$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa File: 233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json) Hash identifier: GwmXWt1GNqH41Ha5D40KSELAWEVsD48XVhggyb/tdnc= Subject key identifier: BB:10:9D:80:4F:71:9A:BC:7E:AD:27:DB:13:42:82:95:AB:98:2E:51 Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584B7F52158E1884649DA4D5F480 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:15:8e:18:84:64:9d:a4:d5:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3cf0206f-aede-482d-8220-98b90766b90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:0a:d0:fd:16:d7:5a:c5:21:e5:c8:5a:12: bc:dd:2a:a7:8c:a9:37:8f:c9:f5:30:fb:84:5a:26: 5b:73:c7:cf:30:99:c5:09:cf:cf:db:31:0d:45:4b: 4f:46:1e:82:0f:94:df:93:2b:04:22:44:dc:e7:a2: b2:c1:ea:ea:5f:9d:de:b4:36:9c:9d:fd:c0:1e:f3: ba:5a:56:e2:ea:5e:e9:7c:1f:3e:10:59:f1:5b:d9: 33:a1:47:95:75:3b:42:b2:49:40:b1:8f:c1:2e:89: 77:60:85:5c:ca:7e:6d:de:50:3f:85:0c:73:3c:2d: dd:94:cb:f4:7a:fd:14:6f:65:49:60:3f:26:bf:1f: 61:19:2f:69:1f:64:10:a0:73:5d:3f:20:84:37:93: bc:a1:c0:bd:bf:4b:4c:39:80:96:87:ee:41:06:4c: 03:d5:5d:25:67:21:87:b6:d3:01:e2:7e:38:d9:30: 06:bc:f6:e6:9c:2e:2f:88:1f:76:56:63:b0:8c:d5: 3b:38:c7:5e:69:02:64:b6:18:36:0f:aa:4f:3f:6a: fa:20:0d:5c:70:e9:da:82:aa:30:6a:14:63:bc:55: cd:6a:61:bb:c7:3b:09:15:e8:19:44:fa:a6:55:11: e7:eb:2d:09:d3:1e:28:f5:96:33:d0:be:d4:83:2c: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:10:9D:80:4F:71:9A:BC:7E:AD:27:DB:13:42:82:95:AB:98:2E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:05:30:97:94:b0:9b:33:63:4d:c2:7c:b0:8f:fd:88:48:7b: c1:e9:97:6e:8d:b5:74:b9:19:29:f5:21:b8:01:c3:e0:65:e2: f8:8c:74:0b:ad:be:83:50:69:8b:4a:7a:51:5d:b5:68:a0:6d: 6c:ee:80:81:79:77:7a:cd:60:e6:e0:fc:8d:2b:c6:66:59:d3: 40:fb:be:d0:63:69:7c:ff:68:e5:fe:4d:42:f7:13:ad:a6:70: 0c:0e:6d:32:eb:73:ea:fa:d7:b6:40:73:d0:d2:85:1e:04:6d: 5d:1f:37:69:83:83:3b:f5:33:0a:4b:0f:b3:e0:00:64:74:bb: 9c:19:80:31:5d:84:4c:b7:0a:d1:af:fc:f8:5b:6d:95:b9:72: 9b:cf:76:52:52:09:9c:43:61:d1:a2:74:a8:d8:79:14:f1:9a: 20:ce:c2:89:43:96:26:ff:95:19:0a:d9:0f:ce:35:13:c8:ec: 11:0b:7b:a8:5a:d4:32:07:4e:d7:f6:83:58:df:e1:2d:a5:9a: 96:e6:9f:ce:23:99:da:66:76:cb:bf:d5:87:8e:57:21:12:8c: b3:ee:37:3a:99:1c:d6:8c:17:49:ae:ba:e0:50:10:c8:a9:6e: 39:37:25:45:59:3b:ea:b0:67:4d:b6:bd:0d:c3:6c:cf:29:fd: 58:1a:cf:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhWOGIRknaTV9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2NmMDIwNmYtYWVkZS00ODJkLTgyMjAtOThiOTA3NjZiOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhloK0P0W11rFIeXIWhK83SqnjKk3j8n1MPuE WiZbc8fPMJnFCc/P2zENRUtPRh6CD5TfkysEIkTc56KywerqX53etDacnf3AHvO6 Wlbi6l7pfB8+EFnxW9kzoUeVdTtCsklAsY/BLol3YIVcyn5t3lA/hQxzPC3dlMv0 ev0Ub2VJYD8mvx9hGS9pH2QQoHNdPyCEN5O8ocC9v0tMOYCWh+5BBkwD1V0lZyGH ttMB4n442TAGvPbmnC4viB92VmOwjNU7OMdeaQJkthg2D6pPP2r6IA1ccOnagqow ahRjvFXNamG7xzsJFegZRPqmVRHn6y0J0x4o9ZYz0L7Ugyw8qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsQnYBPcZq8fq0n2xNCgpWrmC5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMjMzNjg4ZmUtYTMzYy0z YTgxLTk1OTctZGExNmJhYzAwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwFMJeUsJszY03CfLCP/YhIe8Hpl26NtXS5GSn1IbgBw+Bl4viMdAut voNQaYtKelFdtWigbWzugIF5d3rNYObg/I0rxmZZ00D7vtBjaXz/aOX+TUL3E62m cAwObTLrc+r617ZAc9DShR4EbV0fN2mDgzv1MwpLD7PgAGR0u5wZgDFdhEy3CtGv /PhbbZW5cpvPdlJSCZxDYdGidKjYeRTxmiDOwolDlib/lRkK2Q/ONRPI7BELe6ha 1DIHTtf2g1jf4S2lmpbmn84jmdpmdsu/1YeOVyESjLPuNzqZHNaMF0muuuBQEMip bjk3JUVZO+qwZ022vQ3DbM8p/Vgaz8Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:33 2025 by rpki-client