$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa File: 04da0af8-7c12-3869-a040-797710feccc2.roa (raw, json) Hash identifier: GryOqj2z967rC3p2ZW8oCZVBm6xZl7XJKGtqkTeQoA4= Subject key identifier: DA:D3:31:F7:E1:F9:3C:56:F3:C5:F2:72:E4:47:95:6A:C8:4B:DA:5D Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B89177048AE69F42DBC355B40 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 1206 IP address blocks: 192.101.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:70:48:ae:69:f4:2d:bc:35:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=ba87c292-0442-452b-a942-0acdf13e2ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:0f:73:3a:1e:06:70:32:e6:93:51:1d:41: ad:b4:5a:b9:e5:27:8c:70:14:5a:f8:87:45:c3:1a: 36:a4:d4:e5:b1:b0:c1:82:31:8f:0f:1c:5c:25:f9: ce:b9:50:fe:81:9d:97:ce:9f:f1:9c:e1:a8:ac:c0: 31:19:c5:b3:4f:57:70:21:1e:4c:e5:b9:e4:db:39: 2a:a4:8e:f1:a8:7d:03:a2:a9:f6:09:15:76:2f:f2: 84:39:8f:25:cc:f0:a4:e0:bd:5b:9c:89:87:23:8f: ad:85:08:e9:24:cb:47:f3:04:17:58:22:3f:54:a9: 8e:32:bb:1b:f5:0d:2f:08:e3:c2:46:7d:7b:e9:b6: ae:23:83:be:85:8f:81:b0:fa:67:40:50:05:18:a9: 7c:9e:53:c1:cd:08:68:4f:77:04:a4:58:03:7a:ca: 13:79:55:9b:1c:01:dc:a0:20:46:cd:0e:7e:88:b3: 7a:3e:48:78:f9:0a:78:f5:23:d3:89:54:1f:77:80: 96:b6:bb:6b:0c:f7:d1:da:50:95:4c:62:1d:02:10: 38:d4:4d:64:8e:7a:92:f1:d9:c1:12:31:b9:ab:a0: e5:bd:68:9a:87:8e:72:2a:a6:c0:a8:30:6d:e3:83: d2:04:31:e5:2d:5a:dd:7e:0a:c0:65:71:a2:70:3a: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:31:F7:E1:F9:3C:56:F3:C5:F2:72:E4:47:95:6A:C8:4B:DA:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/04da0af8-7c12-3869-a040-797710feccc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3e:45:18:0b:e9:3a:eb:fa:10:57:78:7f:5a:5f:73:20:a0: 0c:ab:fd:2b:45:56:a4:9c:44:fc:62:2a:84:97:3c:4b:6d:a8: fb:bd:21:62:ab:b5:c9:d1:15:d4:b3:72:e5:56:6d:e9:7e:3e: b2:57:99:5c:77:8b:b0:9e:1c:5a:21:0a:70:3a:07:b2:ac:1c: 34:7f:79:40:27:57:2e:fb:48:26:37:11:c4:b8:c9:a2:59:af: e0:8d:7b:06:65:37:45:3e:da:09:c3:1d:c4:b7:b9:66:ad:11: d0:ca:02:c1:cc:1a:10:bf:f2:77:37:45:46:ed:53:7e:7d:b8: a7:c3:e2:fb:1b:c9:7a:f7:e4:da:93:c3:34:ac:bd:25:2d:4d: 1b:5d:df:9e:80:45:5a:0c:31:42:78:64:be:22:14:92:a3:58: fd:b1:6d:8a:f3:a5:35:83:42:a1:58:14:5e:5d:c5:0b:06:c9: f3:16:1d:6b:14:50:ba:2a:58:f6:f0:fd:14:bf:b6:58:88:93: 9e:d9:6d:59:37:5b:1a:59:bc:41:35:07:bd:bb:41:3c:8e:4a: c4:bb:1b:0b:3c:27:40:d4:9e:fe:05:52:41:e4:76:e4:ab:2f: c7:1a:23:5a:6d:d1:84:41:4b:99:39:dc:fe:f0:dd:0d:92:67: c8:49:d9:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3BIrmn0Lbw1W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YmE4N2MyOTItMDQ0Mi00NTJiLWE5NDItMGFjZGYxM2UyYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgUPczoeBnAy5pNRHUGttFq55SeMcBRa+IdF wxo2pNTlsbDBgjGPDxxcJfnOuVD+gZ2Xzp/xnOGorMAxGcWzT1dwIR5M5bnk2zkq pI7xqH0Doqn2CRV2L/KEOY8lzPCk4L1bnImHI4+thQjpJMtH8wQXWCI/VKmOMrsb 9Q0vCOPCRn176bauI4O+hY+BsPpnQFAFGKl8nlPBzQhoT3cEpFgDesoTeVWbHAHc oCBGzQ5+iLN6Pkh4+Qp49SPTiVQfd4CWtrtrDPfR2lCVTGIdAhA41E1kjnqS8dnB EjG5q6DlvWiah45yKqbAqDBt44PSBDHlLVrdfgrAZXGicDpO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrTMffh+TxW88XycuRHlWrIS9pdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMDRkYTBhZjgtN2MxMi0z ODY5LWEwNDAtNzk3NzEwZmVjY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc+RRgL6Trr+hBXeH9aX3MgoAyr/StFVqScRPxiKoSXPEttqPu9IWKr tcnRFdSzcuVWbel+PrJXmVx3i7CeHFohCnA6B7KsHDR/eUAnVy77SCY3EcS4yaJZ r+CNewZlN0U+2gnDHcS3uWatEdDKAsHMGhC/8nc3RUbtU359uKfD4vsbyXr35NqT wzSsvSUtTRtd356ARVoMMUJ4ZL4iFJKjWP2xbYrzpTWDQqFYFF5dxQsGyfMWHWsU ULoqWPbw/RS/tliIk57ZbVk3WxpZvEE1B727QTyOSsS7Gws8J0DUnv4FUkHkduSr L8caI1pt0YRBS5k53P7w3Q2SZ8hJ2ds= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:30 2025 by rpki-client