$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/d25d6770-2650-39a1-9694-a8cefa3be842.roa File: d25d6770-2650-39a1-9694-a8cefa3be842.roa (raw, json) Hash identifier: UkK0NyK1yuKwwaVz4xbdKiSav0ZvmGDdlOTQqp+rQtQ= Subject key identifier: 03:E0:12:8E:B5:75:DD:D8:09:C6:8A:6B:62:76:2D:80:13:87:44:8A Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Certificate serial: 010D0C9F4328584BABFD009BC92955E4B9C46700 Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/d25d6770-2650-39a1-9694-a8cefa3be842.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 11904 IP address blocks: 104.192.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:00:9b:c9:29:55:e4:b9:c4:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=a5365f86-9356-4c3d-be48-195a57f6b265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:83:a2:29:9a:59:2a:cf:39:40:cb:3b:a2: 2b:13:f7:89:b9:e6:9e:e6:1d:6f:9c:4b:85:99:a6: a3:8c:78:da:1a:1b:12:d5:54:59:08:89:31:06:a7: ea:2b:47:8e:a7:6b:7b:c4:0c:c8:ee:2a:1d:3d:64: 71:33:c6:af:62:77:06:d3:13:bb:de:58:16:4d:a6: 2c:7e:e4:ec:68:9c:c2:b6:2f:bf:bc:a1:3d:f6:ce: 7d:1e:01:37:09:35:e7:07:ba:a5:f6:ce:7b:b3:0f: bf:4d:09:c6:34:90:0d:04:68:ad:85:eb:c0:b3:85: f5:8a:27:f3:07:c7:31:fd:84:0a:17:0d:10:ab:70: 03:bb:b2:33:92:0b:4b:f9:f0:1f:fd:43:2c:2c:81: fa:ed:d0:db:99:95:2e:0f:18:fc:dc:b5:70:29:43: 38:9e:d2:0e:78:e0:ce:da:d7:73:e4:45:e6:0a:ef: 34:03:17:38:93:9e:57:01:5c:ee:8c:93:d7:29:2b: 8f:63:15:1a:f2:1f:97:b8:18:c3:2e:81:7c:c6:57: c3:e0:be:d3:06:5a:c6:8f:d1:52:47:e7:2c:84:6d: be:7a:ce:1e:64:ad:21:ba:72:a3:5e:88:1e:89:10: b9:8e:b7:17:db:24:63:20:e0:b1:43:ed:d8:43:08: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:12:8E:B5:75:DD:D8:09:C6:8A:6B:62:76:2D:80:13:87:44:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/d25d6770-2650-39a1-9694-a8cefa3be842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl X509v3 Authority Key Identifier: keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer sbgp-ipAddrBlock: critical IPv4: 104.192.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f2:2a:d5:1e:4d:f0:b8:20:84:f7:d3:2b:08:fa:f6:ea:28: 34:db:0d:6e:fd:b4:bd:a2:d5:54:23:fc:8f:af:3a:86:5e:03: a0:71:b5:9c:20:14:36:2f:d2:38:1c:0f:40:d9:fe:14:9c:5a: 1e:a3:77:b2:d6:cd:c9:50:60:9f:22:c6:02:89:9a:48:4b:f2: 74:8a:01:20:c9:15:62:c2:08:40:77:ba:98:50:7e:25:d9:76: 94:4b:37:1e:c7:6b:27:a7:18:98:1f:52:3e:01:85:9d:5b:89: 65:76:47:56:87:0d:44:ec:8c:ed:5a:5b:f4:c6:5a:bd:71:66: 80:57:45:20:f3:c3:f4:9a:15:ad:83:a1:a3:34:76:a4:33:ad: ed:88:99:57:ad:c7:af:17:01:0f:1a:f2:04:22:aa:55:c2:3f: a4:85:ea:47:2a:f8:ce:a2:0c:ac:f9:dc:79:22:d0:37:af:5b: 9f:e6:e9:d9:3d:ed:79:7b:6c:78:e5:2f:43:f5:bc:7f:99:49: 80:b0:37:a6:ce:a4:11:41:1d:5e:37:0a:00:65:51:ea:a6:96: 7e:cc:3d:49:05:a5:2a:6a:0a:27:e5:d7:e5:64:3e:a8:07:17: 47:96:6b:8a:a9:3e:e2:d5:a5:49:6e:02:76:41:18:80:bf:c3: 58:8c:b4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QCbySlV5LnEZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3 ZmQwMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YTUzNjVmODYtOTM1Ni00YzNkLWJlNDgtMTk1YTU3ZjZiMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseSDoimaWSrPOUDLO6IrE/eJueae5h1vnEuF maajjHjaGhsS1VRZCIkxBqfqK0eOp2t7xAzI7iodPWRxM8avYncG0xO73lgWTaYs fuTsaJzCti+/vKE99s59HgE3CTXnB7ql9s57sw+/TQnGNJANBGithevAs4X1iifz B8cx/YQKFw0Qq3ADu7IzkgtL+fAf/UMsLIH67dDbmZUuDxj83LVwKUM4ntIOeODO 2tdz5EXmCu80Axc4k55XAVzujJPXKSuPYxUa8h+XuBjDLoF8xlfD4L7TBlrGj9FS R+cshG2+es4eZK0hunKjXogeiRC5jrcX2yRjIOCxQ+3YQwiteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPgEo61dd3YCcaKa2J2LYATh0SKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvZDI1ZDY3NzAtMjY1MC0z OWExLTk2OTQtYThjZWZhM2JlODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3 MmY1ZTdmZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvyKtUeTfC4IIT30ysI+vbqKDTbDW79tL2i1VQj/I+vOoZeA6BxtZwg FDYv0jgcD0DZ/hScWh6jd7LWzclQYJ8ixgKJmkhL8nSKASDJFWLCCEB3uphQfiXZ dpRLNx7HayenGJgfUj4BhZ1biWV2R1aHDUTsjO1aW/TGWr1xZoBXRSDzw/SaFa2D oaM0dqQzre2ImVetx68XAQ8a8gQiqlXCP6SF6kcq+M6iDKz53Hki0DevW5/m6dk9 7Xl7bHjlL0P1vH+ZSYCwN6bOpBFBHV43CgBlUeqmln7MPUkFpSpqCifl1+VkPqgH F0eWa4qpPuLVpUluAnZBGIC/w1iMtNA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:20 2025 by rpki-client