$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa File: 8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa (raw, json) Hash identifier: O2AUdIe8Lwp4I76sCQ4kDebjbTMYLhXhqFoPDxmtqm0= Subject key identifier: 4B:5D:78:95:DB:C7:2C:D9:67:27:10:EF:1E:F2:D3:B1:99:F6:AD:82 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B8BE210242CE7B0EA2E9BA780 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 1207 IP address blocks: 192.231.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:10:24:2c:e7:b0:ea:2e:9b:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=74c98c32-8442-438f-8708-d78e5f10ed7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:af:a7:9a:23:08:43:12:2f:d7:de:0d:8a:7f: 2e:a8:64:35:66:a3:51:da:ba:70:ec:80:cc:15:b5: c9:c2:fa:84:44:85:ab:e9:80:e5:8c:21:c0:66:55: b9:8c:7a:db:ff:1e:d4:6e:3b:a9:1b:87:cf:3e:a5: ab:e3:25:9e:07:e3:fd:52:80:61:be:a6:0b:22:d2: 81:e0:2e:0c:40:a8:13:38:13:53:22:9e:76:98:51: 75:bc:b5:4d:a8:c9:ff:a6:aa:5a:90:c4:81:09:7c: ac:83:ab:cc:a1:70:38:60:56:79:28:a5:f5:a1:a2: 1d:37:f9:7d:38:10:89:49:09:3b:59:30:27:41:7d: a8:ff:a2:01:f0:f9:ee:a9:8e:f1:e1:ff:25:6e:b5: 1f:0d:cb:85:89:d6:1f:0a:c6:91:95:90:f3:cf:9e: 62:55:5f:ae:2f:dd:5d:c8:1f:2c:43:8f:1b:74:5a: 72:a6:d2:fd:91:d8:94:c0:68:82:70:cb:71:71:1c: 58:3b:41:37:a8:4d:57:67:83:93:20:51:7f:47:f0: b1:59:ae:8f:f1:00:62:6e:8a:a1:44:74:8e:df:f9: 32:a4:f8:18:78:56:ed:6d:25:6a:dd:2e:8b:15:e0: 2a:73:a5:a4:c2:f2:49:a3:23:43:d0:8f:08:64:0c: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:78:95:DB:C7:2C:D9:67:27:10:EF:1E:F2:D3:B1:99:F6:AD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8e36b8ab-b1b8-37a9-bf95-ef5f08b25f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.231.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a0:db:57:29:92:35:81:f2:c6:f2:fe:97:63:40:59:20:7b: f8:81:85:b9:87:12:ed:19:ea:6a:7b:e8:2b:f8:fd:8b:85:7c: 99:ff:52:04:00:ac:49:a2:1c:06:ae:a5:db:08:dc:9e:00:74: e7:8e:f2:c7:7c:4e:a2:5b:29:d2:f9:33:ee:81:8c:16:a4:29: 83:4f:64:3b:51:e0:73:33:f9:a3:b5:79:28:e8:a7:da:2c:62: de:f0:3b:1c:d8:f2:1e:4f:27:c5:4d:48:61:00:42:3d:ff:6e: e0:11:a0:25:68:0b:4b:6c:8a:8d:48:09:b8:ee:ac:17:72:54: b3:d6:4d:3e:38:41:f4:19:51:c4:31:50:03:71:0e:20:86:16: f0:07:0b:6d:06:9e:f3:70:81:ab:f0:7e:ae:7f:ac:e9:0e:75: f0:c9:12:7c:14:b3:98:63:e6:74:3b:3e:45:9d:70:69:fe:a3: f9:66:43:9f:27:5a:8a:00:89:5f:77:4f:5a:7a:da:48:91:ed: 7f:b5:69:f6:eb:02:4b:3c:52:14:77:38:ab:c8:27:ea:72:d0: 6e:f3:e7:cf:21:8c:70:f6:79:68:b5:a6:0f:3e:55:88:60:57: 1c:57:ed:4e:b7:d6:c5:35:63:8c:31:04:dc:fe:c5:46:dc:98: 1e:bc:56:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hAkLOew6i6bp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NzRjOThjMzItODQ0Mi00MzhmLTg3MDgtZDc4ZTVmMTBlZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK+nmiMIQxIv194Nin8uqGQ1ZqNR2rpw7IDM FbXJwvqERIWr6YDljCHAZlW5jHrb/x7UbjupG4fPPqWr4yWeB+P9UoBhvqYLItKB 4C4MQKgTOBNTIp52mFF1vLVNqMn/pqpakMSBCXysg6vMoXA4YFZ5KKX1oaIdN/l9 OBCJSQk7WTAnQX2o/6IB8PnuqY7x4f8lbrUfDcuFidYfCsaRlZDzz55iVV+uL91d yB8sQ48bdFpyptL9kdiUwGiCcMtxcRxYO0E3qE1XZ4OTIFF/R/CxWa6P8QBiboqh RHSO3/kypPgYeFbtbSVq3S6LFeAqc6WkwvJJoyND0I8IZAxMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtdeJXbxyzZZycQ7x7y07GZ9q2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvOGUzNmI4YWItYjFiOC0z N2E5LWJmOTUtZWY1ZjA4YjI1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKag21cpkjWB8sby/pdjQFkge/iBhbmHEu0Z6mp76Cv4/YuFfJn/UgQA rEmiHAaupdsI3J4AdOeO8sd8TqJbKdL5M+6BjBakKYNPZDtR4HMz+aO1eSjop9os Yt7wOxzY8h5PJ8VNSGEAQj3/buARoCVoC0tsio1ICbjurBdyVLPWTT44QfQZUcQx UANxDiCGFvAHC20GnvNwgavwfq5/rOkOdfDJEnwUs5hj5nQ7PkWdcGn+o/lmQ58n WooAiV93T1p62kiR7X+1afbrAks8UhR3OKvIJ+py0G7z588hjHD2eWi1pg8+VYhg VxxX7U631sU1Y4wxBNz+xUbcmB68VmA= -----END CERTIFICATE-----Generated at Tue Oct 21 04:23:15 2025 by rpki-client