$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa File: ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa (raw, json) Hash identifier: BZqpBePFsuUzXxVxUkY5+Bqr3YLVlP6ZnCThbUZPepA= Subject key identifier: 52:5A:AB:AB:7E:37:CD:B9:B5:C0:67:1E:F9:86:60:FA:F2:68:80:2C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B4D11D68475A1399344BEA260 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d6:84:75:a1:39:93:44:be:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=c55fc421-54b2-4935-8681-b7bd7f438a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:aa:db:47:df:7d:f7:27:97:60:46:c3:37: df:f6:cd:5e:19:d4:f1:49:77:7d:ee:bf:da:62:ee: d8:af:3e:95:da:6c:bb:63:95:d9:cb:25:56:57:df: 11:eb:17:03:58:5c:55:3f:5a:49:e0:2b:96:9c:f2: 24:77:24:84:c1:0a:dd:92:2b:a0:f8:7b:1b:ed:18: b0:b4:48:a7:3e:bf:35:b4:4c:3c:60:77:9e:09:22: 03:11:7e:08:2c:de:a4:26:bd:1e:78:c8:a5:f3:0e: ae:78:65:af:09:65:e9:8b:57:55:ac:44:9e:13:81: bc:72:c0:00:53:e0:0f:44:06:ad:55:81:4e:8e:63: 4e:de:78:2e:d1:c6:67:57:52:1c:fe:db:f3:e8:08: 1f:11:ba:ae:db:12:4a:db:9f:7b:cf:c8:d4:2d:99: dd:be:2d:9b:e2:20:0a:e3:d1:5c:65:e6:10:4b:57: b8:8e:84:1b:24:de:07:8a:38:56:03:d0:46:fd:e9: 35:bc:07:e3:77:0a:e8:78:58:f6:d9:15:c2:63:26: 87:03:8d:45:33:19:fa:08:a0:c8:fc:a8:84:f4:0c: 1e:2e:34:bf:84:36:98:77:f4:0c:e5:b4:00:5c:60: dc:b8:72:ef:08:be:8c:35:43:3b:57:7c:b0:d8:a8: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:AB:AB:7E:37:CD:B9:B5:C0:67:1E:F9:86:60:FA:F2:68:80:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:77:fb:66:aa:cd:8d:87:21:91:df:f1:32:b5:2d:3b:32:c0: 56:99:c0:5f:80:88:95:18:05:05:fd:ec:15:d2:21:c2:6a:05: 4a:90:b1:d8:04:3b:e6:34:7c:ec:c9:4d:73:27:64:2c:9b:a0: 9c:97:9a:aa:53:c2:f6:e4:79:6a:bc:87:ef:71:c3:12:11:27: 89:87:69:60:4c:fc:6d:74:5d:47:61:20:f5:c0:e8:05:93:3d: 89:e9:7c:89:c4:07:f3:9e:4d:b2:d5:2e:10:dd:56:75:2b:27: 58:14:a6:33:ac:60:a6:3b:00:27:13:8d:92:09:2a:27:e7:d2: a3:37:88:e8:bb:eb:b5:db:1b:b5:90:0d:aa:81:36:36:e7:97: 6b:c7:d6:8e:52:91:25:1e:7e:f5:eb:6d:a2:54:6b:25:5e:af: 9c:d2:bb:c9:02:0d:1b:ba:1a:8d:e6:e6:16:11:54:29:a7:b7: cd:f1:1f:87:42:f9:08:01:ce:17:da:86:0a:08:50:0d:a2:86: 9d:cc:62:82:a1:bb:78:84:4d:88:15:4e:98:1f:41:cf:a2:08: 78:0b:d7:c3:eb:12:a0:1f:aa:5b:90:0a:6e:7c:65:d9:ee:04: 4c:ca:71:59:b0:42:8e:fa:e7:d0:34:1f:a4:9d:df:c7:09:8e: 73:d7:85:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdaEdaE5k0S+omAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YzU1ZmM0MjEtNTRiMi00OTM1LTg2ODEtYjdiZDdmNDM4YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2eq20ffffcnl2BGwzff9s1eGdTxSXd97r/a Yu7Yrz6V2my7Y5XZyyVWV98R6xcDWFxVP1pJ4CuWnPIkdySEwQrdkiug+Hsb7Riw tEinPr81tEw8YHeeCSIDEX4ILN6kJr0eeMil8w6ueGWvCWXpi1dVrESeE4G8csAA U+APRAatVYFOjmNO3ngu0cZnV1Ic/tvz6AgfEbqu2xJK2597z8jULZndvi2b4iAK 49FcZeYQS1e4joQbJN4HijhWA9BG/ek1vAfjdwroeFj22RXCYyaHA41FMxn6CKDI /KiE9AweLjS/hDaYd/QM5bQAXGDcuHLvCL6MNUM7V3yw2KiXtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJaq6t+N825tcBnHvmGYPryaIAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWMwNGY5YWEtYjhiNC0z MDJlLWE1NGMtMmJhYTFmM2JmYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh3+2aqzY2HIZHf8TK1LTsywFaZwF+AiJUYBQX97BXSIcJqBUqQsdgE O+Y0fOzJTXMnZCyboJyXmqpTwvbkeWq8h+9xwxIRJ4mHaWBM/G10XUdhIPXA6AWT PYnpfInEB/OeTbLVLhDdVnUrJ1gUpjOsYKY7ACcTjZIJKifn0qM3iOi767XbG7WQ DaqBNjbnl2vH1o5SkSUefvXrbaJUayVer5zSu8kCDRu6Go3m5hYRVCmnt83xH4dC +QgBzhfahgoIUA2ihp3MYoKhu3iETYgVTpgfQc+iCHgL18PrEqAfqluQCm58Zdnu BEzKcVmwQo7659A0H6Sd38cJjnPXhTw= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:49 2025 by rpki-client