$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa File: 31421922-aedf-3672-abd4-cfa24a054705.roa (raw, json) Hash identifier: JbkYlDAJRxvtVV4FXjDnerOjKh9tN8OJYrWEL0EGTaA= Subject key identifier: A0:99:A2:85:11:87:F6:16:69:47:A3:A9:A2:5C:66:2E:7F:28:BE:EE Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584B8BE22E1AE1516E13A7F82000 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 396982 IP address blocks: 192.19.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2e:1a:e1:51:6e:13:a7:f8:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=2bcc5d42-ce41-4023-bdb9-75e2ade81b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:60:03:34:23:ea:26:06:6a:58:2e:65:93: 94:74:c4:60:db:d1:f1:04:31:49:de:c9:ee:d7:ed: d8:d7:48:60:aa:ae:3a:b4:cd:2c:8e:45:8c:8f:a8: 10:aa:f7:8f:f4:65:a0:86:5e:01:35:12:c7:1d:c6: 03:b4:3b:20:59:0f:c5:61:26:b8:7d:29:8a:41:78: 59:c2:4c:46:ab:ac:49:7c:a1:50:5b:2b:a5:ff:51: 56:6d:9f:39:7f:f5:cd:4f:87:f5:92:0f:bd:9c:05: 60:2a:e6:72:d7:eb:fa:d5:d1:ab:af:fb:08:ec:d2: cf:96:ab:1d:4d:e6:de:e1:03:24:f8:41:61:35:6e: 65:3f:61:73:cc:ce:f4:8b:c9:77:9c:aa:89:e5:13: d0:e5:a5:1b:55:3f:55:9b:23:50:08:db:44:fb:83: 09:28:bf:5b:c5:10:7e:30:58:64:db:47:9c:24:b6: aa:05:f1:0c:f8:70:8e:6f:6f:d1:73:42:c9:74:e3: b4:e0:ec:f2:2a:41:c4:ca:ff:cb:49:69:19:45:d3: d7:85:a1:e5:d0:db:b3:35:8d:5a:d3:8e:bd:20:2a: 17:53:67:eb:2c:30:91:a2:ce:de:16:8b:16:77:3e: 07:1a:dd:ca:12:3a:0f:d6:4b:9d:76:d7:cf:a2:ec: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:99:A2:85:11:87:F6:16:69:47:A3:A9:A2:5C:66:2E:7F:28:BE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:10:82:10:9e:30:50:de:5b:16:fe:09:4d:13:c3:52:97:22: 86:9c:b5:ba:ec:68:4d:d5:a1:1e:f2:3b:68:ad:92:55:77:aa: cb:ae:a6:a4:41:88:72:f4:3d:00:26:dd:18:5e:7d:9a:df:63: d0:d5:40:fd:9d:4c:c3:21:c7:46:30:25:26:68:94:dc:f0:ea: 2c:32:fb:78:0a:e4:cc:75:d5:7b:7a:d4:b4:3e:38:ad:99:4b: 14:2e:4a:3e:e9:e4:a5:92:47:33:0a:84:04:cc:31:01:a4:dd: 4f:d7:36:e3:b3:24:5c:a2:ad:a6:d4:6c:74:3c:7a:2c:e5:cb: 4a:e9:d6:8b:f1:c4:10:1b:38:84:c8:c2:bc:43:c5:06:7c:bf: d5:72:01:bc:e0:b1:17:21:97:7c:a2:19:95:99:c4:4d:f2:be: 2d:7b:d1:fa:33:45:35:c5:ea:2f:e0:2d:91:56:da:4a:49:98: 6e:1b:3c:31:dd:1e:49:c2:fb:3a:90:7c:5f:48:7b:3a:e8:db: 53:20:df:2d:98:6f:c2:1b:b3:07:f2:34:a8:43:68:15:8e:17: 27:37:98:73:8f:1a:64:b5:f0:51:f8:4f:32:05:b2:a7:9c:55: 31:02:a4:ea:b4:69:9d:f4:36:52:13:90:36:d2:6e:d6:6f:69: 1e:6a:da:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4i4a4VFuE6f4IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MmJjYzVkNDItY2U0MS00MDIzLWJkYjktNzVlMmFkZTgxYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDZgAzQj6iYGalguZZOUdMRg29HxBDFJ3snu 1+3Y10hgqq46tM0sjkWMj6gQqveP9GWghl4BNRLHHcYDtDsgWQ/FYSa4fSmKQXhZ wkxGq6xJfKFQWyul/1FWbZ85f/XNT4f1kg+9nAVgKuZy1+v61dGrr/sI7NLPlqsd Tebe4QMk+EFhNW5lP2FzzM70i8l3nKqJ5RPQ5aUbVT9VmyNQCNtE+4MJKL9bxRB+ MFhk20ecJLaqBfEM+HCOb2/Rc0LJdOO04OzyKkHEyv/LSWkZRdPXhaHl0NuzNY1a 0469ICoXU2frLDCRos7eFosWdz4HGt3KEjoP1kuddtfPouxUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCZooURh/YWaUejqaJcZi5/KL7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMzE0MjE5MjItYWVkZi0z NjcyLWFiZDQtY2ZhMjRhMDU0NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBP/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwQghCeMFDeWxb+CU0Tw1KXIoactbrsaE3VoR7yO2itklV3qsuupqRB iHL0PQAm3RhefZrfY9DVQP2dTMMhx0YwJSZolNzw6iwy+3gK5Mx11Xt61LQ+OK2Z SxQuSj7p5KWSRzMKhATMMQGk3U/XNuOzJFyirabUbHQ8eizly0rp1ovxxBAbOITI wrxDxQZ8v9VyAbzgsRchl3yiGZWZxE3yvi170fozRTXF6i/gLZFW2kpJmG4bPDHd HknC+zqQfF9Iezro21Mg3y2Yb8IbswfyNKhDaBWOFyc3mHOPGmS18FH4TzIFsqec VTECpOq0aZ30NlITkDbSbtZvaR5q2t8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:10 2025 by rpki-client