70:45:c4:ac:06:9a:e0:01:a1:f9:df:20:1e: 58:15:e8:61:7c:19:3b:12:38:a0:d5:19:b9:1d:97:96:de:e9: a5:b1:33:f3:e0:a1:10:ff:5c:52:af:62:7c:f0:92:b6:0b:f7: e6:3d:08:c9:29:da:c9:0a:ee:38:0d:bd:49:95:98:39:f9:f0: 17:b7:64:55:9d:8d:29:29:7f:c2:99:2e:cd:e5:75:8f:a8:5d: a4:f2:c7:60:ce:8a:0f:55:d6:59:af:fe:b8:a1:95:04:db:7b: d6:70:54:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaoFGWvDga0wooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NjJlMzIyMmUtYjc3MC00ZTRmLThiZjUtNWFiZjIwODhmNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7C88NRtqvssYxD3lZ1I9tc63kgNZ/d9BbT7 khWtUUZ0K/UGB94uLC8mWKOdyEVBPv6FW/qcJNfiW1VLfGFjJ9cPs7BH5W/6Ay4P KXB9xen1DtfaUV0FzBPvrJi55oZTERyM+iPHkWRVIf4YxcD8wgmjQdZl3Qlnek0U tCoGKNB0gjMCpQWnvfsXRmJJuM1ibYcpIhoqHFjS0GV8keSFOti0ePvafzu4UMmi u83tGAEar0RMa/iNoUROBQZ+Iusyi/21LsCyuPpvt72RNtd51CkQXN90haenqOpQ vTASM3hnMWdyJX5cL4znm2JOwo83ZObqxpSjLFMjpmmifefUXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo8gPnesB0Y1eywmZz1gxnVQZKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDAwZGZmOTQtYThkMC0z ZGIyLWJiZGMtMGY1YjI5NzAxNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRU+KZacg6bRuHSa1HKGicRoHqV1Uj1kuW8IAnnHhxM1UdLEPfPHcbA aBCs0N6mRHhkMjVN1KecYr8mNPXWJBV4RzogvrNsSdjM1AV8ikbmGHb+xxgB5U9k LdPBx7tEaipu0CRCyqOmcAFleLYBegJF0dYFCzhM2M3lx9L+allTGw7Z4LFrM5uI AFdgPXjhyP2viU2zcEXErAaa4AGh+d8gHlgV6GF8GTsSOKDVGbkdl5be6aWxM/Pg oRD/XFKvYnzwkrYL9+Y9CMkp2skK7jgNvUmVmDn58Be3ZFWdjSkpf8KZLs3ldY+o XaTyx2DOig9V1lmv/rihlQTbe9ZwVFE= -----END CERTIFICATE-----Generated at Tue Oct 21 22:25:35 2025 by rpki-client