$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa File: d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa (raw, json) Hash identifier: f/IhET7LFbn+WKlzuLmakX83OvvwlPmOcu8073nJMXE= Subject key identifier: F6:33:CD:D5:2D:71:0C:49:70:95:13:82:01:CD:C0:BF:98:1D:72:34 Certificate issuer: /CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Certificate serial: 010D0C9F4328584B74274D14FC3F7DC68214E480 Authority key identifier: 74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 395036 IP address blocks: 192.225.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:4d:14:fc:3f:7d:c6:82:14:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=31143644-83bb-49c0-b9de-b68f011b37d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:37:23:22:ed:68:5d:81:db:18:8a:18:d1: 7c:c3:81:b9:1a:d9:24:19:46:6c:b7:49:18:ed:bf: 7e:5f:09:f3:82:be:8e:cf:17:38:ad:6c:68:f9:e2: 64:6a:66:1c:b8:26:53:65:79:7c:f0:df:4e:5d:cb: dd:ef:e5:8e:29:ab:a8:98:21:db:5e:0b:2f:af:7b: 79:eb:a4:ed:46:1c:17:d7:5c:bc:8a:7a:7d:65:24: 09:4b:10:2d:a2:d9:80:73:44:e9:3f:2d:e5:46:fe: 05:06:89:aa:55:15:37:7f:79:45:ad:14:f2:6b:c7: 52:07:58:c0:2b:39:ce:a8:b8:a1:20:9c:56:10:ac: ca:78:ca:7a:75:af:63:20:81:83:79:e6:c2:d1:f5: 4d:eb:ca:f4:0d:6c:02:e1:ca:61:7e:5d:b5:b4:28: 7c:46:b7:e8:3c:0c:de:1e:43:cf:17:83:73:6f:1e: 62:20:93:aa:05:28:b2:be:8d:18:6e:fb:05:b0:ce: 10:9e:0a:5e:26:89:1c:d7:ad:6e:12:97:b9:09:b0: 6c:47:e3:7a:e8:0d:9e:95:33:84:af:01:a4:b6:23: 78:9f:1a:1d:da:ea:ce:36:94:e3:5e:ae:3c:be:91: 55:7b:6c:0f:16:22:37:a1:d0:23:a0:3a:59:4b:93: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:33:CD:D5:2D:71:0C:49:70:95:13:82:01:CD:C0:BF:98:1D:72:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl X509v3 Authority Key Identifier: keyid:74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer sbgp-ipAddrBlock: critical IPv4: 192.225.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b5:8a:46:47:60:71:e5:bc:d0:44:99:bc:06:48:51:66:42: c8:0c:b7:e7:cb:e1:31:84:e4:0c:d2:9a:d8:36:32:cd:19:ef: 48:45:4a:a9:2c:18:cf:f4:65:47:aa:d4:f5:08:a9:3d:8a:c7: a1:75:60:48:5f:70:14:fc:60:04:92:55:47:f9:9f:1b:07:13: df:9f:da:8b:e8:e1:c1:f7:79:23:26:e8:a7:f0:8a:ca:74:01: ba:7c:eb:09:ac:c0:1f:2a:50:f4:90:4a:7e:92:99:47:ef:cd: 46:c0:f4:00:83:b3:df:b8:82:f1:65:95:6e:32:13:58:bc:a2: b1:8c:0c:be:79:f7:5e:f2:c3:7b:98:5d:be:04:2f:0c:1b:b0: 7a:99:25:26:2e:a2:6b:a4:ac:54:ce:8b:8e:37:61:53:38:33: bc:cc:68:fd:53:c7:aa:b6:bf:65:2b:5c:24:d9:e0:e3:24:f1: 85:ae:3f:c6:6d:e1:6c:4c:71:04:95:85:88:ec:b0:3a:e1:b7: 86:ff:58:40:c9:d7:47:ca:0d:a6:96:4c:8f:01:50:ac:11:e9: 2a:09:02:8d:ce:cd:18:76:b8:65:97:f5:85:fd:0a:dc:a7:31: 66:c1:5b:77:3d:c8:90:5b:ed:49:87:3f:d5:e0:83:e1:37:0f: a1:fe:23:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J00U/D99xoIU5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZkODA0YWYtNTAwNi00ODcxLTk2YTctZTdkZmFkOTdi OGI1MB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk MzExNDM2NDQtODNiYi00OWMwLWI5ZGUtYjY4ZjAxMWIzN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3g3IyLtaF2B2xiKGNF8w4G5GtkkGUZst0kY 7b9+Xwnzgr6Ozxc4rWxo+eJkamYcuCZTZXl88N9OXcvd7+WOKauomCHbXgsvr3t5 66TtRhwX11y8inp9ZSQJSxAtotmAc0TpPy3lRv4FBomqVRU3f3lFrRTya8dSB1jA KznOqLihIJxWEKzKeMp6da9jIIGDeebC0fVN68r0DWwC4cphfl21tCh8RrfoPAze HkPPF4Nzbx5iIJOqBSiyvo0YbvsFsM4QngpeJokc161uEpe5CbBsR+N66A2elTOE rwGktiN4nxod2urONpTjXq48vpFVe2wPFiI3odAjoDpZS5OR9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYzzdUtcQxJcJUTggHNwL+YHXI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4 MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2RmYWQ5N2I4YjUvZDljNGY0OTktOGRmYi0z ZmU5LThmMmUtNmFjNzQzNmY2MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZkODA0YWYtNTAwNi00ODcxLTk2 YTctZTdkZmFkOTdiOGI1LzFmZDgwNGFmLTUwMDYtNDg3MS05NmE3LWU3ZGZhZDk3 YjhiNS5jcmwwHwYDVR0jBBgwFoAUdELMmvH4xJQrc6BuHC931ugwvT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2Rm YWQ5N2I4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG1ikZHYHHlvNBEmbwGSFFmQsgMt+fL4TGE5AzSmtg2Ms0Z70hFSqks GM/0ZUeq1PUIqT2Kx6F1YEhfcBT8YASSVUf5nxsHE9+f2ovo4cH3eSMm6Kfwisp0 Abp86wmswB8qUPSQSn6SmUfvzUbA9ACDs9+4gvFllW4yE1i8orGMDL55917yw3uY Xb4ELwwbsHqZJSYuomukrFTOi443YVM4M7zMaP1Tx6q2v2UrXCTZ4OMk8YWuP8Zt 4WxMcQSVhYjssDrht4b/WEDJ10fKDaaWTI8BUKwR6SoJAo3OzRh2uGWX9YX9Ctyn MWbBW3c9yJBb7UmHP9Xgg+E3D6H+I5k= -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:50 2025 by rpki-client