$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa File: 653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa (raw, json) Hash identifier: cxYL5YRsfThzhan4w3tZ9Qk9SDpzMN2Kwhh3olBvm+0= Subject key identifier: CC:6B:28:58:BA:5E:12:4C:11:E6:2D:44:8D:2F:EA:50:85:50:C4:3C Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Certificate serial: 010D0C9F4328584B2331986DD7B9C9492240C3A8 Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 6922 IP address blocks: 192.124.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:98:6d:d7:b9:c9:49:22:40:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=23ed67db-509b-4419-9764-d6051dddd73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:97:96:12:4a:1b:d4:ad:46:4f:b8:46:44: 68:ba:37:b3:fe:40:e4:eb:ad:06:29:bc:4f:84:de: f4:a5:a8:5e:ea:a1:d1:87:2b:32:e2:76:f5:95:07: e1:54:0f:b1:0c:75:a5:3a:e3:b7:2e:f9:b9:dd:eb: 6f:8f:b5:5e:07:9e:f4:b6:76:bb:91:73:61:25:2f: ef:ed:b6:ff:e2:2a:ff:fb:d4:5e:b1:7f:9a:25:1e: e2:db:a7:14:29:62:c0:de:00:5f:a3:1a:19:7d:a4: e4:bb:90:3e:d7:db:66:1a:14:47:2c:cd:40:24:e5: 48:59:7b:99:d4:bf:37:ac:fe:3b:e5:28:73:ef:79: e8:d4:d3:97:b7:a2:22:ec:bd:94:13:7a:a6:f9:06: 1d:96:22:38:03:95:39:c1:e9:34:f3:83:42:2e:30: 41:f8:5b:fe:e2:c4:b3:20:fc:93:c3:3c:25:35:1a: cd:b0:bf:85:20:ee:60:98:29:65:ef:80:35:14:49: 13:91:11:37:52:59:44:5a:77:4c:e9:33:c9:65:d1: 9e:b6:e3:a5:35:b1:77:2e:c3:e6:d2:5b:8e:3d:9a: 47:cd:fc:17:f4:85:e4:fe:40:a9:8a:5a:87:38:ce: 9a:9d:6c:e3:cf:7a:b6:17:c1:21:d9:21:c3:23:e1: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:28:58:BA:5E:12:4C:11:E6:2D:44:8D:2F:EA:50:85:50:C4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl X509v3 Authority Key Identifier: keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer sbgp-ipAddrBlock: critical IPv4: 192.124.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:de:a2:0f:9d:08:4d:9d:0c:a8:48:29:a7:a4:8f:07:6d:6a: 48:ae:9c:7f:7e:f9:2e:58:c3:f9:9e:56:79:3f:19:3d:d8:63: 56:ae:47:ad:73:d4:73:24:af:c4:1a:56:2f:d1:7a:39:36:8a: 97:d1:96:5a:c0:77:2a:77:8a:05:be:b9:39:4a:e3:7f:89:7a: 1e:75:87:9b:51:7d:49:7a:29:63:90:d4:49:be:1a:4f:98:89: 75:f4:ab:58:a0:5e:16:2a:ec:89:e2:e2:34:5c:a5:79:18:e5: eb:d5:15:18:ed:58:c3:85:80:e6:d9:38:6b:05:21:d6:58:9b: 81:81:fe:2c:ef:e6:05:20:e4:05:89:d3:d6:85:b8:77:08:69: a5:e6:a5:1b:08:84:a4:54:ff:41:47:f4:4d:b9:1c:3a:dd:a8: c2:54:fc:54:1d:ca:b4:c1:0c:11:d6:62:34:2a:c5:ba:bf:6a: 13:3d:32:30:94:1c:01:1a:e6:4e:91:95:a8:52:4a:c3:31:2b: 37:6f:18:19:ea:35:ec:14:eb:bb:23:bb:c3:fe:40:a0:ac:ff: c3:d8:0f:36:06:ec:9b:a1:28:ca:42:f2:7d:11:5a:62:1e:a8: 60:5e:50:da:9a:5d:b0:06:54:b6:0e:90:92:d7:38:c0:80:16: 72:45:ad:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZht17nJSSJAw6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5 MjIxMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MjNlZDY3ZGItNTA5Yi00NDE5LTk3NjQtZDYwNTFkZGRkNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxWXlhJKG9StRk+4RkRoujez/kDk660GKbxP hN70pahe6qHRhysy4nb1lQfhVA+xDHWlOuO3Lvm53etvj7VeB570tna7kXNhJS/v 7bb/4ir/+9ResX+aJR7i26cUKWLA3gBfoxoZfaTku5A+19tmGhRHLM1AJOVIWXuZ 1L83rP475Shz73no1NOXt6Ii7L2UE3qm+QYdliI4A5U5wek084NCLjBB+Fv+4sSz IPyTwzwlNRrNsL+FIO5gmCll74A1FEkTkRE3UllEWndM6TPJZdGetuOlNbF3LsPm 0luOPZpHzfwX9IXk/kCpilqHOM6anWzjz3q2F8Eh2SHDI+FEqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxrKFi6XhJMEeYtRI0v6lCFUMQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvNjUzZDAxYjktNzk1NC0z YTg1LWIyYTItYTNlYzg2NjQ1YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjeog+dCE2dDKhIKaekjwdtakiunH9++S5Yw/meVnk/GT3YY1auR61z 1HMkr8QaVi/Rejk2ipfRllrAdyp3igW+uTlK43+Jeh51h5tRfUl6KWOQ1Em+Gk+Y iXX0q1igXhYq7Ini4jRcpXkY5evVFRjtWMOFgObZOGsFIdZYm4GB/izv5gUg5AWJ 09aFuHcIaaXmpRsIhKRU/0FH9E25HDrdqMJU/FQdyrTBDBHWYjQqxbq/ahM9MjCU HAEa5k6RlahSSsMxKzdvGBnqNewU67sju8P+QKCs/8PYDzYG7JuhKMpC8n0RWmIe qGBeUNqaXbAGVLYOkJLXOMCAFnJFrU8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:43:26 2025 by rpki-client