$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa File: a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa (raw, json) Hash identifier: +Kemo86FaBAo2/OBRySy/pp8/PH51zjVR3oUzIv8tss= Subject key identifier: 12:11:58:CD:CB:C0:EB:55:47:47:83:CB:39:E4:0E:CE:62:F4:52:0E Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584BABFD0CDBCD1C61752DB817F0 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 29764 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0c:db:cd:1c:61:75:2d:b8:17:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=2c74ded6-4ef4-4664-826b-83e049cb7264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:47:6b:ea:fd:4f:cc:87:c8:a2:0e:73:dd: 63:f3:fd:68:ad:12:5c:c2:8b:89:9b:15:65:cd:53: 10:33:72:70:d9:e6:ff:97:8e:3b:0f:03:7c:bd:d9: 55:60:d0:ab:b7:fd:f7:32:64:e4:73:41:63:22:36: 18:66:8c:1d:27:72:ec:c9:47:b9:3a:26:dd:92:9f: 1a:d1:68:6a:25:d6:86:b8:d6:22:9f:73:fe:aa:be: 68:c6:85:75:84:bb:26:80:6d:a5:11:af:9b:75:16: f4:05:38:12:e5:a3:34:04:cc:cc:35:45:4e:c5:28: 33:74:e7:51:f8:74:b7:51:df:79:58:90:54:93:29: 65:08:51:34:cf:6c:a0:68:43:c0:52:f4:59:c2:3c: 6e:c8:3f:0b:93:a5:db:39:2d:4c:34:c3:9e:6b:09: 6f:b8:5e:86:34:4e:e1:3d:cb:4d:36:ce:35:89:4c: 5b:73:b2:62:f4:8a:4f:f2:56:3c:ce:39:f0:6b:41: 16:7b:c3:e2:b9:33:b4:b3:91:de:bc:82:76:5d:d1: ae:d4:e1:68:74:ad:62:40:0d:5f:49:e2:a9:6d:f8: 3a:39:c7:f2:09:b0:8d:07:26:ad:d9:6b:5c:6d:ed: 09:8a:80:19:32:50:9d:4f:d0:19:58:eb:06:18:10: a7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:58:CD:CB:C0:EB:55:47:47:83:CB:39:E4:0E:CE:62:F4:52:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:17:a1:a2:2c:71:49:89:78:4a:53:8f:d9:c8:1f:a9:60:11: 31:04:17:9a:fd:8a:98:72:18:76:f8:37:c1:96:96:db:13:aa: c3:ad:96:a0:b9:61:17:b4:ce:b6:87:68:b9:98:e3:8c:9e:bb: e8:66:5d:b4:23:58:11:b1:39:a9:6f:bc:65:e3:fd:9c:a6:4d: 43:07:7d:33:0e:cf:77:85:3d:ae:ad:66:04:f8:8d:6d:80:ec: a0:99:34:8f:ca:c6:8a:62:ac:da:8c:b7:d6:8c:0f:b2:7e:6b: 98:b0:a1:cb:ab:c3:ad:55:cc:ca:47:d4:fe:cf:79:15:d2:33: 41:c6:ef:03:d3:32:0a:97:32:73:e7:0d:25:b1:bc:23:5d:28: dc:55:16:7d:19:b1:eb:bc:a2:8e:77:f7:85:b8:6a:e4:8b:43: ef:cb:75:c0:7b:52:a3:df:5b:13:91:55:f0:65:c6:10:7c:8d: 42:67:a6:05:db:15:3a:0d:b1:4c:45:e2:d6:9c:65:ed:f1:8c: 9a:12:85:b4:00:e1:27:19:ac:fc:78:cb:60:68:fe:80:62:94: 27:12:f3:2a:16:ac:41:51:d7:af:f9:d7:1c:3d:6c:1b:3f:67: c4:3b:d5:97:4b:58:7f:ed:e1:b4:c3:7f:c4:2e:f2:1d:27:ac: 6b:60:40:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QzbzRxhdS24F/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MmM3NGRlZDYtNGVmNC00NjY0LTgyNmItODNlMDQ5Y2I3MjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGpHa+r9T8yHyKIOc91j8/1orRJcwouJmxVl zVMQM3Jw2eb/l447DwN8vdlVYNCrt/33MmTkc0FjIjYYZowdJ3LsyUe5Oibdkp8a 0WhqJdaGuNYin3P+qr5oxoV1hLsmgG2lEa+bdRb0BTgS5aM0BMzMNUVOxSgzdOdR +HS3Ud95WJBUkyllCFE0z2ygaEPAUvRZwjxuyD8Lk6XbOS1MNMOeawlvuF6GNE7h PctNNs41iUxbc7Ji9IpP8lY8zjnwa0EWe8PiuTO0s5HevIJ2XdGu1OFodK1iQA1f SeKpbfg6OcfyCbCNByat2Wtcbe0JioAZMlCdT9AZWOsGGBCndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIRWM3LwOtVR0eDyznkDs5i9FIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvYTFiN2I4ZDEtNDRiNS0z OTY2LWIwNTMtYzY2MWE2ZmEzNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMXoaIscUmJeEpTj9nIH6lgETEEF5r9iphyGHb4N8GWltsTqsOtlqC5 YRe0zraHaLmY44yeu+hmXbQjWBGxOalvvGXj/ZymTUMHfTMOz3eFPa6tZgT4jW2A 7KCZNI/KxopirNqMt9aMD7J+a5iwocurw61VzMpH1P7PeRXSM0HG7wPTMgqXMnPn DSWxvCNdKNxVFn0Zseu8oo5394W4auSLQ+/LdcB7UqPfWxORVfBlxhB8jUJnpgXb FToNsUxF4tacZe3xjJoShbQA4ScZrPx4y2Bo/oBilCcS8yoWrEFR16/51xw9bBs/ Z8Q71ZdLWH/t4bTDf8Qu8h0nrGtgQH8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:25:33 2025 by rpki-client