$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/f4df4166-2125-380c-b787-0a5024d4fde5.roa File: f4df4166-2125-380c-b787-0a5024d4fde5.roa (raw, json) Hash identifier: chhi6C5jxP62YOa9DmgzESrddolRJiODxMEq5FYYi74= Subject key identifier: F2:74:2F:B5:D7:47:91:3B:99:D5:8E:D2:3D:AC:35:84:13:07:C0:EB Certificate issuer: /CN=48e0215a-ab12-4255-b012-bfeb2c6ff823 Certificate serial: 010D0C9F4328584B84E77166D5DAB36966092C80 Authority key identifier: C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/f4df4166-2125-380c-b787-0a5024d4fde5.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 26213 IP address blocks: 192.158.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:71:66:d5:da:b3:69:66:09:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e0215a-ab12-4255-b012-bfeb2c6ff823 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f58a1da1-78bb-4ff3-9f78-2598ebdea1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:12:53:f1:89:fe:ff:99:33:1e:46:e8:02: 30:f0:f2:d6:25:92:d8:cc:c2:6d:9d:21:c4:37:c4: 30:b8:1a:ef:da:63:db:ca:ef:01:6d:7d:c2:8b:e5: 9f:78:da:89:08:d5:8d:61:b2:38:05:2e:96:71:a1: 8c:45:25:0f:ba:85:90:62:f9:98:a4:93:07:c0:0a: d1:36:90:e8:8f:2f:a7:06:9b:a5:fe:90:c4:5d:02: 4e:73:61:a3:41:62:74:27:c6:27:46:7c:60:53:c4: bf:72:27:70:41:d6:0c:d2:bb:71:8c:34:cc:b6:2c: 9f:3d:f9:91:22:c3:bd:73:f5:23:3b:a6:d3:62:1d: 01:a1:10:39:e6:0a:b2:cf:8f:8c:16:05:0f:4e:47: 10:bf:60:2c:aa:d8:70:38:79:ff:de:e7:11:07:31: 15:8d:ca:db:bc:cf:fc:7c:21:0c:72:05:d8:b5:1c: 6f:c1:be:20:56:80:ec:a4:a1:7e:4d:1a:a8:aa:1f: 7f:2a:4a:01:d1:f4:1e:aa:cf:e4:61:a3:7a:9a:bf: 06:bf:c6:a8:c7:d5:4d:6a:7e:04:35:a5:32:7c:f6: a1:2b:e8:30:a4:29:f4:e0:67:00:da:ce:45:76:5d: c7:86:be:6b:82:90:7d:11:14:31:cd:23:d5:cc:07: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:2F:B5:D7:47:91:3B:99:D5:8E:D2:3D:AC:35:84:13:07:C0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/f4df4166-2125-380c-b787-0a5024d4fde5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl X509v3 Authority Key Identifier: keyid:C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer sbgp-ipAddrBlock: critical IPv4: 192.158.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:71:b9:99:4a:69:d3:9d:10:c2:76:21:41:62:0a:c4:5c:f0: b0:75:39:66:32:17:6b:de:13:23:94:8b:9a:38:30:71:47:13: 67:12:1c:2a:9b:5e:1e:4a:18:22:20:49:10:49:3d:49:cb:dc: ff:3a:42:f7:94:f1:36:75:e6:e2:fc:55:d7:d7:40:1e:ac:9f: c9:e3:eb:ed:aa:95:bf:70:1a:9e:94:4e:82:11:31:b1:49:98: cc:7a:ff:63:17:cd:0b:86:b1:a8:20:d2:35:29:f0:d5:a0:ea: 75:65:29:15:ba:45:ba:1b:38:be:f1:d7:80:d7:d8:63:ac:e3: 38:33:0e:0a:b1:ff:e9:90:26:2e:c1:4f:60:e8:9d:fe:b7:11: 50:c9:4c:50:df:79:25:74:e5:02:bb:3c:62:e0:50:b3:20:24: b4:a8:f7:e7:97:16:d3:33:a7:f4:e8:95:d9:50:87:be:0b:dd: c3:4e:d7:5b:ef:9a:a4:1e:69:b9:4f:df:e3:58:7d:e3:f0:11: c9:f3:2a:eb:11:42:16:e6:ba:68:4d:87:4a:62:f1:15:c5:2a: ec:f9:6b:cf:81:4c:33:4b:f0:08:88:75:40:04:ef:c4:4b:4e: f2:0c:73:43:32:47:a2:cd:12:5c:e5:07:9c:1a:ca:39:87:5d: 59:73:cc:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Fm1dqzaWYJLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlMDIxNWEtYWIxMi00MjU1LWIwMTItYmZlYjJjNmZm ODIzMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZjU4YTFkYTEtNzhiYi00ZmYzLTlmNzgtMjU5OGViZGVhMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoukSU/GJ/v+ZMx5G6AIw8PLWJZLYzMJtnSHE N8QwuBrv2mPbyu8BbX3Ci+WfeNqJCNWNYbI4BS6WcaGMRSUPuoWQYvmYpJMHwArR NpDojy+nBpul/pDEXQJOc2GjQWJ0J8YnRnxgU8S/cidwQdYM0rtxjDTMtiyfPfmR IsO9c/UjO6bTYh0BoRA55gqyz4+MFgUPTkcQv2AsqthwOHn/3ucRBzEVjcrbvM/8 fCEMcgXYtRxvwb4gVoDspKF+TRqoqh9/KkoB0fQeqs/kYaN6mr8Gv8aox9VNan4E NaUyfPahK+gwpCn04GcA2s5Fdl3Hhr5rgpB9ERQxzSPVzActMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJ0L7XXR5E7mdWO0j2sNYQTB8DrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OGUw MjE1YS1hYjEyLTQyNTUtYjAxMi1iZmViMmM2ZmY4MjMvZjRkZjQxNjYtMjEyNS0z ODBjLWI3ODctMGE1MDI0ZDRmZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDhlMDIxNWEtYWIxMi00MjU1LWIw MTItYmZlYjJjNmZmODIzLzQ4ZTAyMTVhLWFiMTItNDI1NS1iMDEyLWJmZWIyYzZm ZjgyMy5jcmwwHwYDVR0jBBgwFoAUxr/+tzkRXGk8ZcfFj5fWNWVLzPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OGUwMjE1YS1hYjEyLTQyNTUtYjAxMi1iZmVi MmM2ZmY4MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlxuZlKadOdEMJ2IUFiCsRc8LB1OWYyF2veEyOUi5o4MHFHE2cSHCqb Xh5KGCIgSRBJPUnL3P86QveU8TZ15uL8VdfXQB6sn8nj6+2qlb9wGp6UToIRMbFJ mMx6/2MXzQuGsagg0jUp8NWg6nVlKRW6RbobOL7x14DX2GOs4zgzDgqx/+mQJi7B T2Donf63EVDJTFDfeSV05QK7PGLgULMgJLSo9+eXFtMzp/ToldlQh74L3cNO11vv mqQeablP3+NYfePwEcnzKusRQhbmumhNh0pi8RXFKuz5a8+BTDNL8AiIdUAE78RL TvIMc0MyR6LNElzlB5wayjmHXVlzzE8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:49 2025 by rpki-client