$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa File: de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa (raw, json) Hash identifier: a8VHk0YY5UGvft4OMc6Xcz83bgt32sA3BXlDKAwxjME= Subject key identifier: 02:97:07:0D:86:7A:92:FA:8A:3E:85:BA:B6:44:D9:0A:7F:52:67:38 Certificate issuer: /CN=68875259-2927-45e7-be12-9528b42e0e51 Certificate serial: 010D0C9F4328584B609C8BF77FC4CD1586A9B100 Authority key identifier: 9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 8075 IP address blocks: 192.190.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8b:f7:7f:c4:cd:15:86:a9:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68875259-2927-45e7-be12-9528b42e0e51 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=7cd5d881-def2-4b56-bb88-27520c6d1252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:88:00:41:46:a2:99:95:fc:7a:ec:57:0a: 79:42:76:88:a4:ff:fb:d9:11:2c:ea:58:9f:18:f1: 6a:a0:43:95:ab:61:5b:84:04:2c:79:d0:30:c4:b1: ce:8c:a0:0c:90:21:69:5a:e0:86:c6:cd:6c:54:b8: 1c:0c:ed:36:c8:30:7c:df:77:48:76:95:99:bf:d4: ab:5d:cc:b1:4f:4b:11:07:63:6b:d2:0a:14:b8:30: cd:5d:ac:3c:da:ca:a2:da:5e:44:c0:f9:b4:3c:63: db:26:3d:66:85:6d:3d:31:13:1c:aa:1e:9a:0f:95: 08:77:e7:c6:c5:15:fd:14:4c:8c:ab:12:f3:03:a8: d6:8e:c9:14:5e:88:e3:6c:80:f4:c6:da:b0:4d:e2: cd:62:fe:d7:e7:cc:c2:f8:d2:31:93:30:8b:13:82: db:f0:a7:e3:fc:78:9e:0f:ff:d0:31:f1:10:d9:af: fb:cd:09:b8:9b:ea:5b:07:27:55:10:e1:3c:a7:72: 23:45:bf:7f:6c:33:87:35:ac:ff:f1:cc:44:c1:f2: c8:c6:b8:8c:fa:ee:1c:85:30:32:7f:ac:70:a4:26: a8:6b:2d:36:88:26:1e:cc:27:3d:28:05:87:42:45: db:76:58:f1:62:4f:4b:fc:78:94:1a:85:3f:7a:84: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:07:0D:86:7A:92:FA:8A:3E:85:BA:B6:44:D9:0A:7F:52:67:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl X509v3 Authority Key Identifier: keyid:9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer sbgp-ipAddrBlock: critical IPv4: 192.190.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ff:7d:1d:95:7b:77:61:38:86:df:50:27:b0:b0:8f:56:e3: 97:b5:93:91:9c:ee:57:67:0f:b0:93:ec:b7:56:31:40:31:54: 30:df:6e:30:7f:1e:58:fe:44:c3:8b:81:5a:20:07:70:99:31: 34:96:03:e6:c5:cc:a8:f6:16:1b:14:f9:c0:c7:ed:02:5c:43: c4:76:b8:b3:ca:9c:df:23:56:0e:d0:75:76:60:a0:04:4b:3e: 45:84:f2:22:ba:bf:ca:cd:33:71:e2:60:63:dc:e6:c4:13:f3: 90:39:31:56:97:35:fc:89:af:64:71:4b:53:3b:e1:42:9a:75: c6:2e:f8:50:16:4e:25:3f:48:05:6f:60:bb:e3:74:18:f6:f6: a4:df:fe:13:b6:d5:fd:41:ed:ab:3a:d9:92:69:28:0f:1a:80: 4e:0f:dc:e2:7e:e1:7c:4e:24:89:25:f8:d7:c6:4b:78:2c:6e: ce:f4:bf:8b:52:d5:4a:63:05:52:70:97:80:f9:0e:e1:f7:6e: c2:b4:c6:01:ea:3e:b7:73:d2:be:b3:db:a5:49:60:3f:db:7d: 67:8d:22:42:e8:7b:87:68:91:1e:a5:6c:c2:d2:cb:5d:97:68: 1f:da:4f:4b:16:f6:2b:19:ae:65:17:ed:88:ca:c4:05:8b:ee: d5:63:2c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnIv3f8TNFYapsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4NzUyNTktMjkyNy00NWU3LWJlMTItOTUyOGI0MmUw ZTUxMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk N2NkNWQ4ODEtZGVmMi00YjU2LWJiODgtMjc1MjBjNmQxMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaSIAEFGopmV/HrsVwp5QnaIpP/72REs6lif GPFqoEOVq2FbhAQsedAwxLHOjKAMkCFpWuCGxs1sVLgcDO02yDB833dIdpWZv9Sr XcyxT0sRB2Nr0goUuDDNXaw82sqi2l5EwPm0PGPbJj1mhW09MRMcqh6aD5UId+fG xRX9FEyMqxLzA6jWjskUXojjbID0xtqwTeLNYv7X58zC+NIxkzCLE4Lb8Kfj/Hie D//QMfEQ2a/7zQm4m+pbBydVEOE8p3IjRb9/bDOHNaz/8cxEwfLIxriM+u4chTAy f6xwpCaoay02iCYezCc9KAWHQkXbdljxYk9L/HiUGoU/eoRXOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKXBw2GepL6ij6FurZE2Qp/Umc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3 NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4YjQyZTBlNTEvZGUxZDkwYWItMzVlMS0z YTNkLWI3NWQtMmFjNjFmNTk2NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjg4NzUyNTktMjkyNy00NWU3LWJl MTItOTUyOGI0MmUwZTUxLzY4ODc1MjU5LTI5MjctNDVlNy1iZTEyLTk1MjhiNDJl MGU1MS5jcmwwHwYDVR0jBBgwFoAUn9/SRwQXIr/HvAiIkpaDEv8iz/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4 YjQyZTBlNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT/fR2Ve3dhOIbfUCewsI9W45e1k5Gc7ldnD7CT7LdWMUAxVDDfbjB/ Hlj+RMOLgVogB3CZMTSWA+bFzKj2FhsU+cDH7QJcQ8R2uLPKnN8jVg7QdXZgoARL PkWE8iK6v8rNM3HiYGPc5sQT85A5MVaXNfyJr2RxS1M74UKadcYu+FAWTiU/SAVv YLvjdBj29qTf/hO21f1B7as62ZJpKA8agE4P3OJ+4XxOJIkl+NfGS3gsbs70v4tS 1UpjBVJwl4D5DuH3bsK0xgHqPrdz0r6z26VJYD/bfWeNIkLoe4dokR6lbMLSy12X aB/aT0sW9isZrmUX7YjKxAWL7tVjLEA= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:09 2025 by rpki-client