$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa File: 2c309e9a-487a-3082-b76d-a570291dea7e.roa (raw, json) Hash identifier: 21etW0T9lvJ3Lbt+wFhjP2ULrEj96ERBY+2k7LeQ4LE= Subject key identifier: 6A:9C:9E:9B:A1:35:8A:14:29:60:89:03:67:1D:85:43:EA:A5:27:81 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584B8EACD4AD5EE094BC63819A00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 192.184.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d4:ad:5e:e0:94:bc:63:81:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=db254a77-08ad-4c83-b796-8bb874aeb274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:94:9f:ae:57:87:4e:fe:a1:2b:d6:4e:35: c2:ce:33:57:87:d2:3c:dd:9d:fc:ec:89:06:ba:fb: 61:7a:8a:a2:a7:8f:7f:06:ca:98:65:50:2f:ff:e5: f1:d5:f5:1a:3b:ee:0c:6f:d7:75:47:6d:6e:b4:bc: 44:4d:02:bf:c1:7f:48:6c:9a:2e:6b:40:f4:07:03: a0:02:24:df:a3:35:f5:48:37:ce:5b:20:fd:ce:ac: 58:5c:63:0d:fb:5e:43:9b:c7:7f:fd:fd:61:3b:02: f5:99:65:31:a6:8c:67:f8:be:4b:9e:25:5f:f5:b6: 24:29:94:3b:4b:ce:72:4b:0a:9d:b6:ec:e5:6a:a2: b3:60:16:0d:69:85:6c:f6:35:6f:2d:8e:64:87:c4: ba:8a:d9:c1:f0:30:1e:e3:4e:ba:d0:39:71:7a:6e: 4c:10:dc:9b:3b:bb:91:2d:22:0c:a2:a5:f1:48:c1: fe:50:ca:34:39:1c:fb:1d:d6:d2:09:a3:22:0d:b3: 13:b2:58:51:52:a0:cd:50:12:3f:3c:73:02:47:c0: ed:7c:1f:89:d2:4f:dc:d5:ba:05:f8:13:50:04:97: 0c:98:ce:1a:a3:53:4a:e1:ce:06:8e:23:0c:e9:93: 1c:5d:ad:9c:e6:d4:fa:27:01:b2:3d:b5:0f:14:89: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9C:9E:9B:A1:35:8A:14:29:60:89:03:67:1D:85:43:EA:A5:27:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:51:30:d0:22:3b:e6:1c:f4:d8:65:0d:c3:b5:9e:1b:ce:1b: 49:8e:53:ec:65:40:05:a3:fe:22:54:e4:f6:c8:20:c1:13:59: 72:1c:71:36:53:c1:ea:e5:f6:83:68:f1:8c:d2:f1:ed:ff:d4: 81:78:b5:84:b9:08:ca:d2:a6:b7:9d:fb:e2:76:88:e3:89:81: 6b:b8:9c:ec:ce:1f:5f:54:48:ce:f1:9b:19:ea:f1:4c:1d:3f: 7d:5d:6f:70:e0:9d:ee:4a:45:ce:a4:20:4f:d1:c2:36:19:2c: be:bf:43:a1:06:e5:20:89:2c:97:6f:20:51:a3:9a:b7:3d:5c: d1:be:f3:3f:c5:09:0e:c3:48:9e:69:72:39:62:14:fc:cd:9c: 0b:d2:1b:a2:85:eb:90:8d:d1:4e:4b:ab:0d:6f:b5:0a:99:5c: ab:78:c0:f6:50:9e:57:d5:3e:2e:41:0b:ec:a3:bb:b9:8d:41: 91:42:af:55:8d:93:22:1c:d6:f8:f1:51:22:26:04:1e:60:91: c3:f5:16:71:e5:ed:85:c0:e3:ea:84:5e:56:e9:1e:50:ba:3c: 0a:c7:b8:59:0d:83:70:c7:82:6e:61:c4:42:11:f3:30:93:a7: 89:91:60:19:00:a4:7a:83:16:d8:f6:09:8c:2f:1e:8c:7e:e9: e0:36:cc:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNStXuCUvGOBmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGIyNTRhNzctMDhhZC00YzgzLWI3OTYtOGJiODc0YWViMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3OUn65Xh07+oSvWTjXCzjNXh9I83Z387IkG uvtheoqip49/BsqYZVAv/+Xx1fUaO+4Mb9d1R21utLxETQK/wX9IbJoua0D0BwOg AiTfozX1SDfOWyD9zqxYXGMN+15Dm8d//f1hOwL1mWUxpoxn+L5LniVf9bYkKZQ7 S85ySwqdtuzlaqKzYBYNaYVs9jVvLY5kh8S6itnB8DAe40660Dlxem5MENybO7uR LSIMoqXxSMH+UMo0ORz7HdbSCaMiDbMTslhRUqDNUBI/PHMCR8DtfB+J0k/c1boF +BNQBJcMmM4ao1NK4c4GjiMM6ZMcXa2c5tT6JwGyPbUPFIkQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqcnpuhNYoUKWCJA2cdhUPqpSeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMmMzMDllOWEtNDg3YS0z MDgyLWI3NmQtYTU3MDI5MWRlYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9RMNAiO+Yc9NhlDcO1nhvOG0mOU+xlQAWj/iJU5PbIIMETWXIccTZT werl9oNo8YzS8e3/1IF4tYS5CMrSpred++J2iOOJgWu4nOzOH19USM7xmxnq8Uwd P31db3Dgne5KRc6kIE/RwjYZLL6/Q6EG5SCJLJdvIFGjmrc9XNG+8z/FCQ7DSJ5p cjliFPzNnAvSG6KF65CN0U5Lqw1vtQqZXKt4wPZQnlfVPi5BC+yju7mNQZFCr1WN kyIc1vjxUSImBB5gkcP1FnHl7YXA4+qEXlbpHlC6PArHuFkNg3DHgm5hxEIR8zCT p4mRYBkApHqDFtj2CYwvHox+6eA2zHQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:02 2025 by rpki-client