$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa File: 8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa (raw, json) Hash identifier: pYSFotNxfoVmK3tchwDHne6j3T46ANYPN+4LOtiADgk= Subject key identifier: 95:3A:35:95:D4:87:D7:6F:FE:97:88:1F:70:57:08:0A:F3:07:B6:20 Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584B9E07B4F2ACC661614F845E20 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 393891 IP address blocks: 192.103.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b4:f2:ac:c6:61:61:4f:84:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e8e6fcee-323e-4671-96fb-ce6d93ac3f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:cf:f7:70:8e:f8:2e:bf:60:c4:81:98:fd: 0c:d1:ee:cb:d9:6b:12:ce:9b:c3:89:9a:2a:30:c0: d9:30:98:5b:65:7a:2a:93:b5:e4:cc:c8:3c:b2:f4: 1b:10:61:d5:71:fb:31:e6:33:95:be:26:b4:11:39: e8:72:f7:4d:90:03:f9:b5:da:a4:5e:98:38:10:14: be:23:af:8a:58:f7:11:88:da:49:0f:d8:9a:66:16: 29:80:61:eb:af:61:e1:ea:d0:6e:a6:ba:c8:42:f0: 16:77:0c:d8:b9:1e:99:2c:90:ac:74:55:1a:7e:f0: e0:4f:ab:a7:fb:54:97:61:d2:73:00:ee:11:09:22: 04:3e:0b:62:0d:67:82:e9:40:44:ce:19:a2:31:93: f3:92:c8:d6:53:ca:0a:37:3a:c8:cf:9b:23:85:a7: f2:2a:1c:ed:6d:12:dd:52:e5:97:ed:23:72:96:13: 30:3a:7c:d5:63:b4:59:b3:8f:13:97:ef:09:ab:af: 00:b3:b7:e7:f7:fe:8b:33:60:3d:37:0b:d3:7c:a9: 66:9a:d5:d0:d9:97:98:7e:67:c7:17:0d:7b:43:cd: 3b:57:1e:51:2b:23:a0:76:bb:1f:70:94:bf:7c:9e: ae:b3:28:34:dd:06:35:7e:97:eb:5d:c9:8f:9e:dd: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3A:35:95:D4:87:D7:6F:FE:97:88:1F:70:57:08:0A:F3:07:B6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 192.103.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a7:d7:d1:43:53:b3:a9:2d:3d:b0:87:11:ac:25:f2:ea:43: 00:25:7f:f2:3f:98:a1:34:a2:bf:9d:af:8b:8c:ab:fb:6b:06: 24:a4:80:f7:0e:76:07:73:e8:45:cc:a1:da:a1:2e:90:f4:c9: 7e:a5:ca:03:ea:ef:7c:a1:21:70:15:0a:35:38:b6:1f:26:43: 49:50:4d:3b:db:e6:c9:d3:3f:f2:39:ef:02:d5:58:8f:27:e3: 69:5b:45:2f:00:6e:88:b7:22:47:b7:67:69:53:6a:c8:04:17: 53:50:c2:f4:9c:a3:ab:f0:48:79:ef:46:b3:d1:29:27:6e:18: cf:50:68:5a:42:46:57:ae:96:3b:86:91:9d:06:d5:a1:ae:46: 07:c0:df:cb:58:4d:14:c6:48:65:86:67:9c:99:36:8b:43:ae: 2f:98:e0:6b:bf:58:dc:05:1e:cd:1d:ed:37:be:f1:35:6c:c4: 61:16:4c:cc:6f:f9:9d:fb:82:39:f3:f3:35:f7:cb:ae:e0:a8: 8e:78:4b:c6:d4:d1:f7:24:ca:31:a1:1d:ce:1f:1c:10:70:06: 7f:31:d2:34:c5:95:f8:b6:03:41:2f:37:6d:1b:6a:30:5f:f4: 2d:82:e2:81:2c:3b:b0:2b:74:97:f6:2a:a7:66:44:e9:7f:30: 02:67:33:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7TyrMZhYU+EXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZThlNmZjZWUtMzIzZS00NjcxLTk2ZmItY2U2ZDkzYWMzZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr7P93CO+C6/YMSBmP0M0e7L2WsSzpvDiZoq MMDZMJhbZXoqk7XkzMg8svQbEGHVcfsx5jOVvia0ETnocvdNkAP5tdqkXpg4EBS+ I6+KWPcRiNpJD9iaZhYpgGHrr2Hh6tBuprrIQvAWdwzYuR6ZLJCsdFUafvDgT6un +1SXYdJzAO4RCSIEPgtiDWeC6UBEzhmiMZPzksjWU8oKNzrIz5sjhafyKhztbRLd UuWX7SNylhMwOnzVY7RZs48Tl+8Jq68As7fn9/6LM2A9NwvTfKlmmtXQ2ZeYfmfH Fw17Q807Vx5RKyOgdrsfcJS/fJ6usyg03QY1fpfrXcmPnt1mOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU6NZXUh9dv/peIH3BXCArzB7YgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvOGEyZTZiYmItZTIxMS0z YWUwLWJiYzAtMzQyMDI0M2IzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWn19FDU7OpLT2whxGsJfLqQwAlf/I/mKE0or+dr4uMq/trBiSkgPcO dgdz6EXModqhLpD0yX6lygPq73yhIXAVCjU4th8mQ0lQTTvb5snTP/I57wLVWI8n 42lbRS8Aboi3Ike3Z2lTasgEF1NQwvSco6vwSHnvRrPRKSduGM9QaFpCRleuljuG kZ0G1aGuRgfA38tYTRTGSGWGZ5yZNotDri+Y4Gu/WNwFHs0d7Te+8TVsxGEWTMxv +Z37gjnz8zX3y67gqI54S8bU0fckyjGhHc4fHBBwBn8x0jTFlfi2A0EvN20bajBf 9C2C4oEsO7ArdJf2KqdmROl/MAJnM0A= -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:35 2025 by rpki-client