$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa File: dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa (raw, json) Hash identifier: x5U77ujNZo9F/ll9YMj2jFBH3719F6QsnISaY0gjH10= Subject key identifier: 89:42:6B:DA:10:A3:3A:E4:A8:16:7C:76:6B:6C:BF:FF:7C:95:5A:1A Certificate issuer: /CN=4f7673d9-8cbe-46cb-ad6c-660142f77eaf Certificate serial: 010D0C9F4328584B047C1181CC8DD89560BCC580 Authority key identifier: 17:BB:6A:F5:E0:38:02:63:D7:11:32:C9:57:E9:08:8C:25:21:32:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 63180 IP address blocks: 192.55.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:11:81:cc:8d:d8:95:60:bc:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f7673d9-8cbe-46cb-ad6c-660142f77eaf Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=4cda70d3-01a8-4710-aa42-ce02f9abf608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:f2:86:df:e7:af:33:6c:2f:80:19:76:87: 5b:8d:3d:58:9f:48:06:eb:c4:e1:6a:c7:c2:c6:18: 30:25:3e:e3:a7:81:bf:2f:05:20:83:22:c3:24:a5: a1:bc:e8:1c:e1:ce:09:10:2e:2f:d6:b8:83:1f:1b: e0:b2:21:fe:92:7b:27:dc:b2:16:1f:75:94:96:cd: 36:25:ea:55:6e:94:38:a7:54:2e:10:ba:6f:78:ba: ab:e4:10:53:19:87:68:52:c2:f5:f9:50:21:b1:c2: b0:16:7b:19:a3:00:5f:49:27:77:aa:aa:37:86:65: 15:c3:17:8b:99:86:7e:68:ed:57:6a:3a:6c:49:3f: c1:aa:cd:62:51:9a:76:b3:cf:aa:49:14:dd:af:be: c6:f1:68:74:ff:ee:4e:48:b1:83:42:36:e9:73:62: 90:f7:21:cb:b5:48:d4:3f:d4:25:d6:e5:cd:2b:30: 11:68:48:a6:e5:27:e7:11:ca:83:45:ba:fd:43:f8: 22:a8:e6:da:64:93:51:c5:ce:7c:b1:4b:61:af:28: 12:4b:a1:b3:c9:5c:66:80:0c:79:bc:b0:f0:5d:77: 77:a1:47:c3:6f:02:7c:84:1f:73:3c:4d:24:35:32: d2:ea:ce:d3:fd:ab:ce:f0:85:cf:df:63:1e:c8:eb: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:42:6B:DA:10:A3:3A:E4:A8:16:7C:76:6B:6C:BF:FF:7C:95:5A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/dbaa2dbf-0f7f-3db1-bc48-5e9a3cb9af4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.crl X509v3 Authority Key Identifier: keyid:17:BB:6A:F5:E0:38:02:63:D7:11:32:C9:57:E9:08:8C:25:21:32:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4f7673d9-8cbe-46cb-ad6c-660142f77eaf.cer sbgp-ipAddrBlock: critical IPv4: 192.55.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:79:6f:68:66:bb:1e:2f:9d:03:c0:af:32:9f:94:95:9e:38: ee:ea:fb:c1:30:04:d6:54:16:00:69:c8:d1:9f:55:55:b5:1f: 66:94:6f:5b:57:2a:34:a9:73:33:83:9c:c6:01:97:6e:22:2d: 84:13:b4:3b:58:4b:38:28:2d:fd:93:d6:2a:da:ab:8b:0b:d5: 38:d0:ec:72:5a:68:53:55:22:65:fc:4c:39:1d:6d:db:d0:5d: ba:44:88:2d:ef:da:a3:99:c0:c1:fb:79:17:54:3c:78:2b:0c: 25:1c:0a:89:da:56:7f:e9:ba:d8:34:34:db:09:9c:27:04:65: dd:b5:4b:89:e4:35:29:c6:a7:4e:9e:16:6d:2b:dc:04:a0:32: ee:27:20:31:87:77:af:57:a4:cb:1e:df:93:c1:94:81:83:25: 1a:4a:b6:8a:f7:ee:85:6c:4c:3f:e9:76:5f:fd:fa:05:50:f3: fc:42:21:27:9c:37:70:2d:29:7c:c3:76:9f:4d:07:c5:e3:e8: cb:c5:07:79:c7:61:34:a6:7c:d5:b9:9c:c5:75:bb:46:9d:30: 9f:f6:42:d4:ed:1f:6b:29:e3:50:a4:a5:5a:2a:e5:2a:cb:b9: 59:cb:33:c1:02:62:74:90:e1:58:9e:42:27:d3:0e:5d:a5:a0: 11:fd:63:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBGBzI3YlWC8xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY3NjczZDktOGNiZS00NmNiLWFkNmMtNjYwMTQyZjc3 ZWFmMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGNkYTcwZDMtMDFhOC00NzEwLWFhNDItY2UwMmY5YWJmNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgfyht/nrzNsL4AZdodbjT1Yn0gG68ThasfC xhgwJT7jp4G/LwUggyLDJKWhvOgc4c4JEC4v1riDHxvgsiH+knsn3LIWH3WUls02 JepVbpQ4p1QuELpveLqr5BBTGYdoUsL1+VAhscKwFnsZowBfSSd3qqo3hmUVwxeL mYZ+aO1XajpsST/Bqs1iUZp2s8+qSRTdr77G8Wh0/+5OSLGDQjbpc2KQ9yHLtUjU P9Ql1uXNKzARaEim5SfnEcqDRbr9Q/giqObaZJNRxc58sUthrygSS6GzyVxmgAx5 vLDwXXd3oUfDbwJ8hB9zPE0kNTLS6s7T/avO8IXP32MeyOuGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlCa9oQozrkqBZ8dmtsv/98lVoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Zjc2 NzNkOS04Y2JlLTQ2Y2ItYWQ2Yy02NjAxNDJmNzdlYWYvZGJhYTJkYmYtMGY3Zi0z ZGIxLWJjNDgtNWU5YTNjYjlhZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGY3NjczZDktOGNiZS00NmNiLWFk NmMtNjYwMTQyZjc3ZWFmLzRmNzY3M2Q5LThjYmUtNDZjYi1hZDZjLTY2MDE0MmY3 N2VhZi5jcmwwHwYDVR0jBBgwFoAUF7tq9eA4AmPXETLJV+kIjCUhMhIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80Zjc2NzNkOS04Y2JlLTQ2Y2ItYWQ2Yy02NjAx NDJmNzdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ5b2hmux4vnQPArzKflJWeOO7q+8EwBNZUFgBpyNGfVVW1H2aUb1tX KjSpczODnMYBl24iLYQTtDtYSzgoLf2T1iraq4sL1TjQ7HJaaFNVImX8TDkdbdvQ XbpEiC3v2qOZwMH7eRdUPHgrDCUcConaVn/putg0NNsJnCcEZd21S4nkNSnGp06e Fm0r3ASgMu4nIDGHd69XpMse35PBlIGDJRpKtor37oVsTD/pdl/9+gVQ8/xCISec N3AtKXzDdp9NB8Xj6MvFB3nHYTSmfNW5nMV1u0adMJ/2QtTtH2sp41CkpVoq5SrL uVnLM8ECYnSQ4VieQifTDl2loBH9Y2E= -----END CERTIFICATE-----Generated at Fri Nov 7 12:40:50 2025 by rpki-client