$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/864e88f0-2757-349d-8e72-739c2aa64be4.roa File: 864e88f0-2757-349d-8e72-739c2aa64be4.roa (raw, json) Hash identifier: Vk/IpqInzl87ZUbCA1pUNW9nBta0hhbKAdTk0xQemAs= Subject key identifier: 7F:CF:3E:EB:0F:03:FE:82:8B:D5:7C:61:22:F2:AD:4D:09:C2:A7:64 Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584B0A1157CA4D0BADC8952E7D48 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/864e88f0-2757-349d-8e72-739c2aa64be4.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 393891 IP address blocks: 192.103.118.0/24 maxlen: 24 192.103.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:57:ca:4d:0b:ad:c8:95:2e:7d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=1e65d80d-7646-4de5-a9c9-a23d50eb55f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:06:f4:11:bf:45:c8:28:3c:89:10:85:78: ba:f1:3b:87:9c:82:aa:36:41:36:d9:a2:50:26:5b: b4:fd:43:f6:4d:2c:c1:70:8a:ed:e8:d7:9a:61:8b: 6a:4c:b2:8e:92:16:91:2c:79:73:3a:2a:db:ef:23: 82:3c:e6:04:34:68:f2:51:ea:06:34:7d:5b:8b:15: c1:56:ec:17:9b:c6:cd:aa:eb:d0:53:24:10:f0:72: 4b:b9:b7:c6:b8:ac:04:72:8e:7d:94:4e:b7:38:37: 5d:a5:16:30:53:fa:7b:97:01:c5:ce:1f:49:76:ce: c8:92:80:29:f1:d2:6f:ff:dc:34:92:6b:33:d0:f0: 28:22:8c:29:c5:b8:04:c0:88:9a:14:e9:ce:34:e5: 23:c4:3b:eb:3d:45:a6:77:99:be:94:14:cc:9a:b8: 19:be:d6:2f:00:91:b6:02:ae:00:cb:75:d6:13:2f: 2e:62:ee:5b:df:80:d6:ba:5b:e4:46:40:c3:a2:4d: 25:07:03:bc:a3:ea:33:6f:e6:23:ff:c6:e1:64:fe: 08:38:28:d1:72:a1:92:96:fd:ae:6a:eb:b4:15:9b: fd:91:00:7f:92:36:1d:e4:53:82:19:74:eb:c2:27: c6:37:26:2a:82:30:5b:ae:52:73:0a:18:e3:20:3a: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:3E:EB:0F:03:FE:82:8B:D5:7C:61:22:F2:AD:4D:09:C2:A7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/864e88f0-2757-349d-8e72-739c2aa64be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 192.103.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:19:ee:c9:9a:f4:3c:87:0c:be:98:f9:1f:c4:cd:60:0b:80: 75:1c:15:32:82:a1:0c:4f:68:99:b1:69:68:31:c3:c6:ee:ea: d3:64:c7:2b:79:2e:48:88:f6:aa:86:21:a6:10:2f:fb:0f:77: 26:a4:43:20:dc:55:06:88:23:4f:99:ea:55:43:b3:9f:16:0a: 91:74:2a:82:22:9b:33:e9:3e:a0:d4:40:26:28:fa:64:1b:4e: 25:ff:03:2f:e3:10:53:14:bc:2f:80:6e:fc:c5:73:21:72:c6: b5:50:fc:d4:1a:e9:42:14:fc:f9:de:f3:ae:1d:02:52:e5:0a: 0d:be:c4:bc:1a:b4:0b:95:8f:a8:b7:5e:50:24:99:e3:8d:fb: 4c:65:24:ec:c0:66:03:b4:13:1c:82:2d:ba:31:2c:9b:ed:58: 72:c5:c4:a5:8b:87:e8:4c:20:af:f2:cb:21:9f:1e:36:a1:26: c8:72:76:90:ac:4e:75:2c:d7:0d:26:d4:ca:cb:1e:08:31:57: 0a:26:36:f8:0a:5b:9c:49:10:f7:23:f1:49:0b:9b:90:16:83: ef:b4:d6:22:bb:ee:c9:5e:b6:ef:72:f4:06:15:05:be:ed:b3: 89:08:80:46:81:74:0d:42:0e:ae:7a:f0:47:06:a1:32:07:98: db:d8:53:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVfKTQutyJUufUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MWU2NWQ4MGQtNzY0Ni00ZGU1LWE5YzktYTIzZDUwZWI1NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopsG9BG/RcgoPIkQhXi68TuHnIKqNkE22aJQ Jlu0/UP2TSzBcIrt6NeaYYtqTLKOkhaRLHlzOirb7yOCPOYENGjyUeoGNH1bixXB VuwXm8bNquvQUyQQ8HJLubfGuKwEco59lE63ODddpRYwU/p7lwHFzh9Jds7IkoAp 8dJv/9w0kmsz0PAoIowpxbgEwIiaFOnONOUjxDvrPUWmd5m+lBTMmrgZvtYvAJG2 Aq4Ay3XWEy8uYu5b34DWulvkRkDDok0lBwO8o+ozb+Yj/8bhZP4IOCjRcqGSlv2u auu0FZv9kQB/kjYd5FOCGXTrwifGNyYqgjBbrlJzChjjIDpbpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/PPusPA/6Ci9V8YSLyrU0JwqdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvODY0ZTg4ZjAtMjc1Ny0z NDlkLThlNzItNzM5YzJhYTY0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwGd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsZ7sma9DyHDL6Y+R/EzWALgHUcFTKCoQxPaJmxaWgxw8bu6tNkxyt5 LkiI9qqGIaYQL/sPdyakQyDcVQaII0+Z6lVDs58WCpF0KoIimzPpPqDUQCYo+mQb TiX/Ay/jEFMUvC+AbvzFcyFyxrVQ/NQa6UIU/Pne864dAlLlCg2+xLwatAuVj6i3 XlAkmeON+0xlJOzAZgO0ExyCLboxLJvtWHLFxKWLh+hMIK/yyyGfHjahJshydpCs TnUs1w0m1MrLHggxVwomNvgKW5xJEPcj8UkLm5AWg++01iK77sletu9y9AYVBb7t s4kIgEaBdA1CDq568EcGoTIHmNvYUwk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:37 2025 by rpki-client