$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa File: 70a2edab-599b-37b9-90c6-3e15b53af115.roa (raw, json) Hash identifier: NgtjRrkdOQkU7ED6NtA0kwvl4ob+sOUQjlwk0+qsjRI= Subject key identifier: 38:27:61:CC:8B:CA:43:11:40:99:D0:F2:8F:44:E5:CD:CE:50:95:84 Certificate issuer: /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Certificate serial: 010D0C9F4328584B8EACD3F36CC64CA3A73DCD00 Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 397701 IP address blocks: 192.64.12.0/24 maxlen: 24 199.193.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d3:f3:6c:c6:4c:a3:a7:3d:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=243482d9-04b8-41d8-8c11-11d7a02b313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:43:ee:5c:ee:95:93:c8:d7:4b:b7:3c:61:5e: d4:a7:78:47:c8:76:1c:20:c5:95:bd:1a:f7:a5:0c: 42:22:99:5c:f7:cb:05:32:fe:3b:a4:41:f1:d4:76: fe:1b:38:b4:c0:7a:30:af:c6:1e:d2:0d:3b:47:37: b4:53:d9:c8:f3:3a:b1:80:aa:8d:0a:9c:99:ba:82: 7d:11:ac:e7:45:d3:d6:4d:16:bf:1f:cd:8e:67:13: 31:7e:e7:4a:8a:fd:71:ae:7f:c0:ad:41:c4:c0:85: 75:06:35:5a:52:33:51:52:c2:6f:4e:c5:a0:f8:c7: e0:b8:1a:71:87:0b:7b:91:7d:13:b2:3b:18:7b:28: d2:b3:69:2a:10:0a:9b:95:8e:18:be:b6:0a:53:10: 27:76:ad:ae:87:7d:07:39:8b:77:c2:cf:ca:b4:04: 98:e6:62:f2:12:4d:cc:a1:1a:18:2c:4d:8b:e0:6b: 83:b5:f8:ee:1d:d9:68:0d:26:db:63:ca:4c:b3:e3: 2a:e4:c1:cd:14:01:2a:f1:84:58:61:c8:01:8f:82: 8c:27:8d:f2:8a:8d:53:c7:72:a5:48:95:61:5a:98: 7f:d0:76:f1:ca:2a:14:43:e1:06:3d:eb:83:52:20: 9f:ec:8a:4a:64:65:22:b6:44:20:91:55:e8:82:4b: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:61:CC:8B:CA:43:11:40:99:D0:F2:8F:44:E5:CD:CE:50:95:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl X509v3 Authority Key Identifier: keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer sbgp-ipAddrBlock: critical IPv4: 192.64.12.0/24 199.193.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:69:ca:12:0b:14:39:b9:df:d3:5a:3d:e4:11:dc:e9:5e:96: 57:0a:bc:33:cd:40:d9:89:0b:6e:4c:14:2a:e2:b4:e9:5f:bf: 82:15:6a:bb:64:d8:2f:4f:71:ef:b7:01:f4:21:d1:48:8c:93: 8f:aa:d5:59:3c:1f:4b:e9:db:39:77:32:1a:d3:8e:db:fe:e3: 15:05:2a:e1:5b:12:b6:34:88:ef:d4:ae:8f:89:4b:62:2a:c3: a2:ca:50:35:c3:45:d4:ad:e2:da:54:f0:24:be:14:ca:46:22: 4c:af:26:1f:0d:69:48:21:6b:b1:40:68:8e:bb:a9:f2:1e:fa: 06:0b:9a:cc:8f:16:f0:f2:ee:d4:a1:73:b9:23:71:6f:1b:0b: 69:0e:08:1a:5a:7f:a3:b9:c8:0b:42:55:95:da:c3:2b:6e:87: 89:a3:28:f3:14:96:b8:45:3e:44:16:d9:83:60:d1:26:7d:eb: 18:b3:55:8d:74:d2:87:91:13:95:65:2e:42:54:91:5a:a3:56: 73:2f:4f:26:29:f5:74:54:0a:3d:e1:1b:7e:b2:85:89:6b:55: 32:6d:ad:8a:19:b1:14:48:50:51:3b:96:05:a0:b2:f0:b9:89: 88:83:37:95:c5:40:f4:12:99:75:4e:66:f0:36:bf:52:95:7d: 16:91:83:02 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuOrNPzbMZMo6c9zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI0NDJlNDktZmIzMS00YmY3LWFlZTYtMmE3MDMzYTU3 Y2ZhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjQzNDgyZDktMDRiOC00MWQ4LThjMTEtMTFkN2EwMmIzMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkPuXO6Vk8jXS7c8YV7Up3hHyHYcIMWVvRr3 pQxCIplc98sFMv47pEHx1Hb+Gzi0wHowr8Ye0g07Rze0U9nI8zqxgKqNCpyZuoJ9 EaznRdPWTRa/H82OZxMxfudKiv1xrn/ArUHEwIV1BjVaUjNRUsJvTsWg+MfguBpx hwt7kX0TsjsYeyjSs2kqEAqblY4YvrYKUxAndq2uh30HOYt3ws/KtASY5mLyEk3M oRoYLE2L4GuDtfjuHdloDSbbY8pMs+Mq5MHNFAEq8YRYYcgBj4KMJ43yio1Tx3Kl SJVhWph/0HbxyioUQ+EGPeuDUiCf7IpKZGUitkQgkVXogkuESQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDgnYcyLykMRQJnQ8o9E5c3OUJWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjQ0 MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNhNTdjZmEvNzBhMmVkYWItNTk5Yi0z N2I5LTkwYzYtM2UxNWI1M2FmMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI0NDJlNDktZmIzMS00YmY3LWFl ZTYtMmE3MDMzYTU3Y2ZhL2QyNDQyZTQ5LWZiMzEtNGJmNy1hZWU2LTJhNzAzM2E1 N2NmYS5jcmwwHwYDVR0jBBgwFoAUN6IDVpWSLDW9mcJam4Igd3MUHn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcw MzNhNTdjZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEAMAwQA x8GJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGZpyhILFDm539NaPeQR3OlellcKvDPNQNmJC25MFCritOlf v4IVartk2C9Pce+3AfQh0UiMk4+q1Vk8H0vp2zl3MhrTjtv+4xUFKuFbErY0iO/U ro+JS2Iqw6LKUDXDRdSt4tpU8CS+FMpGIkyvJh8NaUgha7FAaI67qfIe+gYLmsyP FvDy7tShc7kjcW8bC2kOCBpaf6O5yAtCVZXawytuh4mjKPMUlrhFPkQW2YNg0SZ9 6xizVY100oeRE5VlLkJUkVqjVnMvTyYp9XRUCj3hG36yhYlrVTJtrYoZsRRIUFE7 lgWgsvC5iYiDN5XFQPQSmXVOZvA2v1KVfRaRgwI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:19:20 2025 by rpki-client