$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/9ee93fbd-c707-37ce-8df6-5c635034a60d.roa File: 9ee93fbd-c707-37ce-8df6-5c635034a60d.roa (raw, json) Hash identifier: /d1q2VH734WIECMP5X1OFmrgS+HeAfcXcD+fcJGgX6o= Subject key identifier: 65:7E:63:CD:5F:1B:3D:C8:66:86:88:12:42:BF:12:11:82:23:52:A9 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584B68FCAE7193BFB2F7470EC680 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/9ee93fbd-c707-37ce-8df6-5c635034a60d.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 9823 IP address blocks: 168.146.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:ae:71:93:bf:b2:f7:47:0e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=8ff34e5a-cdd4-4152-a1ac-e83e2b2d0bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:70:7c:70:72:eb:01:72:70:d9:94:62:cc: 48:bd:47:55:89:dd:5c:0b:57:a1:81:73:ef:a0:79: ef:e5:2e:c7:70:71:4d:f8:b3:c6:e3:7e:be:53:5a: 51:4d:ab:db:c1:56:ad:de:4e:f1:ae:59:25:04:0a: cf:1f:81:32:73:35:8e:89:ec:43:51:a0:0e:16:b6: 42:91:45:60:71:6e:48:d3:74:bb:a8:79:24:e6:f2: 7c:cd:10:77:33:3c:76:2c:73:f3:5f:e1:8a:5a:4b: 51:88:a8:39:d0:9a:e9:b5:ca:13:96:21:d2:6e:6c: 2e:54:d1:49:c5:ef:c6:4a:40:20:86:38:c3:ba:ab: 3c:53:16:c5:0f:a8:a7:2f:dc:4b:2c:2b:a0:06:e3: 05:0e:36:e5:72:6d:ca:d6:bd:98:7c:59:80:a7:2d: d9:53:b1:a5:53:5c:44:1b:34:62:09:e3:e4:bd:fc: 15:0e:69:d1:d4:40:f6:3c:bc:10:bc:ab:18:4e:ec: 75:9b:74:16:e4:c2:d9:fa:6a:49:ea:24:5d:7c:4e: 4a:93:0e:05:62:b2:27:6b:b6:de:c7:b3:df:09:55: fa:05:34:82:4f:99:41:19:42:f8:67:47:ef:20:b0: cd:d3:df:08:8a:91:c6:63:db:14:2d:48:18:b6:1d: 70:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7E:63:CD:5F:1B:3D:C8:66:86:88:12:42:BF:12:11:82:23:52:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/9ee93fbd-c707-37ce-8df6-5c635034a60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6b:ac:72:eb:63:39:48:86:e6:f6:21:0b:71:bb:92:2c:de: c0:c0:79:4e:31:67:a1:9a:f7:3e:56:d3:8a:d7:0a:42:00:fa: 88:b0:35:f3:c7:e9:d2:1d:76:85:f3:fd:4f:ee:b3:55:c1:8d: 08:72:50:2a:92:a0:2c:3b:c5:db:ce:b3:f8:71:54:6c:c4:8c: 15:0f:fe:25:c1:cf:ff:9e:6a:9c:6c:b1:d2:bd:9a:98:5f:97: 27:45:d6:4e:cb:f8:8d:c5:1a:c6:01:b4:9e:bf:bf:4b:bb:b1: c6:c2:2e:96:4e:60:5a:fb:dc:4b:57:43:9d:07:09:ff:1e:1f: 97:59:4d:5c:4f:75:70:18:90:0f:6e:30:b2:9c:3c:47:a2:15: bd:1c:1a:8f:82:cc:68:26:0c:30:05:65:ec:17:63:b0:91:50: af:b0:65:93:d0:a1:bd:70:2b:30:ab:50:07:9e:d1:6d:c3:5a: 53:fa:c3:c9:cd:91:a2:a4:69:b7:a1:fa:02:d8:4c:ac:3b:a8: 86:f9:aa:98:00:0d:15:a4:af:22:54:6d:66:95:85:31:fd:7b: c2:07:d8:bf:6f:22:7d:05:50:8f:ae:15:2a:23:34:f0:8c:f9: a6:d2:b8:ad:56:37:a2:76:de:bc:c1:cb:6f:d8:a7:d1:88:60: 73:f6:42:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/K5xk7+y90cOxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk OGZmMzRlNWEtY2RkNC00MTUyLWExYWMtZTgzZTJiMmQwYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE5wfHBy6wFycNmUYsxIvUdVid1cC1ehgXPv oHnv5S7HcHFN+LPG436+U1pRTavbwVat3k7xrlklBArPH4EyczWOiexDUaAOFrZC kUVgcW5I03S7qHkk5vJ8zRB3Mzx2LHPzX+GKWktRiKg50JrptcoTliHSbmwuVNFJ xe/GSkAghjjDuqs8UxbFD6inL9xLLCugBuMFDjblcm3K1r2YfFmApy3ZU7GlU1xE GzRiCePkvfwVDmnR1ED2PLwQvKsYTux1m3QW5MLZ+mpJ6iRdfE5Kkw4FYrIna7be x7PfCVX6BTSCT5lBGUL4Z0fvILDN098IipHGY9sULUgYth1wlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV+Y81fGz3IZoaIEkK/EhGCI1KpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvOWVlOTNmYmQtYzcwNy0z N2NlLThkZjYtNWM2MzUwMzRhNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJrrHLrYzlIhub2IQtxu5Is3sDAeU4xZ6Ga9z5W04rXCkIA+oiwNfPH 6dIddoXz/U/us1XBjQhyUCqSoCw7xdvOs/hxVGzEjBUP/iXBz/+eapxssdK9mphf lydF1k7L+I3FGsYBtJ6/v0u7scbCLpZOYFr73EtXQ50HCf8eH5dZTVxPdXAYkA9u MLKcPEeiFb0cGo+CzGgmDDAFZewXY7CRUK+wZZPQob1wKzCrUAee0W3DWlP6w8nN kaKkabeh+gLYTKw7qIb5qpgADRWkryJUbWaVhTH9e8IH2L9vIn0FUI+uFSojNPCM +abSuK1WN6J23rzBy2/Yp9GIYHP2QuU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:39 2025 by rpki-client