$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa File: 8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa (raw, json) Hash identifier: wroXSmlPBo4SQU6GuoeEWU/Vw9J8A4xVtrh2R0cWBtM= Subject key identifier: 0D:B8:B8:2E:2D:A3:8C:BA:57:20:95:0D:A3:22:57:F2:B9:2B:A1:53 Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F4328584B63674368EB93313A57883B80 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 54840 IP address blocks: 192.30.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:43:68:eb:93:31:3a:57:88:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=b0369857-2121-4f48-8459-16d1c7dcfb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:09:df:de:87:87:28:4b:72:59:e1:b8:ea: 8b:8d:87:b4:74:6f:42:2a:65:3a:ee:84:90:d7:12: f9:98:b4:5e:94:a8:23:2f:56:50:77:07:9c:fd:75: a3:40:e3:0a:6f:05:38:a1:f4:69:a4:13:2b:de:92: 40:10:26:cc:75:b6:c1:dd:c3:d7:9a:f5:2d:25:9f: 10:36:2c:66:05:48:31:ba:7f:92:80:1f:0d:83:04: 9a:9e:ac:34:38:80:b7:9b:2d:ac:ff:66:1b:c1:31: 48:ab:0a:b2:72:ae:33:f4:5c:bf:c4:f9:91:e0:4f: ca:a2:2c:cc:a3:4d:69:44:7d:6d:bf:49:63:2c:59: 0f:ad:1f:4d:7e:cb:b1:12:6c:dc:ef:84:90:d8:96: fa:86:47:1f:19:9b:ed:7f:cd:f5:48:10:49:86:31: 7b:ac:68:da:85:8c:82:a6:c2:8b:b7:7e:db:b7:17: b7:3c:e5:b5:78:e2:66:58:f1:2f:f7:91:5f:ab:3c: 90:4b:bb:a9:ef:3c:68:c7:f8:f4:f2:03:86:1e:ac: b9:d3:c8:f1:14:59:f7:d0:45:e1:32:7d:62:6a:bf: b1:ec:58:b3:eb:4d:e9:4d:b9:4d:41:1b:52:67:31: 3e:6c:f5:57:9f:0d:78:40:2e:56:64:af:c5:ab:56: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:B8:2E:2D:A3:8C:BA:57:20:95:0D:A3:22:57:F2:B9:2B:A1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4a:4a:80:bf:30:28:58:33:0e:be:6c:6c:b6:d7:8d:bf:55: d0:1f:33:52:6b:49:df:f2:9d:fa:4b:f8:02:a6:41:09:a7:6f: 87:db:15:9e:c1:8f:ac:7c:10:19:31:9f:8a:21:d4:82:e5:96: c3:60:45:0b:74:02:5b:67:5a:fc:18:ee:84:85:83:8d:ba:38: c7:ed:8f:f8:a6:9a:ae:75:0e:7c:17:74:a5:aa:23:01:62:c1: 0d:53:46:8e:60:cc:0b:bd:e5:d4:a6:07:55:99:48:36:7b:ca: 08:11:29:17:0f:30:74:d6:31:1f:45:8d:7d:da:05:87:8a:d0: b0:c1:c9:ba:69:eb:91:0c:c0:69:f5:b3:8b:a2:ef:05:63:4f: 00:da:41:f3:69:ba:f6:c4:2e:d6:e9:e7:a1:a6:04:8a:c7:95: b4:cb:17:f7:a7:65:d3:29:df:9f:82:30:45:8b:ef:c5:9f:87: 76:48:ac:c6:3e:31:a8:95:c0:f2:2d:85:b4:2b:ce:54:70:66: 9a:08:30:29:15:f2:ac:26:8a:b4:cf:c4:12:5b:ca:cd:62:d6: 8b:f3:0d:54:57:59:1d:64:89:7a:c0:a6:f5:97:33:53:92:76: ad:85:b8:f9:95:f2:88:8f:2d:df:f8:18:1c:de:14:03:01:f8: df:36:7f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0No65MxOleIO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YjAzNjk4NTctMjEyMS00ZjQ4LTg0NTktMTZkMWM3ZGNmYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3YJ396HhyhLclnhuOqLjYe0dG9CKmU67oSQ 1xL5mLRelKgjL1ZQdwec/XWjQOMKbwU4ofRppBMr3pJAECbMdbbB3cPXmvUtJZ8Q NixmBUgxun+SgB8NgwSanqw0OIC3my2s/2YbwTFIqwqycq4z9Fy/xPmR4E/KoizM o01pRH1tv0ljLFkPrR9NfsuxEmzc74SQ2Jb6hkcfGZvtf831SBBJhjF7rGjahYyC psKLt37btxe3POW1eOJmWPEv95FfqzyQS7up7zxox/j08gOGHqy508jxFFn30EXh Mn1iar+x7Fiz603pTblNQRtSZzE+bPVXnw14QC5WZK/Fq1ZBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA24uC4to4y6VyCVDaMiV/K5K6FTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOGE0MDc0NGEtZWNmMS0z NjEwLWI5ZDYtOWRhN2RhODcwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVKSoC/MChYMw6+bGy2142/VdAfM1JrSd/ynfpL+AKmQQmnb4fbFZ7B j6x8EBkxn4oh1ILllsNgRQt0AltnWvwY7oSFg426OMftj/immq51DnwXdKWqIwFi wQ1TRo5gzAu95dSmB1WZSDZ7yggRKRcPMHTWMR9FjX3aBYeK0LDBybpp65EMwGn1 s4ui7wVjTwDaQfNpuvbELtbp56GmBIrHlbTLF/enZdMp35+CMEWL78Wfh3ZIrMY+ MaiVwPIthbQrzlRwZpoIMCkV8qwmirTPxBJbys1i1ovzDVRXWR1kiXrApvWXM1OS dq2FuPmV8oiPLd/4GBzeFAMB+N82f+I= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:57 2025 by rpki-client