$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa File: d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json) Hash identifier: btGndNmYR7Ve5PZfTuQPqk3p6qypayg37XqsF4iUU8c= Subject key identifier: B0:26:32:E1:38:65:AB:45:D1:6F:66:FE:6C:84:F6:35:59:C6:09:C1 Certificate issuer: /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6 Certificate serial: 010D0C9F4328584AF951435CF26E3FC8098C9D00 Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16509 IP address blocks: 192.172.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:43:5c:f2:6e:3f:c8:09:8c:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=9999bbe6-85e1-4f00-af75-631138313692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:c8:f0:86:42:0b:f5:39:ed:fd:92:bc:61: 58:9b:a1:65:c0:e5:a7:bc:5b:15:3a:6d:4d:65:35: d7:03:05:dd:5f:82:d2:30:57:30:8e:f0:f1:eb:f4: e5:45:c0:0c:e8:c5:33:6f:7f:85:a8:0e:9c:80:25: 8f:85:ef:fc:39:fb:39:22:60:cd:e4:8e:db:a3:fc: 65:dc:73:1a:fd:76:6f:31:33:37:d1:c0:b6:9a:99: 3b:66:85:07:aa:0c:03:c8:30:17:56:63:de:6f:6b: c6:3c:0f:41:f7:21:f1:6b:47:6c:1a:5b:ca:98:ff: 6e:4c:ca:35:12:9f:5a:a8:d6:79:d3:1a:25:9d:48: 8c:23:64:31:e3:16:88:0c:94:e7:90:a3:c8:12:91: 07:5b:bc:59:22:bc:d1:f1:73:e3:7d:2b:8a:a1:82: 0e:db:e4:6e:cd:2b:73:04:18:90:3d:7d:bf:db:cf: 64:92:88:89:13:b1:63:c1:24:6f:ba:fe:17:65:6b: d4:00:af:d1:3c:ae:b3:d5:d2:11:4d:ed:6d:10:2b: 82:48:9f:bc:c6:0e:f0:1f:58:87:2f:4d:f3:5e:89: fd:ca:f6:9b:50:09:7f:02:f7:4d:e9:40:78:a6:b7: b1:28:a3:e2:37:67:dc:24:99:f4:28:3c:4c:fe:e7: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:26:32:E1:38:65:AB:45:D1:6F:66:FE:6C:84:F6:35:59:C6:09:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl X509v3 Authority Key Identifier: keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer sbgp-ipAddrBlock: critical IPv4: 192.172.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e6:bb:77:b0:0a:41:11:e9:60:26:fd:cb:53:d8:6d:dd:52: d7:91:36:06:21:e9:9a:ed:95:fb:67:21:65:b7:ea:dc:6c:bf: a8:ef:b2:67:d2:b8:f1:06:50:b5:75:4a:08:4b:25:87:58:54: 2a:60:34:23:42:52:a5:0d:89:9d:66:63:f7:ea:26:7f:1b:19: b2:80:ef:f9:80:4b:6d:b2:49:06:84:6e:c8:31:dc:74:13:f5: 01:d2:86:95:6b:04:e1:21:d2:a5:10:4f:66:0c:86:8d:79:e8: 9b:63:ae:0b:0c:5f:6e:b3:83:0e:4c:ee:55:cc:50:aa:ae:e8: f3:bd:e9:dd:6e:a3:6d:c3:46:46:a8:9b:41:dd:ef:ce:aa:0b: 48:18:fe:e6:c8:95:dc:c9:34:3e:8a:04:d6:7a:72:96:a5:7e: 3c:ea:f7:78:cf:b5:76:ce:e9:2c:72:34:55:db:27:70:ca:a5: d8:df:91:b5:a9:3f:91:f6:d1:8e:88:d6:aa:df:15:5b:25:61: 2c:49:37:70:fd:bc:19:e0:35:5e:76:4d:6b:71:4b:54:90:3c: 32:13:95:3d:ba:ff:92:d7:48:08:c0:bf:d6:1e:71:b2:0c:d5: 62:99:1c:24:d9:73:16:73:52:47:75:66:48:99:8c:d8:3e:7e: 2a:7b:d6:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUNc8m4/yAmMnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgzNDRhMWItNTY1Yy00Y2RmLWIyZWUtOTU1NmYyNzZl M2I2MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTk5OWJiZTYtODVlMS00ZjAwLWFmNzUtNjMxMTM4MzEzNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7jI8IZCC/U57f2SvGFYm6FlwOWnvFsVOm1N ZTXXAwXdX4LSMFcwjvDx6/TlRcAM6MUzb3+FqA6cgCWPhe/8Ofs5ImDN5I7bo/xl 3HMa/XZvMTM30cC2mpk7ZoUHqgwDyDAXVmPeb2vGPA9B9yHxa0dsGlvKmP9uTMo1 Ep9aqNZ50xolnUiMI2Qx4xaIDJTnkKPIEpEHW7xZIrzR8XPjfSuKoYIO2+RuzStz BBiQPX2/289kkoiJE7FjwSRvuv4XZWvUAK/RPK6z1dIRTe1tECuCSJ+8xg7wH1iH L03zXon9yvabUAl/AvdN6UB4prexKKPiN2fcJJn0KDxM/ue0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAmMuE4ZatF0W9m/myE9jVZxgnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0 NGExYi01NjVjLTRjZGYtYjJlZS05NTU2ZjI3NmUzYjYvZDI0ZTExMTktNWJlMi0z MTkwLWEzNmYtZTgwNTZkOWM5NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTgzNDRhMWItNTY1Yy00Y2RmLWIy ZWUtOTU1NmYyNzZlM2I2L2U4MzQ0YTFiLTU2NWMtNGNkZi1iMmVlLTk1NTZmMjc2 ZTNiNi5jcmwwHwYDVR0jBBgwFoAUJnz+V6BKzHPKKhwLPnzFHn+vlUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0NGExYi01NjVjLTRjZGYtYjJlZS05NTU2 ZjI3NmUzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnmu3ewCkER6WAm/ctT2G3dUteRNgYh6ZrtlftnIWW36txsv6jvsmfS uPEGULV1SghLJYdYVCpgNCNCUqUNiZ1mY/fqJn8bGbKA7/mAS22ySQaEbsgx3HQT 9QHShpVrBOEh0qUQT2YMho156JtjrgsMX26zgw5M7lXMUKqu6PO96d1uo23DRkao m0Hd786qC0gY/ubIldzJND6KBNZ6cpalfjzq93jPtXbO6SxyNFXbJ3DKpdjfkbWp P5H20Y6I1qrfFVslYSxJN3D9vBngNV52TWtxS1SQPDITlT26/5LXSAjAv9YecbIM 1WKZHCTZcxZzUkd1ZkiZjNg+fip71ko= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:23 2025 by rpki-client