$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa File: 4d0df983-efe5-30fb-9b23-cf9f866054a3.roa (raw, json) Hash identifier: dSjy0DYkJCiXdzJ1mKq1OVS2Us7mn+ZM/J+DKA+ISmk= Subject key identifier: 3C:E4:22:1B:58:26:11:CE:63:60:EF:FD:86:F4:F2:3D:30:B8:84:30 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B3F1C6001FE02D9CCC0235500 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 59895 IP address blocks: 192.186.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:60:01:fe:02:d9:cc:c0:23:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=7cf0818f-66c2-4fba-85ef-01542f9773db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bc:68:31:3d:98:7e:43:2e:14:b1:9d:68:23: 53:9e:b4:e8:b7:ae:23:b9:50:c0:ca:1d:79:2c:2c: 05:87:d9:cb:9e:84:79:3e:3f:5a:36:fa:a7:a7:30: e5:cd:c5:9b:74:0a:ce:04:75:06:24:c3:86:7c:d3: f0:c4:5c:28:4b:08:3d:4b:6b:82:3e:e2:97:15:1b: d4:45:70:1d:56:95:9a:a4:46:6e:2d:b5:14:3f:6b: 25:2a:52:bb:4e:fb:6f:35:c1:d8:28:62:f1:1d:31: 74:22:26:a7:79:bc:21:50:a6:88:bf:58:59:72:f8: f3:bc:44:3b:1c:24:c4:08:10:70:0a:cd:ad:bf:a3: 51:fb:9d:08:b9:2f:48:f7:b9:02:34:b4:d3:d3:03: 49:47:7c:d6:85:e0:f4:87:2e:85:34:8c:9d:5b:99: cf:4f:ab:6c:43:ba:4f:fd:53:69:c6:68:a1:14:6a: 8c:ca:87:00:12:47:5b:c4:7a:80:64:b6:42:bb:d2: 42:c4:83:21:ea:6a:e1:e2:3a:ab:25:b8:d5:f3:a3: e2:54:e4:17:e5:dc:d3:15:7b:d7:c1:f5:ac:8d:d8: c1:93:94:27:f1:b7:69:be:ec:96:55:60:0f:27:5c: cc:d6:57:8a:cf:da:f9:28:61:1b:b4:bb:8e:5d:2e: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E4:22:1B:58:26:11:CE:63:60:EF:FD:86:F4:F2:3D:30:B8:84:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.186.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:19:d0:30:e8:62:dc:2f:22:7b:3e:f6:18:0f:06:73:33:f4: a5:0d:90:6f:3c:ea:fa:65:1b:2b:1a:f6:d1:0d:e9:34:85:2d: b1:8e:d6:bd:cf:05:2a:bb:2b:6a:91:21:96:be:49:b3:36:49: e4:dc:4b:27:2c:50:4f:c9:f3:7f:c3:84:e2:f4:e7:2a:9d:17: fe:18:c1:ba:0b:58:4e:4c:c1:5f:15:62:83:28:c5:42:c8:25: d4:8d:8a:c2:0a:21:c0:63:96:01:bb:03:31:e6:e0:d8:ae:9c: e5:01:b9:12:f9:b9:2e:d2:a3:23:56:c1:4f:c8:c6:a3:a4:72: 24:1b:82:a8:75:fe:b6:f9:e8:e0:1c:20:57:a7:0a:d4:40:37: a7:b6:22:f6:90:b5:b0:fe:ae:4e:83:cf:81:e3:24:12:84:76: 83:23:d0:c1:c2:4b:c1:ed:90:c3:95:19:96:2c:19:dc:e1:64: ec:ef:ad:f3:5b:d7:25:65:31:a0:6d:6c:ca:85:2e:58:23:ee: f8:d7:fd:11:58:27:b8:6b:9b:0c:d8:a9:8f:00:c7:b9:28:5e: ff:17:c2:08:e8:4e:a5:87:3c:5a:18:2d:85:51:03:2c:0b:3d: b7:e0:d5:a0:0c:92:8b:44:9c:0d:a5:1d:8d:b1:ba:3c:53:f2: c3:16:21:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGAB/gLZzMAjVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk N2NmMDgxOGYtNjZjMi00ZmJhLTg1ZWYtMDE1NDJmOTc3M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LxoMT2YfkMuFLGdaCNTnrTot64juVDAyh15 LCwFh9nLnoR5Pj9aNvqnpzDlzcWbdArOBHUGJMOGfNPwxFwoSwg9S2uCPuKXFRvU RXAdVpWapEZuLbUUP2slKlK7TvtvNcHYKGLxHTF0IianebwhUKaIv1hZcvjzvEQ7 HCTECBBwCs2tv6NR+50IuS9I97kCNLTT0wNJR3zWheD0hy6FNIydW5nPT6tsQ7pP /VNpxmihFGqMyocAEkdbxHqAZLZCu9JCxIMh6mrh4jqrJbjV86PiVOQX5dzTFXvX wfWsjdjBk5Qn8bdpvuyWVWAPJ1zM1leKz9r5KGEbtLuOXS4F+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzkIhtYJhHOY2Dv/Yb08j0wuIQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNGQwZGY5ODMtZWZlNS0z MGZiLTliMjMtY2Y5Zjg2NjA1NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Z0DDoYtwvIns+9hgPBnMz9KUNkG886vplGysa9tEN6TSFLbGO1r3P BSq7K2qRIZa+SbM2SeTcSycsUE/J83/DhOL05yqdF/4YwboLWE5MwV8VYoMoxULI JdSNisIKIcBjlgG7AzHm4NiunOUBuRL5uS7SoyNWwU/IxqOkciQbgqh1/rb56OAc IFenCtRAN6e2IvaQtbD+rk6Dz4HjJBKEdoMj0MHCS8HtkMOVGZYsGdzhZOzvrfNb 1yVlMaBtbMqFLlgj7vjX/RFYJ7hrmwzYqY8Ax7koXv8XwgjoTqWHPFoYLYVRAywL Pbfg1aAMkotEnA2lHY2xujxT8sMWIUQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:32 2025 by rpki-client