$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/2c6c7425-b400-3f56-9d38-a5ab6a978294.roa File: 2c6c7425-b400-3f56-9d38-a5ab6a978294.roa (raw, json) Hash identifier: 9MKoTPpi1j1MwYQC2QvXW8pGxDFfk0VncnH6A8oW5t0= Subject key identifier: 3C:68:E2:BD:D8:E0:10:41:A6:00:D5:F3:A6:FD:1B:67:55:99:35:F6 Certificate issuer: /CN=84304b6a-cd4a-40f2-b142-5f44e824b547 Certificate serial: 010D0C9F4328584BBE40334C3CB0C445ED3B3680 Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/2c6c7425-b400-3f56-9d38-a5ab6a978294.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 35280 IP address blocks: 192.243.85.0/24 maxlen: 24 192.243.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:33:4c:3c:b0:c4:45:ed:3b:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c884b1cc-73cc-43c7-b944-698219b06f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:0a:63:02:da:3c:05:6f:59:1a:73:8a:a1: e8:63:af:45:41:8e:4a:06:4b:ff:dc:58:a9:8c:af: 13:0d:5c:1e:c4:84:a7:59:42:fb:05:bc:6e:1e:50: 5d:79:2d:2a:4f:2a:15:1d:74:3c:de:4f:83:fb:5d: af:fa:62:91:bc:bd:01:c3:9a:86:b6:d5:21:4c:a5: 33:c7:ee:fc:ab:23:fd:44:45:ee:ce:78:ae:a5:27: ef:3d:e5:14:b8:33:6f:e4:83:e3:53:33:0c:66:9c: d1:b7:fd:e5:f8:d5:ee:30:76:83:18:00:c2:dc:56: f5:17:ae:09:c6:e3:82:07:f0:03:60:05:f8:a6:cd: 8b:58:93:19:fd:77:62:3e:88:34:33:fa:5d:b7:60: 69:3e:2d:ef:c5:b8:c0:60:ed:cb:f1:b8:cf:43:f5: 8c:be:dd:65:cf:d7:0c:a5:46:69:de:07:16:75:d6: d8:82:8d:a4:08:d1:1b:e2:46:dc:6e:27:5a:0b:e9: e9:06:81:95:84:ff:93:dd:7b:7e:bd:ae:2e:f1:12: 74:b8:01:24:e4:77:32:1e:b6:d6:a9:f6:70:26:a3: 58:73:88:60:3c:b9:31:4d:14:b7:de:0e:39:3b:60: db:60:6b:07:98:67:ac:7c:1e:8d:ab:b0:8c:67:9e: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:E2:BD:D8:E0:10:41:A6:00:D5:F3:A6:FD:1B:67:55:99:35:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/2c6c7425-b400-3f56-9d38-a5ab6a978294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl X509v3 Authority Key Identifier: keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer sbgp-ipAddrBlock: critical IPv4: 192.243.85.0/24 192.243.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a3:1e:d8:bb:68:ac:88:17:b4:ba:34:64:37:92:a0:df:71: f7:f4:9a:9c:66:42:64:4e:e0:a5:a4:14:b0:66:3a:ce:34:41: ab:f6:3c:4b:8b:e3:3b:e5:3c:5f:d6:55:ee:a1:b2:d5:71:cb: ba:93:e6:2c:31:16:88:00:a8:3f:94:cd:2a:2f:86:f8:85:ee: a1:64:45:7e:07:1e:49:03:ae:2e:43:51:65:c3:39:be:7a:ab: 70:46:04:e2:c5:6e:da:7b:f7:77:69:7c:64:70:44:df:07:b6: 64:fa:3e:c1:5b:a0:b7:87:cc:50:81:11:82:ad:a5:e4:a1:52: 92:63:77:1f:0a:00:77:59:12:57:91:55:7d:84:0e:2b:00:40: fb:09:7a:10:ba:97:c9:d7:75:40:70:b7:e2:26:09:fd:22:f9: 5c:0c:6a:d1:08:2f:0f:30:b0:d1:58:90:b3:36:15:29:1e:7d: 4a:2b:96:ef:bd:36:f5:04:3d:0a:7c:1f:d8:67:e1:94:92:b1: 01:91:ae:f9:61:b1:ef:26:7d:5f:ba:7b:9c:20:ca:87:aa:b7: c0:9b:1b:3e:d4:bd:40:2e:6b:4e:6f:c9:09:4d:ec:d7:6c:05: 5f:4d:55:d2:f4:9a:43:73:c8:a2:37:69:14:17:50:46:c9:9b: 72:ea:d3:45 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu+QDNMPLDERe07NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzMDRiNmEtY2Q0YS00MGYyLWIxNDItNWY0NGU4MjRi NTQ3MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk Yzg4NGIxY2MtNzNjYy00M2M3LWI5NDQtNjk4MjE5YjA2ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfIKYwLaPAVvWRpziqHoY69FQY5KBkv/3Fip jK8TDVwexISnWUL7BbxuHlBdeS0qTyoVHXQ83k+D+12v+mKRvL0Bw5qGttUhTKUz x+78qyP9REXuzniupSfvPeUUuDNv5IPjUzMMZpzRt/3l+NXuMHaDGADC3Fb1F64J xuOCB/ADYAX4ps2LWJMZ/XdiPog0M/pdt2BpPi3vxbjAYO3L8bjPQ/WMvt1lz9cM pUZp3gcWddbYgo2kCNEb4kbcbidaC+npBoGVhP+T3Xt+va4u8RJ0uAEk5HcyHrbW qfZwJqNYc4hgPLkxTRS33g45O2DbYGsHmGesfB6Nq7CMZ56K3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDxo4r3Y4BBBpgDV86b9G2dVmTX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NDMw NGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0ZTgyNGI1NDcvMmM2Yzc0MjUtYjQwMC0z ZjU2LTlkMzgtYTVhYjZhOTc4Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODQzMDRiNmEtY2Q0YS00MGYyLWIx NDItNWY0NGU4MjRiNTQ3Lzg0MzA0YjZhLWNkNGEtNDBmMi1iMTQyLTVmNDRlODI0 YjU0Ny5jcmwwHwYDVR0jBBgwFoAUPf1lkVOGZzUg0FsqvFPFF6iUjVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NDMwNGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0 ZTgyNGI1NDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwPNVAwQA wPNfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEmjHti7aKyIF7S6NGQ3kqDfcff0mpxmQmRO4KWkFLBmOs40 Qav2PEuL4zvlPF/WVe6hstVxy7qT5iwxFogAqD+UzSovhviF7qFkRX4HHkkDri5D UWXDOb56q3BGBOLFbtp793dpfGRwRN8HtmT6PsFboLeHzFCBEYKtpeShUpJjdx8K AHdZEleRVX2EDisAQPsJehC6l8nXdUBwt+ImCf0i+VwMatEILw8wsNFYkLM2FSke fUorlu+9NvUEPQp8H9hn4ZSSsQGRrvlhse8mfV+6e5wgyoeqt8CbGz7UvUAua05v yQlN7NdsBV9NVdL0mkNzyKI3aRQXUEbJm3Lq00U= -----END CERTIFICATE-----Generated at Tue Nov 4 22:26:22 2025 by rpki-client