$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa File: 5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json) Hash identifier: 8rFavfTO7J+pYpyBW5Nb5AnO7PDmWuwdoyI6MWCWNwg= Subject key identifier: 44:53:95:27:92:4C:D7:1D:73:10:4D:ED:0E:97:B9:0C:04:8D:C4:F2 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584B0B76AB719C864B2A563ADA80 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 19782 IP address blocks: 192.200.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ab:71:9c:86:4b:2a:56:3a:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=dade15c6-0599-4156-b3b2-0f331e763365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:af:42:bb:a4:de:36:37:f2:f2:f1:b2:c8: d3:b2:c4:4c:0b:b2:c3:5b:2e:ca:3f:d0:fd:8a:b9: fe:c7:14:a5:c5:24:6a:5c:f8:d9:f7:02:c6:25:77: 06:f8:c0:df:8b:79:86:5f:86:fb:ac:54:11:18:f3: 86:d5:06:7b:96:10:6d:b9:56:e1:72:b0:96:5f:76: 7a:ce:a7:77:50:e8:15:b1:ec:92:21:4b:77:be:e9: 58:1c:33:47:05:d4:e3:b8:db:63:21:74:e9:60:b4: f7:bf:6c:3c:a2:98:5d:5a:69:8a:21:03:5b:cd:c7: b6:f8:d6:aa:4c:4f:74:3a:e3:d1:b1:18:d0:dc:5d: 7c:41:26:af:72:38:b2:22:0a:db:3b:e7:e0:8b:16: 02:91:b4:7e:cf:a3:cc:86:73:db:c3:f9:92:a8:c7: 79:4a:80:b2:91:3f:be:ba:72:3e:c5:07:08:0a:51: 27:3a:98:f3:88:ef:c8:70:7c:2d:09:b8:7d:17:19: ab:ee:ea:c5:08:fd:d9:6a:57:c9:84:0a:a6:0c:8e: df:b0:19:de:ba:fe:7c:d9:2b:58:4c:e7:e7:c7:46: a7:d0:27:be:bb:5d:52:0f:89:ea:7f:37:50:6c:ae: 12:87:43:84:e6:bf:b0:c6:b6:2d:c1:db:e8:97:35: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:95:27:92:4C:D7:1D:73:10:4D:ED:0E:97:B9:0C:04:8D:C4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:27:08:5b:4a:ed:a4:ec:01:20:66:b1:96:ca:4c:4a:cc:b1: 93:66:b8:b6:34:c3:5f:8c:9e:9d:78:d4:1c:e8:48:42:7d:ae: 97:42:7a:7c:b2:72:87:46:0e:75:19:0e:c4:93:eb:0a:6b:ba: af:97:5a:42:c0:6f:4c:90:22:4f:e5:0c:3b:19:c9:76:01:1d: f5:40:0b:dd:80:11:89:c1:47:26:dc:ad:77:cc:e3:f3:ea:65: 08:92:58:fc:2b:b1:4e:f5:d4:1d:fe:21:3b:99:32:ab:9b:28: ba:aa:8d:6a:39:65:e4:31:d2:86:10:cd:17:d2:71:03:d7:73: 12:25:29:5d:31:17:a7:87:cb:8b:ec:97:24:a2:e7:af:8d:54: bb:2b:3e:b6:2f:60:20:61:8b:ba:7c:97:a0:cb:d3:18:82:fc: f6:35:b5:87:f3:20:1a:3c:24:6b:78:9f:93:ca:bf:08:ec:26: ce:33:7d:b7:5e:dc:b3:b0:c9:e1:19:99:70:45:7f:98:e8:b6: de:a1:a9:67:54:2a:01:0a:df:8a:9a:77:19:9d:ae:93:27:19: 45:2b:2e:19:59:d0:b6:07:fb:51:4e:c7:37:a0:60:fc:c5:1c: 68:9d:5d:e9:1b:b1:b3:66:2c:02:7f:0f:76:41:3a:cf:31:92: 03:8c:0c:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqtxnIZLKlY62oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGFkZTE1YzYtMDU5OS00MTU2LWIzYjItMGYzMzFlNzYzMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLqvQruk3jY38vLxssjTssRMC7LDWy7KP9D9 irn+xxSlxSRqXPjZ9wLGJXcG+MDfi3mGX4b7rFQRGPOG1QZ7lhBtuVbhcrCWX3Z6 zqd3UOgVseySIUt3vulYHDNHBdTjuNtjIXTpYLT3v2w8ophdWmmKIQNbzce2+Naq TE90OuPRsRjQ3F18QSavcjiyIgrbO+fgixYCkbR+z6PMhnPbw/mSqMd5SoCykT++ unI+xQcIClEnOpjziO/IcHwtCbh9Fxmr7urFCP3ZalfJhAqmDI7fsBneuv582StY TOfnx0an0Ce+u11SD4nqfzdQbK4Sh0OE5r+wxrYtwdvolzXNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERTlSeSTNcdcxBN7Q6XuQwEjcTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNWE4YWExMzgtYjQwYS0z ZjhkLTg2MzAtZDI3M2I3YTg2Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsnCFtK7aTsASBmsZbKTErMsZNmuLY0w1+Mnp141BzoSEJ9rpdCenyy codGDnUZDsST6wpruq+XWkLAb0yQIk/lDDsZyXYBHfVAC92AEYnBRybcrXfM4/Pq ZQiSWPwrsU711B3+ITuZMqubKLqqjWo5ZeQx0oYQzRfScQPXcxIlKV0xF6eHy4vs lySi56+NVLsrPrYvYCBhi7p8l6DL0xiC/PY1tYfzIBo8JGt4n5PKvwjsJs4zfbde 3LOwyeEZmXBFf5jott6hqWdUKgEK34qadxmdrpMnGUUrLhlZ0LYH+1FOxzegYPzF HGidXekbsbNmLAJ/D3ZBOs8xkgOMDLk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:36 2025 by rpki-client