$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/8a22e1db-134c-3509-a9f6-bf715499b665.roa File: 8a22e1db-134c-3509-a9f6-bf715499b665.roa (raw, json) Hash identifier: +UaMtZRPo5/i/XbojgeSwROahNKbcHywPszaKcRzVoY= Subject key identifier: 8E:86:15:B0:D4:7C:28:EE:CC:41:53:89:4C:6F:A4:7E:0B:AD:8F:4C Certificate issuer: /CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938 Certificate serial: 010D0C9F4328584BA39D021C82C2BBBEE3DBBE00 Authority key identifier: C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/8a22e1db-134c-3509-a9f6-bf715499b665.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 192.30.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:02:1c:82:c2:bb:be:e3:db:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=cc4d60fc-3917-4313-88e4-11e39130b1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:93:40:08:bb:ed:04:7f:e6:f1:d8:1f:8f: 19:78:7b:07:a7:cb:b2:28:dd:16:a8:32:d2:03:ae: b6:49:36:dc:f1:fc:7b:df:b8:51:8f:0f:ba:9c:dc: a7:8d:b4:5f:8f:1a:ae:66:1e:cb:c3:b6:c3:c4:cd: ff:c1:8a:13:a7:80:ab:4b:0b:f3:b7:1c:15:94:12: c7:9f:8e:e7:08:19:72:b1:21:e3:bf:56:38:80:f4: 79:e4:dc:8a:55:f1:5b:d5:4e:51:24:8c:8f:48:94: ae:c2:40:27:db:57:b9:44:8e:91:af:6c:a5:bf:e4: f8:9a:fb:14:27:ec:fb:6e:c6:78:0c:de:bb:63:e8: e7:b4:39:b7:50:e1:08:e0:10:75:88:82:96:09:91: 5d:f0:d7:69:7b:44:46:6f:f6:43:d5:be:37:42:4e: 04:18:29:bc:b9:d1:99:bb:68:a3:60:2f:d4:e7:7a: ee:c4:a2:a4:4a:91:bd:3b:44:15:a5:d0:c9:c2:45: 1b:f2:f7:63:18:d9:dc:d7:93:de:ff:7e:3b:9b:47: 48:81:e5:02:0e:57:09:20:fc:38:ec:94:d8:d8:f6: 09:00:a3:bd:b6:c5:c4:db:a2:08:b8:4d:12:66:5a: df:72:04:07:6f:2a:f2:98:aa:3e:3e:dc:eb:36:be: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:86:15:B0:D4:7C:28:EE:CC:41:53:89:4C:6F:A4:7E:0B:AD:8F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/8a22e1db-134c-3509-a9f6-bf715499b665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl X509v3 Authority Key Identifier: keyid:C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer sbgp-ipAddrBlock: critical IPv4: 192.30.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:01:da:8f:d4:b6:b2:ec:a0:fe:26:9e:00:4b:50:cb:89:6a: 86:f3:82:e2:e8:24:1f:21:03:fa:98:59:68:71:52:18:c7:60: 99:a4:61:a2:6d:3a:d1:8f:21:fe:0d:37:bf:0e:bd:47:e8:f4: 62:2c:5b:36:cf:ae:52:09:31:f2:ea:15:98:fe:2b:95:2d:8d: b6:0e:72:6a:c2:03:89:13:53:4a:77:65:6a:ad:c1:5b:4a:cf: c9:fd:fd:24:a5:7e:d6:6c:d7:36:2a:8c:12:b7:8b:fb:ee:d8: 37:22:25:c4:80:8f:04:b4:b5:12:58:ec:b5:19:9c:ab:28:99: 02:a0:ba:a7:32:d6:68:7c:bd:ec:6b:53:21:82:30:31:18:d7: f9:2d:a2:7d:0b:cd:35:fe:bb:9f:35:16:90:c6:a5:5b:3e:45: 01:e6:4a:3c:ed:93:b6:ed:41:55:36:17:72:72:57:1c:fb:74: 43:86:ef:8a:ea:46:c3:39:19:55:f8:fe:4c:37:df:46:a5:3d: ba:68:9e:fd:5f:ef:73:e5:34:40:ea:36:06:ff:5e:71:af:c7: 73:21:78:d2:9d:01:70:b4:70:66:0d:0e:45:a1:1f:b6:77:8c: da:74:02:c1:ac:e2:cc:44:13:dd:9d:fd:cc:db:d4:d0:6d:58: 32:eb:8c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQIcgsK7vuPbvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3YzEyZTAtOGYxNi00ODcxLWJiMzktZDZlMGRjMmIy OTM4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2M0ZDYwZmMtMzkxNy00MzEzLTg4ZTQtMTFlMzkxMzBiMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGKTQAi77QR/5vHYH48ZeHsHp8uyKN0WqDLS A662STbc8fx737hRjw+6nNynjbRfjxquZh7Lw7bDxM3/wYoTp4CrSwvztxwVlBLH n47nCBlysSHjv1Y4gPR55NyKVfFb1U5RJIyPSJSuwkAn21e5RI6Rr2ylv+T4mvsU J+z7bsZ4DN67Y+jntDm3UOEI4BB1iIKWCZFd8Ndpe0RGb/ZD1b43Qk4EGCm8udGZ u2ijYC/U53ruxKKkSpG9O0QVpdDJwkUb8vdjGNnc15Pe/347m0dIgeUCDlcJIPw4 7JTY2PYJAKO9tsXE26IIuE0SZlrfcgQHbyrymKo+PtzrNr4r0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6GFbDUfCjuzEFTiUxvpH4LrY9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Zjdj MTJlMC04ZjE2LTQ4NzEtYmIzOS1kNmUwZGMyYjI5MzgvOGEyMmUxZGItMTM0Yy0z NTA5LWE5ZjYtYmY3MTU0OTliNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWY3YzEyZTAtOGYxNi00ODcxLWJi MzktZDZlMGRjMmIyOTM4LzlmN2MxMmUwLThmMTYtNDg3MS1iYjM5LWQ2ZTBkYzJi MjkzOC5jcmwwHwYDVR0jBBgwFoAUw1BWiMQiK+0naghTprKDb337+34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjdjMTJlMC04ZjE2LTQ4NzEtYmIzOS1kNmUw ZGMyYjI5MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwB7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcB2o/UtrLsoP4mngBLUMuJaobzguLoJB8hA/qYWWhxUhjHYJmkYaJt OtGPIf4NN78OvUfo9GIsWzbPrlIJMfLqFZj+K5UtjbYOcmrCA4kTU0p3ZWqtwVtK z8n9/SSlftZs1zYqjBK3i/vu2DciJcSAjwS0tRJY7LUZnKsomQKguqcy1mh8vexr UyGCMDEY1/kton0LzTX+u581FpDGpVs+RQHmSjztk7btQVU2F3JyVxz7dEOG74rq RsM5GVX4/kw330alPbponv1f73PlNEDqNgb/XnGvx3MheNKdAXC0cGYNDkWhH7Z3 jNp0AsGs4sxEE92d/czb1NBtWDLrjMs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:24 2025 by rpki-client