$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa File: c1539d45-e25a-3367-9754-f7eba01827f3.roa (raw, json) Hash identifier: J+9bppIZqjRaxOSxkPxrOxVu7yKkgVG7/ufxVncXTa0= Subject key identifier: 0B:37:25:C2:CB:44:02:3B:9B:F3:03:B6:F5:0D:0C:A2:6F:7F:CA:66 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584B8A7CD59434FCCC3114C55AC0 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 192.30.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d5:94:34:fc:cc:31:14:c5:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=1fe8170c-dc9c-4814-806e-a83daa4f5634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:fd:d0:60:78:b9:99:40:15:8a:d2:22:89: 5e:34:de:6f:4b:f3:e3:da:53:0a:4d:35:18:92:a2: bb:05:01:b9:74:fb:d4:d9:a2:70:5d:7e:a0:4a:3f: 85:ec:16:c9:03:c9:f3:84:c5:3c:b6:ed:45:3e:22: dd:ec:fa:bc:49:52:5f:d0:3b:1d:dd:4e:04:93:1d: 19:86:5d:24:67:9c:fb:19:b9:90:f4:3b:e4:d9:0c: 7d:ab:a2:fb:0e:31:40:0d:ad:6a:65:6c:e4:ea:44: aa:74:8d:33:7c:a8:ad:36:1f:27:97:e2:c9:3c:d4: 0f:5f:17:74:cc:97:c0:8a:3c:3b:01:d1:e7:65:10: 4a:4a:2a:08:4f:69:31:3a:03:79:5a:93:8e:3d:d2: e7:3f:da:46:90:14:56:3b:13:cc:38:62:4f:61:c4: 50:f0:22:5c:f0:4f:c6:99:df:ae:4f:9a:1d:92:58: ce:a8:84:d4:6f:59:0f:b5:ef:3c:1e:fa:a2:02:6b: 39:7d:47:e3:7d:26:ba:f3:e4:93:7e:e7:40:cf:be: 95:a7:76:54:70:05:5a:fb:07:eb:73:e6:4d:dc:ee: b1:a4:c0:ff:61:48:f4:20:4d:fb:dc:ce:f4:04:5b: d2:2e:8d:a4:41:78:ab:8d:cb:49:68:e3:d5:2d:38: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:25:C2:CB:44:02:3B:9B:F3:03:B6:F5:0D:0C:A2:6F:7F:CA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ff:60:9b:e9:94:fc:35:30:a1:3b:c3:67:ba:3e:fb:99:d1: 59:e4:4a:ab:e8:f9:66:14:4c:ad:fd:1c:a5:35:24:b2:a1:ce: 42:70:bc:4a:db:69:a2:df:4b:1a:ec:f4:f9:d1:b7:40:99:0c: 1d:e6:02:74:e5:63:c8:0b:fd:bc:02:98:b7:72:6e:48:93:6c: 13:7a:8b:ed:66:69:47:c1:26:f5:51:e8:9d:98:9d:2e:58:41: 07:aa:b6:2f:75:e7:46:51:d8:3d:af:4b:fe:83:e2:4d:3b:a0: 99:81:3f:f9:0d:d6:2d:04:c5:ba:e4:4f:0e:66:cb:94:99:2a: 01:76:88:1f:b9:d8:f9:5e:64:7c:a5:97:3a:8d:28:55:7b:eb: 0b:09:c1:c9:66:fb:92:4a:7c:47:61:3a:d1:b7:07:fe:a5:79: 44:6b:d1:44:1c:b0:28:46:36:35:f9:c5:f5:4c:8a:2e:64:5f: 91:ca:1d:d9:d1:8f:df:a5:6e:7f:97:2d:f2:2e:bf:73:7b:0a: f8:e6:b2:59:24:60:1f:83:fb:fb:0d:a7:0c:a2:01:77:bc:cf: a0:6b:d3:bb:91:39:c9:4e:7e:79:fc:41:25:3a:69:db:70:25: f8:09:fa:89:37:3a:aa:fb:bc:22:9f:b6:61:f2:0e:6e:96:7b: 7e:45:0a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNWUNPzMMRTFWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MWZlODE3MGMtZGM5Yy00ODE0LTgwNmUtYTgzZGFhNGY1NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOD90GB4uZlAFYrSIoleNN5vS/Pj2lMKTTUY kqK7BQG5dPvU2aJwXX6gSj+F7BbJA8nzhMU8tu1FPiLd7Pq8SVJf0Dsd3U4Ekx0Z hl0kZ5z7GbmQ9Dvk2Qx9q6L7DjFADa1qZWzk6kSqdI0zfKitNh8nl+LJPNQPXxd0 zJfAijw7AdHnZRBKSioIT2kxOgN5WpOOPdLnP9pGkBRWOxPMOGJPYcRQ8CJc8E/G md+uT5odkljOqITUb1kPte88HvqiAms5fUfjfSa68+STfudAz76Vp3ZUcAVa+wfr c+ZN3O6xpMD/YUj0IE373M70BFvSLo2kQXirjctJaOPVLTg/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs3JcLLRAI7m/MDtvUNDKJvf8pmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvYzE1MzlkNDUtZTI1YS0z MzY3LTk3NTQtZjdlYmEwMTgyN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALv/YJvplPw1MKE7w2e6PvuZ0VnkSqvo+WYUTK39HKU1JLKhzkJwvErb aaLfSxrs9PnRt0CZDB3mAnTlY8gL/bwCmLdybkiTbBN6i+1maUfBJvVR6J2YnS5Y QQeqti9150ZR2D2vS/6D4k07oJmBP/kN1i0ExbrkTw5my5SZKgF2iB+52PleZHyl lzqNKFV76wsJwclm+5JKfEdhOtG3B/6leURr0UQcsChGNjX5xfVMii5kX5HKHdnR j9+lbn+XLfIuv3N7CvjmslkkYB+D+/sNpwyiAXe8z6Br07uROclOfnn8QSU6adtw JfgJ+ok3Oqr7vCKftmHyDm6We35FCk8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:10 2025 by rpki-client