$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/111cf5c3-9ef7-3475-8759-6da1b38bb513.roa File: 111cf5c3-9ef7-3475-8759-6da1b38bb513.roa (raw, json) Hash identifier: 1m0GOtHBtgcMNfiYw8mm59CY16Hy7Gb5Wc6gcn+YrJM= Subject key identifier: D1:FD:63:81:7C:98:3C:28:B7:79:09:0E:5B:F7:F4:09:A6:1E:CB:48 Certificate issuer: /CN=88119593-ed92-40c6-8543-9a9b06b6a64f Certificate serial: 010D0C9F4328584BAEC7BED8C9AB80FA2AE6F280 Authority key identifier: 86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/111cf5c3-9ef7-3475-8759-6da1b38bb513.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 192.81.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:be:d8:c9:ab:80:fa:2a:e6:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88119593-ed92-40c6-8543-9a9b06b6a64f Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=01cb6eeb-1eba-43f1-846a-28e1f38bed88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:f5:c0:3e:79:a1:4a:65:6f:dd:de:3d:27: 72:4d:a9:c4:8e:36:47:8a:8e:ba:4d:92:1c:d4:d0: 07:25:bd:42:dc:bd:e0:d2:b8:eb:04:f6:f7:de:ff: ea:f4:3a:33:fd:1f:38:0d:1d:b6:72:68:b1:f1:61: aa:c4:b9:c9:38:05:ec:1b:d4:69:1b:eb:ef:53:30: 4a:2f:72:20:51:f8:e3:0b:09:9f:dd:7f:3e:5d:49: c9:d9:bd:1f:ac:4c:60:20:3f:2a:77:65:1c:29:d1: e4:7d:68:c9:64:d3:17:9c:36:eb:bd:1d:a0:98:5e: f3:39:38:dd:08:39:4d:b8:c3:a6:be:04:cb:58:5d: 06:83:5d:46:ce:48:36:96:e9:60:d4:96:1a:38:63: da:15:5f:ec:b6:f4:1a:84:a8:fb:43:fd:42:72:ca: 31:29:f2:56:14:4a:7f:52:c7:c8:c2:5f:13:70:cf: ef:3d:ea:2d:54:12:59:23:64:52:ac:ac:92:3e:68: 9e:1c:25:d6:76:f6:a7:0c:1a:31:f1:d9:36:bf:d1: ac:2c:1b:df:ac:42:cc:70:b0:63:23:8a:ae:1a:c7: bc:e2:52:de:5a:0b:a6:cd:77:5b:f7:e3:fa:f7:79: 8a:11:d5:6f:14:25:ac:e9:42:ca:29:74:41:26:75: ff:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:63:81:7C:98:3C:28:B7:79:09:0E:5B:F7:F4:09:A6:1E:CB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/111cf5c3-9ef7-3475-8759-6da1b38bb513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl X509v3 Authority Key Identifier: keyid:86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer sbgp-ipAddrBlock: critical IPv4: 192.81.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:96:28:e5:ed:a2:eb:3e:38:8d:b6:9d:f1:6c:83:ef:fb:4b: 32:b7:6b:31:1c:74:15:eb:ac:49:66:43:b7:b6:68:0b:bf:72: 37:0f:67:bc:e6:94:25:85:ce:05:92:99:09:94:28:c9:c2:46: d8:ff:74:97:db:85:1d:90:2e:9b:63:0e:d3:5c:d5:27:cc:ce: a6:44:25:19:25:6a:c9:73:41:77:2e:60:80:02:b6:44:dc:43: 36:fe:0f:ec:ab:70:49:18:68:c7:dd:37:1f:fa:82:3c:e1:68: 57:67:aa:e6:8b:5b:b3:58:ae:c6:c0:60:60:6f:d3:f0:23:e8: 85:62:52:b8:33:e8:a5:48:68:4b:9a:51:57:8c:22:0f:71:43: 11:d8:1a:9a:3c:71:6b:ad:2f:2e:28:2d:8f:93:1f:f9:c0:20: 6c:89:8b:94:97:db:d7:49:0d:65:c0:9e:85:59:a1:60:5b:7d: 22:20:4f:71:df:5c:e6:c8:b5:71:fd:90:68:8e:6a:07:a2:76: bd:51:33:83:ef:43:2b:e0:d3:ac:eb:a4:d0:44:78:e3:5d:32: d1:82:bf:f6:e7:e2:cb:82:ea:4f:d7:75:05:55:df:16:0e:bc: af:96:72:8b:32:3a:7e:7e:9f:4d:76:5c:35:82:f5:11:51:79: 5f:ae:17:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux77YyauA+irm8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgxMTk1OTMtZWQ5Mi00MGM2LTg1NDMtOWE5YjA2YjZh NjRmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MDFjYjZlZWItMWViYS00M2YxLTg0NmEtMjhlMWYzOGJlZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi731wD55oUplb93ePSdyTanEjjZHio66TZIc 1NAHJb1C3L3g0rjrBPb33v/q9Doz/R84DR22cmix8WGqxLnJOAXsG9RpG+vvUzBK L3IgUfjjCwmf3X8+XUnJ2b0frExgID8qd2UcKdHkfWjJZNMXnDbrvR2gmF7zOTjd CDlNuMOmvgTLWF0Gg11Gzkg2lulg1JYaOGPaFV/stvQahKj7Q/1CcsoxKfJWFEp/ UsfIwl8TcM/vPeotVBJZI2RSrKySPmieHCXWdvanDBox8dk2v9GsLBvfrELMcLBj I4quGse84lLeWgumzXdb9+P693mKEdVvFCWs6ULKKXRBJnX/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH9Y4F8mDwot3kJDlv39AmmHstIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ODEx OTU5My1lZDkyLTQwYzYtODU0My05YTliMDZiNmE2NGYvMTExY2Y1YzMtOWVmNy0z NDc1LTg3NTktNmRhMWIzOGJiNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODgxMTk1OTMtZWQ5Mi00MGM2LTg1 NDMtOWE5YjA2YjZhNjRmLzg4MTE5NTkzLWVkOTItNDBjNi04NTQzLTlhOWIwNmI2 YTY0Zi5jcmwwHwYDVR0jBBgwFoAUhlsAUloD3yryH2+pZrhgj9I+MNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ODExOTU5My1lZDkyLTQwYzYtODU0My05YTli MDZiNmE2NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyWKOXtous+OI22nfFsg+/7SzK3azEcdBXrrElmQ7e2aAu/cjcPZ7zm lCWFzgWSmQmUKMnCRtj/dJfbhR2QLptjDtNc1SfMzqZEJRklaslzQXcuYIACtkTc Qzb+D+yrcEkYaMfdNx/6gjzhaFdnquaLW7NYrsbAYGBv0/Aj6IViUrgz6KVIaEua UVeMIg9xQxHYGpo8cWutLy4oLY+TH/nAIGyJi5SX29dJDWXAnoVZoWBbfSIgT3Hf XObItXH9kGiOageidr1RM4PvQyvg06zrpNBEeONdMtGCv/bn4suC6k/XdQVV3xYO vK+WcosyOn5+n012XDWC9RFReV+uF00= -----END CERTIFICATE-----Generated at Wed Nov 5 09:41:35 2025 by rpki-client