$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: a49nWQFzgDO41+GfkivwIZY7pZH1wGOERgxWxp4aFrI= Subject key identifier: 9B:3B:28:2B:1B:96:EF:89:51:6A:95:CE:3F:BA:AF:B7:F8:8E:35:09 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE223C936E3E9B3B8CCC9E0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:23:c9:36:e3:e9:b3:b8:cc:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=e88dda11-e50a-4ca4-8348-a7a290e3955c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:04:94:33:5f:91:53:1e:20:61:b9:bf:b5: ff:c9:a3:69:64:56:67:a3:43:fa:51:a1:58:80:33: ba:69:07:6b:cf:57:26:5a:81:b9:07:2d:ff:3b:29: 98:bc:9f:69:3b:bf:15:91:1b:b5:ec:08:3f:f8:ef: c2:28:8b:ab:8a:d3:93:0c:75:52:0d:b7:64:78:43: 90:04:dc:f5:50:8a:0d:2e:c2:72:bf:46:49:f8:6a: 67:b2:da:d3:0a:9d:53:d4:d8:b3:9e:26:f9:f9:01: 95:03:92:04:94:ed:f6:64:0e:27:29:25:e2:09:c2: a6:e6:e8:e0:07:c6:52:50:78:5e:ed:9f:65:86:df: 50:28:36:a7:74:d8:be:6c:06:fd:0d:84:2d:64:7c: de:06:f0:b1:0f:af:8d:9f:00:0e:b3:dd:40:28:25: a0:96:9f:72:43:b1:02:0b:40:10:5d:14:55:a5:b4: 3e:99:9a:b1:85:47:76:5b:e7:b4:8f:27:a9:3e:31: 74:d0:2a:99:72:c2:81:ca:54:71:b2:4e:f7:f9:b1: 7f:6b:bd:44:01:82:59:c1:dd:85:82:86:9c:c3:c1: fb:95:14:90:4c:85:ce:b8:fc:e0:94:ba:8b:f0:c5: 4d:49:9b:1c:5b:21:8e:6d:b3:b3:08:68:05:77:a6: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3B:28:2B:1B:96:EF:89:51:6A:95:CE:3F:BA:AF:B7:F8:8E:35:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f2:99:5b:e1:f6:46:49:a5:a7:88:22:8c:c2:d7:ef:ed:ac: 61:bb:fe:94:3f:d7:cd:46:f5:fc:32:00:ae:58:b8:61:d2:54: 89:62:c7:47:25:e1:7e:4d:d6:32:ab:e1:26:0e:59:85:29:31: 40:b5:a2:5c:f7:0e:b7:e5:c1:ad:f7:55:86:7f:a0:15:65:13: 7c:1f:dd:8e:ea:6a:7c:42:a4:1d:64:7c:3e:65:73:22:95:76: fa:9b:06:8b:4d:46:b2:86:e5:09:be:fd:c8:2b:07:99:74:a7: 3c:92:47:1e:40:a2:c5:80:3f:f5:27:81:67:4b:04:e1:56:d7: 38:64:5e:96:4b:26:3c:14:12:21:f3:e8:3f:ac:0c:b8:d7:25: ea:86:fe:93:f8:f3:fc:20:2f:2b:5d:d8:7b:03:af:96:7f:e2: 9a:5b:0d:ce:57:b8:ab:3d:89:5b:86:32:7f:92:bd:39:a1:02: 3e:80:88:f8:f5:d1:d3:a0:91:1d:05:b5:db:ce:c7:9a:49:e5: ab:0d:9a:06:55:c4:a6:ab:b4:cd:24:49:18:56:21:80:86:2e: fe:93:70:53:01:f9:5f:88:50:ac:2b:6e:90:d4:36:38:12:16: e8:e3:fe:46:cb:6d:59:28:f5:c1:bd:29:2f:ab:e3:8c:60:56: d0:8b:62:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iPJNuPps7jMyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZTg4ZGRhMTEtZTUwYS00Y2E0LTgzNDgtYTdhMjkwZTM5NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aYElDNfkVMeIGG5v7X/yaNpZFZno0P6UaFY gDO6aQdrz1cmWoG5By3/OymYvJ9pO78VkRu17Ag/+O/CKIuritOTDHVSDbdkeEOQ BNz1UIoNLsJyv0ZJ+GpnstrTCp1T1Niznib5+QGVA5IElO32ZA4nKSXiCcKm5ujg B8ZSUHhe7Z9lht9QKDandNi+bAb9DYQtZHzeBvCxD6+NnwAOs91AKCWglp9yQ7EC C0AQXRRVpbQ+mZqxhUd2W+e0jyepPjF00CqZcsKBylRxsk73+bF/a71EAYJZwd2F goacw8H7lRSQTIXOuPzglLqL8MVNSZscWyGObbOzCGgFd6ZYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs7KCsblu+JUWqVzj+6r7f4jjUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXymVvh9kZJpaeIIozC1+/trGG7/pQ/181G9fwyAK5YuGHSVIlix0cl 4X5N1jKr4SYOWYUpMUC1olz3Drflwa33VYZ/oBVlE3wf3Y7qanxCpB1kfD5lcyKV dvqbBotNRrKG5Qm+/cgrB5l0pzySRx5AosWAP/UngWdLBOFW1zhkXpZLJjwUEiHz 6D+sDLjXJeqG/pP48/wgLytd2HsDr5Z/4ppbDc5XuKs9iVuGMn+SvTmhAj6AiPj1 0dOgkR0FtdvOx5pJ5asNmgZVxKartM0kSRhWIYCGLv6TcFMB+V+IUKwrbpDUNjgS Fujj/kbLbVko9cG9KS+r44xgVtCLYmk= -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:30 2025 by rpki-client