$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa File: 43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json) Hash identifier: 5sE48h9J+J+EF+Nc8gHUV9w1q2NFlLWrNtxznbZeaeM= Subject key identifier: 24:AD:64:D1:5F:62:82:58:F3:EC:F5:9D:AA:A9:EA:A4:43:60:C8:EC Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584B4D11D8AF0B82CF6242D48F80 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 10753 IP address blocks: 192.228.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d8:af:0b:82:cf:62:42:d4:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=021bbfde-4b37-435a-a200-a673b281a2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:50:15:d8:22:5c:c8:d8:2d:c2:98:6d:ad: f0:c0:7b:fd:4a:21:34:59:19:27:d1:41:18:23:c6: 05:2e:19:a1:b4:db:ee:7a:2f:24:69:6a:eb:5e:1c: db:c6:94:d3:e6:60:6b:5b:8a:14:bd:51:51:c1:30: 67:ce:a5:f2:b5:52:03:8b:49:d6:ce:2b:db:2d:e4: 1f:77:42:c0:97:a9:53:9a:82:ed:2c:02:93:11:97: 13:9e:2c:f7:2e:b0:0d:bc:0a:34:7c:9f:09:13:13: 07:e1:32:e2:43:83:50:71:26:6e:6b:9e:10:d6:93: 07:c6:85:af:41:4a:3c:2e:eb:e3:64:c4:6d:00:98: 12:25:10:93:3e:48:77:45:75:e5:dd:ef:ad:f9:b9: f8:ec:59:80:93:19:c1:eb:53:89:52:34:01:6c:09: 50:ba:9b:a8:bf:d6:f2:d1:52:c2:2d:1e:c0:19:4d: 9e:31:72:28:b0:51:57:92:d9:47:20:ac:63:e1:36: 45:45:05:2c:b4:c1:3d:ad:c1:97:92:72:59:a8:97: 0b:7a:50:d5:0c:2d:9b:05:41:0b:36:5a:d7:5c:73: 57:8f:ce:28:31:da:fc:19:d1:bb:79:23:b2:b3:e7: dc:39:76:65:19:a3:43:65:5a:30:c9:b5:79:43:bc: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:64:D1:5F:62:82:58:F3:EC:F5:9D:AA:A9:EA:A4:43:60:C8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b9:00:c6:34:6c:fe:50:32:b7:43:e2:77:46:18:a5:af:10: 30:fc:ee:0f:12:58:90:0b:a5:6b:4c:22:22:85:cd:70:2b:28: a7:ab:af:8b:a7:7c:9c:bd:93:fb:28:ca:00:be:cb:35:86:56: 73:74:be:8e:ce:c1:e6:96:27:e3:fd:41:e8:2c:5d:41:90:7f: 8e:00:5e:e3:6b:22:5b:45:f1:f6:6f:6e:37:df:f9:37:ea:20: 31:88:9b:52:9a:8b:af:af:ff:84:31:4a:86:a5:3e:04:1a:9c: 19:0d:ee:db:62:7f:28:fa:88:2d:46:8d:90:67:f9:23:c6:f4: 3a:e5:a7:82:09:e7:e2:25:41:71:a1:7e:cc:4a:ee:82:3b:f0: 47:37:84:7d:64:3a:c2:b3:78:14:26:e1:3f:42:50:06:e1:05: 9b:99:c8:e0:20:e2:b1:46:92:3a:98:eb:04:89:d9:04:d2:82: 00:08:b8:35:4b:28:79:23:9a:2d:47:27:4f:8f:fb:5c:f3:20: 68:98:47:ec:21:42:c5:5b:7b:b6:8f:bf:d8:e5:db:55:e1:db: 68:61:bd:80:9a:be:26:e6:4e:a4:61:95:3c:82:b2:d4:d1:14: f3:97:a1:8a:17:e6:aa:d6:90:16:ff:7f:ee:d0:ac:51:06:73: da:d6:ef:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdivC4LPYkLUj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MDIxYmJmZGUtNGIzNy00MzVhLWEyMDAtYTY3M2IyODFhMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXtQFdgiXMjYLcKYba3wwHv9SiE0WRkn0UEY I8YFLhmhtNvuei8kaWrrXhzbxpTT5mBrW4oUvVFRwTBnzqXytVIDi0nWzivbLeQf d0LAl6lTmoLtLAKTEZcTniz3LrANvAo0fJ8JExMH4TLiQ4NQcSZua54Q1pMHxoWv QUo8LuvjZMRtAJgSJRCTPkh3RXXl3e+t+bn47FmAkxnB61OJUjQBbAlQupuov9by 0VLCLR7AGU2eMXIosFFXktlHIKxj4TZFRQUstME9rcGXknJZqJcLelDVDC2bBUEL NlrXXHNXj84oMdr8GdG7eSOys+fcOXZlGaNDZVowybV5Q7xxOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCStZNFfYoJY8+z1naqp6qRDYMjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvNDM0MjVhZmQtZTM4MC0z Mjc1LWI2MTAtYWEyMjA2ZmUzMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG5AMY0bP5QMrdD4ndGGKWvEDD87g8SWJALpWtMIiKFzXArKKerr4un fJy9k/soygC+yzWGVnN0vo7OweaWJ+P9QegsXUGQf44AXuNrIltF8fZvbjff+Tfq IDGIm1Kai6+v/4QxSoalPgQanBkN7ttifyj6iC1GjZBn+SPG9Drlp4IJ5+IlQXGh fsxK7oI78Ec3hH1kOsKzeBQm4T9CUAbhBZuZyOAg4rFGkjqY6wSJ2QTSggAIuDVL KHkjmi1HJ0+P+1zzIGiYR+whQsVbe7aPv9jl21Xh22hhvYCavibmTqRhlTyCstTR FPOXoYoX5qrWkBb/f+7QrFEGc9rW7/k= -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:52 2025 by rpki-client