$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa File: 47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa (raw, json) Hash identifier: zR4B2VjMSFbOmW1NxV/oAnpQE9LjWV7yxATkjsPeRow= Subject key identifier: 0C:0B:B6:EB:71:E7:41:85:AE:FE:1C:93:92:94:C1:F9:F2:89:B5:D4 Certificate issuer: /CN=ce029dcb-bb98-4569-a98c-6f77af488b38 Certificate serial: 010D0C9F4328584B84E774EF0DD2E88CA2B84EA0 Authority key identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 192.149.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:74:ef:0d:d2:e8:8c:a2:b8:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce029dcb-bb98-4569-a98c-6f77af488b38 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=044cbc23-8765-461a-81b0-9d676b7110a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:81:b0:59:9b:97:a0:57:ed:cc:80:69:1a: a7:da:90:e3:75:d8:92:85:3d:9e:d7:b2:da:5c:0f: 5b:10:c3:e5:bc:26:01:3e:32:24:b8:25:6f:26:7a: 78:39:31:6a:5a:2f:6e:da:80:40:09:c6:6f:18:3e: f1:c1:21:ae:46:14:8c:87:64:71:c5:8f:70:e5:6a: 7f:dc:0b:01:77:25:71:5c:02:00:a3:11:c6:16:0a: d7:b3:1c:57:bb:cf:b8:2b:9f:bc:8d:7c:94:fb:c6: 6d:af:bb:e3:b4:e5:65:83:e9:1c:ff:bc:ef:5c:5c: c2:3b:0f:20:84:05:33:5e:81:42:e5:2f:d3:94:20: 30:f9:59:4d:6e:e0:b7:84:3f:2f:55:7c:45:b4:05: bb:be:df:db:a7:c7:1a:03:c8:0a:65:88:83:ba:22: bf:fd:59:40:d8:e5:43:a5:ea:2b:09:9c:ed:0a:27: b3:4e:55:d2:6c:8f:99:1d:08:df:e4:4b:21:ce:f5: 5a:bb:6a:ed:c5:ac:9d:1f:50:b0:b4:7f:c4:e4:4d: a4:23:32:a2:ac:7a:98:33:16:f5:e7:ba:3a:d1:cf: 60:32:05:6f:18:68:39:c5:f7:ad:47:57:2d:15:cd: 5b:9a:45:c2:73:87:86:23:32:44:9d:4e:12:c5:38: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:B6:EB:71:E7:41:85:AE:FE:1C:93:92:94:C1:F9:F2:89:B5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/47d773a0-c301-3fdc-a5b4-de4e617c8fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl X509v3 Authority Key Identifier: keyid:C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer sbgp-ipAddrBlock: critical IPv4: 192.149.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:a3:93:be:4f:ba:48:6e:71:e4:ec:ae:f8:07:3e:98:fa: c4:9f:5b:a5:59:91:8b:87:31:1a:1a:55:cf:8e:19:a6:22:3a: 1f:c6:ff:df:8c:91:ad:bb:ef:8a:a2:d7:af:11:a0:ab:91:79: 95:a8:54:05:7b:22:2d:e6:8b:95:2d:23:d5:d4:1f:ba:2b:b7: ea:49:f1:b8:92:04:5e:59:71:23:92:af:66:d1:52:40:dd:55: 68:01:45:21:9a:35:6a:f4:e9:47:1e:b0:75:e5:a5:6c:39:b9: d6:40:33:64:9a:03:a5:32:7c:6d:b3:67:2e:21:e9:2d:43:94: 06:bd:5c:e3:51:a7:c1:34:e1:78:1f:22:6c:10:1a:2d:20:fd: 02:c8:ce:52:79:ed:c3:03:4e:c6:6e:4b:25:d1:72:d7:3f:47: a3:51:b9:15:2b:6c:9b:a7:8f:51:ff:1f:67:f9:3b:3d:ce:5e: dc:f8:d3:bc:08:69:1d:b7:07:5d:7c:f3:1d:39:ae:37:79:d3: 81:23:d6:64:7a:56:1d:b3:2d:41:21:66:2a:99:0c:0e:ce:6d: e4:4d:81:c2:26:42:9c:c9:a9:6a:f5:ab:b3:96:00:c5:b2:03: ce:3b:75:8d:67:8a:8b:45:7c:e9:f7:39:85:8b:84:16:5b:72: b2:ad:2f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53TvDdLojKK4TqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwMjlkY2ItYmI5OC00NTY5LWE5OGMtNmY3N2FmNDg4 YjM4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDQ0Y2JjMjMtODc2NS00NjFhLTgxYjAtOWQ2NzZiNzExMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUeBsFmbl6BX7cyAaRqn2pDjddiShT2e17La XA9bEMPlvCYBPjIkuCVvJnp4OTFqWi9u2oBACcZvGD7xwSGuRhSMh2RxxY9w5Wp/ 3AsBdyVxXAIAoxHGFgrXsxxXu8+4K5+8jXyU+8Ztr7vjtOVlg+kc/7zvXFzCOw8g hAUzXoFC5S/TlCAw+VlNbuC3hD8vVXxFtAW7vt/bp8caA8gKZYiDuiK//VlA2OVD peorCZztCiezTlXSbI+ZHQjf5EshzvVau2rtxaydH1CwtH/E5E2kIzKirHqYMxb1 57o60c9gMgVvGGg5xfetR1ctFc1bmkXCc4eGIzJEnU4SxThF5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwLtutx50GFrv4ck5KUwfnyibXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZTAy OWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3YWY0ODhiMzgvNDdkNzczYTAtYzMwMS0z ZmRjLWE1YjQtZGU0ZTYxN2M4ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2UwMjlkY2ItYmI5OC00NTY5LWE5 OGMtNmY3N2FmNDg4YjM4L2NlMDI5ZGNiLWJiOTgtNDU2OS1hOThjLTZmNzdhZjQ4 OGIzOC5jcmwwHwYDVR0jBBgwFoAUw1kTAhO8a5Q9CXF24duOpzeW3yAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZTAyOWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3 YWY0ODhiMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtUo5O+T7pIbnHk7K74Bz6Y+sSfW6VZkYuHMRoaVc+OGaYiOh/G/9+M ka2774qi168RoKuReZWoVAV7Ii3mi5UtI9XUH7ort+pJ8biSBF5ZcSOSr2bRUkDd VWgBRSGaNWr06UcesHXlpWw5udZAM2SaA6UyfG2zZy4h6S1DlAa9XONRp8E04Xgf ImwQGi0g/QLIzlJ57cMDTsZuSyXRctc/R6NRuRUrbJunj1H/H2f5Oz3OXtz407wI aR23B1188x05rjd504Ej1mR6Vh2zLUEhZiqZDA7ObeRNgcImQpzJqWr1q7OWAMWy A847dY1niotFfOn3OYWLhBZbcrKtL1g= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:06 2025 by rpki-client