$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa File: b2803a04-3084-37b9-b27d-9e21bebb101b.roa (raw, json) Hash identifier: aaCv4V30WlCiMQDUcyhU1uF+RJ2JmmJhSoXRNUCwBuE= Subject key identifier: 47:E2:A9:84:0D:E5:60:FF:20:7C:B4:61:07:EE:AA:D8:69:1C:96:4F Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584B8EACD5393D4A470F11AB1E80 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 192.184.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d5:39:3d:4a:47:0f:11:ab:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c2329b8a-f852-4968-a57e-d5fec7c30651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:3b:6f:c0:dd:fb:82:0d:5e:96:41:c8:ff: 18:a1:cb:18:a2:ee:a5:b4:97:e1:87:6e:23:4f:62: 90:35:7e:4b:4c:2f:9c:5f:d5:10:18:ea:d5:7a:fc: a1:c2:85:20:0d:0e:3a:d0:71:9b:f2:c2:c3:72:71: 6d:40:12:88:b1:59:6a:11:e0:bd:f5:f0:c9:a3:ab: 72:d4:00:82:25:29:9a:a1:79:03:b5:4a:29:10:c2: ac:12:26:4c:dc:be:ab:94:da:40:a1:8c:a4:0c:e9: 91:31:9f:57:e5:d3:ac:d0:37:d8:0f:31:06:32:93: 45:73:45:9e:c5:cf:5c:72:73:5e:6d:2a:b5:6f:80: 6c:e7:04:83:af:60:c5:30:a7:d6:2f:21:6a:b3:1d: aa:a0:16:4e:77:31:f5:7f:ee:6f:88:60:c6:b4:5b: 78:b9:c1:30:a0:46:60:6a:09:7e:b8:69:6b:90:a1: f9:c6:b2:ee:03:07:f1:ac:8e:8a:42:d4:07:e1:e0: 45:68:47:93:61:ef:32:18:a5:d2:07:72:9e:f8:ab: 2e:e0:73:d3:7a:8d:6c:95:9d:fe:25:f3:f9:d6:5a: f2:50:51:43:ce:a6:7b:6b:31:98:59:78:2a:31:6f: ef:16:93:43:30:11:07:e8:65:0c:1e:53:45:4a:5c: ce:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E2:A9:84:0D:E5:60:FF:20:7C:B4:61:07:EE:AA:D8:69:1C:96:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c5:9e:61:f2:27:37:0d:f9:ed:80:42:a9:7f:0b:9a:23:7d: 43:6d:66:d2:22:a8:48:c6:df:a7:86:4c:f3:73:0d:ea:56:b2: e5:44:8f:27:2a:69:4f:03:07:ca:ad:6f:ff:92:8f:38:64:5b: 9a:f8:0a:b8:e3:d6:4d:60:7b:84:b4:d2:6d:f2:41:db:f1:7e: 67:3b:7a:c7:43:35:ea:5c:69:fa:0a:fc:d1:2d:65:9c:3c:3e: 33:0d:ee:c4:9e:58:d0:09:85:e5:72:f7:2c:21:f3:86:e1:53: a4:c1:a9:9a:89:74:6f:50:32:ce:a7:be:21:ee:b7:35:24:bf: aa:61:12:6e:ab:34:cc:86:d1:14:dd:77:0b:10:ca:a7:b8:e5: b7:45:13:30:b8:c4:0f:27:22:5f:c9:72:aa:f8:24:96:36:02: 42:34:b6:37:2b:f3:38:71:25:98:50:5b:61:22:82:77:bb:77: cb:57:83:9d:66:8d:76:88:60:0e:2e:18:a6:b3:22:46:52:64: fd:ff:93:fb:a4:52:f7:6c:ee:6c:6a:15:16:37:ca:1b:5c:96: 1f:79:b9:6e:e8:16:0e:56:b3:e7:ca:d6:96:48:b6:2f:e1:5a: 64:41:83:d9:0e:35:9b:17:29:9e:b2:f2:e9:5a:6a:a0:34:fb: 09:43:01:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNU5PUpHDxGrHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzIzMjliOGEtZjg1Mi00OTY4LWE1N2UtZDVmZWM3YzMwNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCE7b8Dd+4INXpZByP8YocsYou6ltJfhh24j T2KQNX5LTC+cX9UQGOrVevyhwoUgDQ460HGb8sLDcnFtQBKIsVlqEeC99fDJo6ty 1ACCJSmaoXkDtUopEMKsEiZM3L6rlNpAoYykDOmRMZ9X5dOs0DfYDzEGMpNFc0We xc9ccnNebSq1b4Bs5wSDr2DFMKfWLyFqsx2qoBZOdzH1f+5viGDGtFt4ucEwoEZg agl+uGlrkKH5xrLuAwfxrI6KQtQH4eBFaEeTYe8yGKXSB3Ke+Ksu4HPTeo1slZ3+ JfP51lryUFFDzqZ7azGYWXgqMW/vFpNDMBEH6GUMHlNFSlzOSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfiqYQN5WD/IHy0YQfuqthpHJZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYjI4MDNhMDQtMzA4NC0z N2I5LWIyN2QtOWUyMWJlYmIxMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbFnmHyJzcN+e2AQql/C5ojfUNtZtIiqEjG36eGTPNzDepWsuVEjycq aU8DB8qtb/+SjzhkW5r4Crjj1k1ge4S00m3yQdvxfmc7esdDNepcafoK/NEtZZw8 PjMN7sSeWNAJheVy9ywh84bhU6TBqZqJdG9QMs6nviHutzUkv6phEm6rNMyG0RTd dwsQyqe45bdFEzC4xA8nIl/Jcqr4JJY2AkI0tjcr8zhxJZhQW2Eigne7d8tXg51m jXaIYA4uGKazIkZSZP3/k/ukUvds7mxqFRY3yhtclh95uW7oFg5Ws+fK1pZIti/h WmRBg9kONZsXKZ6y8ulaaqA0+wlDAdY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:56:04 2025 by rpki-client