$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/d506be50-110d-3c8e-831e-c6184dd7b850.roa File: d506be50-110d-3c8e-831e-c6184dd7b850.roa (raw, json) Hash identifier: HCOe1XFjLxPoVQ3a0j0NP6YjTa+kf5S6YxKMuy9fb18= Subject key identifier: FD:73:B8:B2:39:6E:F6:59:48:6F:65:ED:25:E5:C4:0D:8C:C2:A7:18 Certificate issuer: /CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Certificate serial: 010D0C9F4328584BA39D254FDEEC8CEFAD856C80 Authority key identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/d506be50-110d-3c8e-831e-c6184dd7b850.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 395279 IP address blocks: 192.190.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:25:4f:de:ec:8c:ef:ad:85:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=056f933d-7e14-4314-9cec-1a7e2462ba25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:10:22:6d:6e:ab:0c:14:2e:6d:b6:49:58: c9:e2:b8:d2:f3:9e:08:23:b7:24:78:5d:c9:1e:98: a4:a3:b5:15:d3:98:44:9a:c8:46:ce:e2:c2:0b:ec: e4:03:f6:4c:66:ab:79:6a:d8:5f:90:60:97:0b:9f: 01:ff:82:60:09:25:99:f1:7f:a3:f7:3d:d7:87:f4: 80:88:a4:8d:f6:17:f0:5a:dd:55:36:63:e7:c2:c6: 73:c5:3b:48:29:45:f1:a0:e4:be:7a:46:8b:e6:cb: 0d:52:db:7d:b8:cb:d3:ac:fe:0d:48:a5:a5:d8:8f: e0:f8:e0:af:6b:62:04:e8:25:ef:27:bc:b1:8b:4f: 7e:33:96:22:99:b0:10:e7:fb:bc:ca:bb:7c:27:28: 81:3b:2d:9e:74:1c:40:40:46:21:8b:de:30:3f:e0: cb:6d:7c:ac:d8:89:b6:e1:c4:9b:20:24:59:94:e0: a6:97:2f:ac:50:9e:6b:e8:2a:d6:0b:35:e5:84:1c: 9a:87:bc:f2:58:a8:58:19:63:49:e4:5b:99:e9:87: 23:0d:96:9f:a6:e0:1f:6a:72:fd:48:13:a9:19:08: 6a:19:c9:5a:4b:21:f8:c4:77:33:cc:0a:32:96:93: bd:04:6c:6d:a2:bd:17:0b:5b:23:94:82:ca:1f:62: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:B8:B2:39:6E:F6:59:48:6F:65:ED:25:E5:C4:0D:8C:C2:A7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/d506be50-110d-3c8e-831e-c6184dd7b850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.crl X509v3 Authority Key Identifier: keyid:B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer sbgp-ipAddrBlock: critical IPv4: 192.190.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ca:d8:aa:18:8a:b9:00:be:73:23:90:7b:9a:ad:4a:32:28: 9c:f7:f7:71:21:55:e3:b4:af:f2:d6:c1:73:40:8a:a8:92:59: f3:61:9f:53:e7:5c:e6:5c:6a:57:cf:0b:93:6a:95:2a:53:b4: 9e:13:e9:9b:51:76:5b:a7:b4:a9:dc:27:7d:9a:d3:a9:a1:fb: 91:ad:61:e4:59:20:ee:2e:e1:50:e8:52:03:4d:f9:be:cb:77: 1f:de:4d:72:1f:64:96:78:3c:5a:8c:35:e0:d1:8a:c3:f0:e1: c9:77:47:b0:86:ba:d4:c9:33:a8:7d:8e:ef:ee:2a:19:ca:26: f9:2f:60:dd:ac:37:65:40:6b:9c:74:e3:0c:de:68:70:99:3d: 0f:ea:b4:7d:ba:ee:11:57:e3:5a:d9:5b:84:4b:7a:4f:ac:19: e5:ea:55:03:e5:9f:c6:4f:93:7b:b4:ac:09:ca:73:6a:24:0c: d1:f0:20:85:ee:e4:39:96:75:3a:49:6f:21:a4:6e:c7:a8:22: bb:71:67:7b:9b:bd:19:f1:02:d5:18:92:0a:e9:f4:a7:22:9e: f6:53:42:a5:26:5a:25:b3:e8:d0:d1:a6:d0:a1:53:bf:fa:48: aa:0e:ec:c2:2b:83:f2:85:9b:13:3d:1d:a2:c2:74:c1:9f:c6: 71:07:5a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSVP3uyM762FbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY0ZDhlNmItZTY2ZS00NmY5LThlZjItZjJkYTE5ODFj YmNhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDU2ZjkzM2QtN2UxNC00MzE0LTljZWMtMWE3ZTI0NjJiYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqIQIm1uqwwULm22SVjJ4rjS854II7ckeF3J Hpiko7UV05hEmshGzuLCC+zkA/ZMZqt5athfkGCXC58B/4JgCSWZ8X+j9z3Xh/SA iKSN9hfwWt1VNmPnwsZzxTtIKUXxoOS+ekaL5ssNUtt9uMvTrP4NSKWl2I/g+OCv a2IE6CXvJ7yxi09+M5YimbAQ5/u8yrt8JyiBOy2edBxAQEYhi94wP+DLbXys2Im2 4cSbICRZlOCmly+sUJ5r6CrWCzXlhByah7zyWKhYGWNJ5FuZ6YcjDZafpuAfanL9 SBOpGQhqGclaSyH4xHczzAoylpO9BGxtor0XC1sjlILKH2ISqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1zuLI5bvZZSG9l7SXlxA2MwqcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZjRk OGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4MWNiY2EvZDUwNmJlNTAtMTEwZC0z YzhlLTgzMWUtYzYxODRkZDdiODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY0ZDhlNmItZTY2ZS00NmY5LThl ZjItZjJkYTE5ODFjYmNhLzZmNGQ4ZTZiLWU2NmUtNDZmOS04ZWYyLWYyZGExOTgx Y2JjYS5jcmwwHwYDVR0jBBgwFoAUuR/cF6KhF1ZW51AnlhafP7raGygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRh MTk4MWNiY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLK2KoYirkAvnMjkHuarUoyKJz393EhVeO0r/LWwXNAiqiSWfNhn1Pn XOZcalfPC5NqlSpTtJ4T6ZtRdluntKncJ32a06mh+5GtYeRZIO4u4VDoUgNN+b7L dx/eTXIfZJZ4PFqMNeDRisPw4cl3R7CGutTJM6h9ju/uKhnKJvkvYN2sN2VAa5x0 4wzeaHCZPQ/qtH267hFX41rZW4RLek+sGeXqVQPln8ZPk3u0rAnKc2okDNHwIIXu 5DmWdTpJbyGkbseoIrtxZ3ubvRnxAtUYkgrp9KcinvZTQqUmWiWz6NDRptChU7/6 SKoO7MIrg/KFmxM9HaLCdMGfxnEHWtY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:01:42 2025 by rpki-client