$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa File: 02d90035-da81-3e67-96c7-9feeef8b261e.roa (raw, json) Hash identifier: +/hiQ+po1lY6iAL1raCEZOnZAxFHAz3WmQ6LhLR1oIY= Subject key identifier: 04:EB:B0:5B:76:20:3F:B9:D0:3A:A2:0B:37:95:EC:2C:85:E3:B7:49 Certificate issuer: /CN=45657d9f-043b-4838-9072-ef0906bb567e Certificate serial: 010D0C9F4328584BC2705046F28E8049150B4880 Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 16652 IP address blocks: 199.254.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:50:46:f2:8e:80:49:15:0b:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=c71abc56-b488-4058-be5e-fd13710074a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:db:5e:3c:af:61:85:9a:4c:75:f7:83:f5: fc:fe:d7:b4:cb:3d:b6:27:71:7b:cf:2c:49:a3:ce: 38:80:a9:f8:e3:3e:68:62:1e:77:ee:ae:53:54:03: a6:dc:15:19:e7:d7:dd:0b:f4:62:f5:3e:42:12:3f: 87:74:ab:ec:20:c2:fd:12:af:87:90:6b:bf:76:d4: 77:2e:17:c4:0a:ee:66:e3:d3:0f:63:60:54:3e:ff: 32:70:a2:91:d2:90:fc:5d:77:09:3e:cb:75:86:17: c9:fe:d3:a8:be:74:31:ad:48:2b:ae:c4:57:67:64: a6:d6:c5:9c:9f:67:01:35:c9:d9:4f:7f:82:ac:27: d2:12:a6:b7:4c:d1:66:df:02:95:26:49:fe:3f:9c: 51:3f:72:81:6a:df:34:8f:4f:c3:a3:37:f1:0e:a2: 4e:9c:fe:3b:00:dc:3a:c7:33:13:7e:42:34:bc:ea: 33:d7:d9:24:20:22:43:8a:6f:2d:b5:49:39:75:80: 76:4b:38:95:cc:82:8a:c5:81:7b:b5:7d:64:93:07: 4a:79:8f:eb:ee:48:38:67:90:ea:eb:39:4b:e4:08: 68:9e:d4:c9:dd:76:1a:bf:ac:61:f4:96:ca:f9:3a: c2:68:04:30:b7:f8:fe:59:77:21:34:b2:10:71:0e: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:B0:5B:76:20:3F:B9:D0:3A:A2:0B:37:95:EC:2C:85:E3:B7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl X509v3 Authority Key Identifier: keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer sbgp-ipAddrBlock: critical IPv4: 199.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e2:2b:11:41:75:1e:49:46:7b:a0:32:12:b2:0a:02:5e:f3: 1a:35:a2:ea:5d:f1:f1:db:25:fc:90:bb:81:7b:e0:01:51:79: c4:1e:8d:26:f0:c0:08:2c:a7:13:77:c5:6f:c3:c5:04:55:74: d7:99:f3:44:07:64:2b:ae:c3:9b:d9:b6:97:f6:f9:5e:4a:ad: 88:52:7b:4f:c5:c1:97:09:ce:20:02:32:38:b5:d7:a5:23:28: f6:32:e6:69:70:ff:c8:f0:2d:33:ac:5e:b0:89:53:2a:c9:ad: d4:6e:41:69:f0:b1:20:74:3a:b3:9e:3d:4f:e3:aa:82:81:8a: 2a:62:ef:e7:36:80:1c:67:6a:03:2c:74:0f:28:8c:5d:06:b7: 77:30:fe:26:f1:56:07:57:1b:6a:0c:03:6a:55:bd:e7:14:4f: 95:9b:6f:8a:22:e7:24:d6:73:60:3f:35:e5:0b:c0:2f:ea:48: 8e:ae:03:a5:90:3d:9a:69:34:28:f7:3d:73:40:44:18:e7:9f: b9:72:ac:c1:81:25:7c:c8:46:e4:09:55:50:2c:b9:87:85:0c: 6b:df:bc:a3:f7:aa:42:39:73:aa:c8:b2:ef:47:9a:a2:80:f8: eb:8f:87:68:51:b9:5e:46:1a:8d:85:d5:9d:8d:6b:95:1e:57: 80:6a:3e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcFBG8o6ASRULSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU2NTdkOWYtMDQzYi00ODM4LTkwNzItZWYwOTA2YmI1 NjdlMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk YzcxYWJjNTYtYjQ4OC00MDU4LWJlNWUtZmQxMzcxMDA3NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGLbXjyvYYWaTHX3g/X8/te0yz22J3F7zyxJ o844gKn44z5oYh537q5TVAOm3BUZ59fdC/Ri9T5CEj+HdKvsIML9Eq+HkGu/dtR3 LhfECu5m49MPY2BUPv8ycKKR0pD8XXcJPst1hhfJ/tOovnQxrUgrrsRXZ2Sm1sWc n2cBNcnZT3+CrCfSEqa3TNFm3wKVJkn+P5xRP3KBat80j0/DozfxDqJOnP47ANw6 xzMTfkI0vOoz19kkICJDim8ttUk5dYB2SziVzIKKxYF7tX1kkwdKeY/r7kg4Z5Dq 6zlL5AhontTJ3XYav6xh9JbK+TrCaAQwt/j+WXchNLIQcQ5BuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATrsFt2ID+50DqiCzeV7CyF47dJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1 N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5MDZiYjU2N2UvMDJkOTAwMzUtZGE4MS0z ZTY3LTk2YzctOWZlZWVmOGIyNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU2NTdkOWYtMDQzYi00ODM4LTkw NzItZWYwOTA2YmI1NjdlLzQ1NjU3ZDlmLTA0M2ItNDgzOC05MDcyLWVmMDkwNmJi NTY3ZS5jcmwwHwYDVR0jBBgwFoAU2DW1wULrkV8G+8OZMWXoQiRj7mAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5 MDZiYjU2N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/iKxFBdR5JRnugMhKyCgJe8xo1oupd8fHbJfyQu4F74AFRecQejSbw wAgspxN3xW/DxQRVdNeZ80QHZCuuw5vZtpf2+V5KrYhSe0/FwZcJziACMji116Uj KPYy5mlw/8jwLTOsXrCJUyrJrdRuQWnwsSB0OrOePU/jqoKBiipi7+c2gBxnagMs dA8ojF0Gt3cw/ibxVgdXG2oMA2pVvecUT5Wbb4oi5yTWc2A/NeULwC/qSI6uA6WQ PZppNCj3PXNARBjnn7lyrMGBJXzIRuQJVVAsuYeFDGvfvKP3qkI5c6rIsu9HmqKA +OuPh2hRuV5GGo2F1Z2Na5UeV4BqPho= -----END CERTIFICATE-----Generated at Thu Nov 6 06:08:32 2025 by rpki-client