$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa File: 5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json) Hash identifier: AJIgHSQJcGEFj5cPx+c4cUvDJYOFLP4/TkTr123KIVw= Subject key identifier: 87:C9:19:DB:24:C4:84:A6:CB:96:CC:D4:3C:74:2D:3F:71:6D:1E:80 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584BABFD0D0618134205AE155F20 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0d:06:18:13:42:05:ae:15:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d123072d-7465-4c18-b47a-f34f1b2e1d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:e7:5b:04:62:39:a7:7b:e6:b7:aa:96:83: 5c:56:84:b1:24:3f:6b:3c:8d:20:89:bc:72:c0:bd: 1f:ec:f5:72:ac:42:11:58:27:d2:89:a3:38:b5:e6: 96:50:65:b9:ab:f2:a0:a5:d7:c3:ca:35:18:27:e1: 90:02:cf:2e:d0:9e:13:c7:fd:60:13:e3:2f:40:28: d8:d3:35:54:03:f6:cc:39:14:48:0a:7f:63:7d:ed: 86:b3:d2:58:f3:f3:24:94:fe:00:91:66:0d:44:ee: f6:20:dd:85:7d:7a:64:2c:b3:c4:da:89:4d:b6:80: fe:41:24:dd:ad:b7:bb:6e:48:55:5f:dd:ec:af:7a: 7b:8d:a9:dc:4c:d0:25:b9:40:2e:ef:9f:36:16:05: 6f:52:18:61:36:d5:fd:37:ff:f5:e2:6c:07:8e:68: 8f:c7:c4:82:68:62:29:b6:51:24:77:81:0e:ad:f8: 15:28:e6:0f:40:4d:19:76:fb:d7:26:00:d0:40:53: 1f:2e:e7:9c:d9:e7:a3:ca:8f:ee:57:8e:a9:59:09: 1a:e3:b3:3b:05:41:8f:bb:12:8f:4b:be:e8:c3:0c: 4a:61:81:3b:e2:de:d6:90:e5:3d:ce:16:27:d8:7f: b0:da:63:75:9e:58:e6:64:98:6e:8a:44:11:b3:d9: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C9:19:DB:24:C4:84:A6:CB:96:CC:D4:3C:74:2D:3F:71:6D:1E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:43:24:b6:51:1b:ab:13:6c:80:1f:36:80:b9:80:e4:75:80: e5:2a:75:8e:bb:a0:36:90:35:47:51:de:38:cf:db:e9:8c:f5: 6e:66:91:fb:74:51:cd:c4:7f:8f:9d:47:c5:ed:59:eb:97:43: 0f:80:5a:64:45:42:b6:98:77:cd:1e:13:d4:28:b7:75:b9:1c: 05:28:d6:8b:49:f9:4c:90:e4:ed:6e:4a:3d:f4:6b:04:67:95: 81:ee:7a:38:42:4b:ce:c5:00:78:de:4a:97:9f:d3:9e:5a:da: f9:b1:32:08:89:66:99:2c:f2:ad:6a:a7:51:f3:a5:e7:f8:b8: c2:6b:17:27:27:e0:db:a3:c3:20:1b:d7:65:16:74:57:66:42: b1:b6:22:3e:88:ef:40:d2:7c:07:f8:1c:2c:e7:21:e1:04:f0: 6e:3b:ed:1e:38:4f:b2:10:e5:2a:2c:23:a6:d5:95:31:80:c3: 5a:34:93:a8:29:67:6a:d1:19:90:3b:51:45:bb:70:49:69:aa: ee:9c:f0:22:d9:03:a8:a8:8b:3c:35:36:f0:0d:f3:9b:42:e5: 08:33:d3:be:51:e8:ce:58:3e:85:37:db:f8:55:b5:5f:c7:5c: 90:87:39:4f:2e:37:16:45:18:c3:de:5a:98:e2:68:4a:e0:de: 44:ad:3b:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Q0GGBNCBa4VXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDEyMzA3MmQtNzQ2NS00YzE4LWI0N2EtZjM0ZjFiMmUxZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj67nWwRiOad75reqloNcVoSxJD9rPI0gibxy wL0f7PVyrEIRWCfSiaM4teaWUGW5q/KgpdfDyjUYJ+GQAs8u0J4Tx/1gE+MvQCjY 0zVUA/bMORRICn9jfe2Gs9JY8/MklP4AkWYNRO72IN2FfXpkLLPE2olNtoD+QSTd rbe7bkhVX93sr3p7jancTNAluUAu7582FgVvUhhhNtX9N//14mwHjmiPx8SCaGIp tlEkd4EOrfgVKOYPQE0ZdvvXJgDQQFMfLuec2eejyo/uV46pWQka47M7BUGPuxKP S77owwxKYYE74t7WkOU9zhYn2H+w2mN1nljmZJhuikQRs9neJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfJGdskxISmy5bM1Dx0LT9xbR6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvNTk2NWIwMzEtZWYzNC0z MTA0LWFhZTQtNmU0NzZkNjQ1Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRDJLZRG6sTbIAfNoC5gOR1gOUqdY67oDaQNUdR3jjP2+mM9W5mkft0 Uc3Ef4+dR8XtWeuXQw+AWmRFQraYd80eE9Qot3W5HAUo1otJ+UyQ5O1uSj30awRn lYHuejhCS87FAHjeSpef055a2vmxMgiJZpks8q1qp1Hzpef4uMJrFycn4NujwyAb 12UWdFdmQrG2Ij6I70DSfAf4HCznIeEE8G477R44T7IQ5SosI6bVlTGAw1o0k6gp Z2rRGZA7UUW7cElpqu6c8CLZA6ioizw1NvAN85tC5Qgz075R6M5YPoU32/hVtV/H XJCHOU8uNxZFGMPeWpjiaErg3kStO2U= -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:32 2025 by rpki-client