$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa File: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (raw, json) Hash identifier: 3r873EtYuvCINXZzd0OduADwE3IuzRTXNncQ3gg8Ouw= Subject key identifier: 84:76:73:C1:A9:44:34:CA:4B:B9:01:2D:71:1D:8E:4E:56:C2:3D:62 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F4328584BBE4035D40EC5581670360200 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 53423 IP address blocks: 192.171.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:35:d4:0e:c5:58:16:70:36:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f331432a-8454-4c5f-9c19-2585ad9f80ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:17:07:f1:70:0e:82:3f:5e:4f:47:8a:72: a0:51:c6:d7:d2:a0:cc:2f:1a:50:8e:fd:94:a8:2d: 41:2f:5a:c9:66:bc:5e:9c:07:7d:45:d9:ba:6c:a7: 2b:63:9c:eb:9e:9f:b2:21:d9:56:98:26:b2:a8:8b: 3d:67:30:9f:f0:2c:19:fd:ca:ce:81:43:83:6f:f3: 5f:11:19:6a:d6:a4:42:8b:82:3f:0d:ec:9b:5c:3d: e3:8e:8d:d6:f3:5b:20:e7:14:cf:86:b7:c8:33:83: b2:d4:51:76:c0:21:ab:6d:9c:49:17:45:f5:04:6f: 94:aa:b4:e4:d7:6a:9a:06:50:7e:3b:44:b9:77:26: 56:61:b5:e1:a3:34:b2:e0:95:23:26:11:53:c3:af: 94:fe:37:47:5c:4b:e6:9d:4d:06:8c:47:da:80:5e: 2c:7d:f1:bc:50:57:d8:4e:ec:dc:68:03:db:25:bf: 33:79:38:08:6c:62:af:cb:c9:43:74:62:03:b4:fd: 88:39:bb:0e:2f:ff:2a:ba:20:48:ca:68:76:de:62: 62:17:36:74:f6:be:14:eb:4d:e1:32:ec:ea:9f:55: 8c:8f:74:84:c7:98:f1:1c:59:35:86:37:e9:42:7a: f7:f7:4e:3a:09:1e:58:1b:68:0a:dd:e3:1a:2c:14: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:76:73:C1:A9:44:34:CA:4B:B9:01:2D:71:1D:8E:4E:56:C2:3D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: 192.171.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7b:16:e5:ff:88:aa:53:9f:bb:c4:d9:43:d5:4c:ca:0c:b7: 8a:76:3a:bc:5f:1e:f4:b5:e0:f6:53:22:cb:51:b7:bc:51:6f: 23:8d:0f:3f:74:22:e1:0d:66:21:9f:6a:de:49:4f:d9:6b:c3: dd:68:c3:34:3d:11:ef:29:ef:5e:9c:a6:cf:66:73:06:75:2a: b3:ad:26:b1:f8:0c:91:eb:2e:5a:1c:8f:34:91:f2:1c:2d:16: 8a:fd:d1:96:1d:91:91:30:83:2e:78:50:95:8b:15:cb:25:d5: eb:ed:e6:9c:07:37:2f:24:6c:5c:27:4c:6c:a9:ee:1b:0f:f6: b6:18:e3:4d:24:fa:7d:86:04:d9:e4:a5:e8:04:84:1e:70:56: 27:03:ab:02:af:aa:c6:81:46:3b:0e:cb:fc:d2:8e:be:63:0d: 16:af:a5:e4:e1:10:e9:41:51:df:76:cc:21:bb:3c:1d:ca:c4: 03:00:37:88:d3:31:8c:e4:4c:04:ef:3c:cc:f7:c6:a1:9a:c5: 53:5e:05:46:a2:01:e2:64:b0:af:4c:d8:78:e6:5f:ef:a5:ca: 3e:4e:f3:28:21:7d:61:72:c3:d1:fc:8c:47:72:78:8c:d6:15: c6:57:13:fa:ae:b7:aa:c8:49:95:9a:42:81:97:c8:44:91:6a: 53:ec:80:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDXUDsVYFnA2AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjMzMTQzMmEtODQ1NC00YzVmLTljMTktMjU4NWFkOWY4MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV4XB/FwDoI/Xk9HinKgUcbX0qDMLxpQjv2U qC1BL1rJZrxenAd9Rdm6bKcrY5zrnp+yIdlWmCayqIs9ZzCf8CwZ/crOgUODb/Nf ERlq1qRCi4I/DeybXD3jjo3W81sg5xTPhrfIM4Oy1FF2wCGrbZxJF0X1BG+UqrTk 12qaBlB+O0S5dyZWYbXhozSy4JUjJhFTw6+U/jdHXEvmnU0GjEfagF4sffG8UFfY TuzcaAPbJb8zeTgIbGKvy8lDdGIDtP2IObsOL/8quiBIymh23mJiFzZ09r4U603h Muzqn1WMj3SEx5jxHFk1hjfpQnr39046CR5YG2gK3eMaLBRZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR2c8GpRDTKS7kBLXEdjk5Wwj1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvMjYxMmRjMDItMzAzNi0z Y2VkLWJhMmMtOGUxYzA0YTJiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB7FuX/iKpTn7vE2UPVTMoMt4p2OrxfHvS14PZTIstRt7xRbyONDz90 IuENZiGfat5JT9lrw91owzQ9Ee8p716cps9mcwZ1KrOtJrH4DJHrLlocjzSR8hwt For90ZYdkZEwgy54UJWLFcsl1evt5pwHNy8kbFwnTGyp7hsP9rYY400k+n2GBNnk pegEhB5wVicDqwKvqsaBRjsOy/zSjr5jDRavpeThEOlBUd92zCG7PB3KxAMAN4jT MYzkTATvPMz3xqGaxVNeBUaiAeJksK9M2HjmX++lyj5O8yghfWFyw9H8jEdyeIzW FcZXE/qut6rISZWaQoGXyESRalPsgCY= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:02 2025 by rpki-client