$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa File: d4884f4e-c468-36d8-aa72-3b277a102e42.roa (raw, json) Hash identifier: RijZoJLPxU5BLOflx39K5PgBpftpWTuJjrJObTN7C5A= Subject key identifier: C1:79:FE:A2:1B:9F:E7:03:3F:E5:81:71:6D:D6:29:BA:AB:CA:EB:3A Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F4328584AE4611091258EA155AC1CE1D8 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 192.101.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:10:91:25:8e:a1:55:ac:1c:e1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=24501e7c-9657-4b80-ac5d-5b8dba5ca997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:9a:66:f1:a7:26:f9:fd:87:a5:28:c2:1d: b4:b9:be:55:96:05:df:4f:a9:e6:20:2e:4f:cf:88: 10:54:e8:d4:30:68:dd:5d:c0:cc:b9:a1:75:bb:a2: d6:d4:49:53:9f:a1:05:98:78:a3:af:21:7f:29:2a: ba:75:58:37:e8:82:79:57:61:79:6b:5b:7e:ae:41: 6a:36:66:8e:68:63:9b:76:d6:82:c4:d9:5a:7a:54: 1c:99:08:f1:d2:b0:79:cd:aa:5e:65:5b:19:b1:48: a2:8e:4d:6b:50:11:34:c1:b6:17:53:66:c8:ae:9a: 77:7c:b0:b4:8f:51:82:e6:05:c6:ab:ef:6a:60:d8: dd:40:31:6d:a7:b2:bc:53:16:dc:06:48:b0:f6:d9: 40:15:fd:8e:9d:1e:f5:24:6c:ee:bb:ec:7f:93:62: 6a:81:e4:77:c2:0a:b7:de:58:26:94:f7:1e:3b:92: d7:99:0e:2f:10:da:41:43:97:a2:6b:1f:bf:15:4c: eb:73:9f:e3:9b:10:00:4f:9f:53:84:be:cd:04:52: 5f:19:25:52:ab:23:d6:0e:2f:9c:ba:93:53:df:ba: 07:92:65:2b:7e:7b:44:eb:04:92:68:9e:88:4a:94: c2:36:a3:3d:7a:61:08:78:de:76:b7:13:4c:35:a7: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:FE:A2:1B:9F:E7:03:3F:E5:81:71:6D:D6:29:BA:AB:CA:EB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8c:db:c9:e3:c7:bf:48:3b:c0:a6:79:25:8e:5a:1c:63:1d: fd:23:1d:46:6f:32:1d:3b:59:2c:40:9d:73:0e:69:a9:6b:73: 02:33:19:35:e7:e7:11:fd:d3:7d:cc:ea:63:99:61:92:e7:59: 04:92:58:5b:63:31:eb:f9:90:8a:bb:aa:8b:71:6d:2d:0f:5d: 04:d0:aa:c6:f9:9d:76:4d:88:69:41:c3:33:7b:db:62:05:aa: f1:5a:00:d1:6f:bf:af:cb:29:2a:f0:86:43:6c:f1:ad:77:c4: 61:d6:a4:fd:80:50:8b:a7:0c:26:81:f7:a8:f4:39:25:85:a4: 4f:71:2d:4d:c7:8a:9f:3f:a4:ae:7d:0b:e1:41:c1:d3:76:36: 4c:82:bd:03:11:0c:e7:55:30:78:e6:ba:95:45:a8:c1:a4:98: 54:d4:53:d2:6f:01:5c:24:b3:33:1e:e7:78:4b:17:4a:2a:4e: c6:6b:98:d6:9e:1a:c0:97:84:dd:1f:12:30:7a:8f:85:21:96: 5f:c6:ec:c4:16:ac:41:98:fc:32:3d:8a:5c:fc:ec:d5:3c:7a: 77:03:c9:f7:13:77:ff:a8:03:80:e2:b8:05:b9:55:a6:25:99: f2:15:77:d2:de:54:d3:3e:15:e0:5d:32:4c:3e:79:76:b7:08: 6c:53:5c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRCRJY6hVawc4dgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MjQ1MDFlN2MtOTY1Ny00YjgwLWFjNWQtNWI4ZGJhNWNhOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxSaZvGnJvn9h6Uowh20ub5VlgXfT6nmIC5P z4gQVOjUMGjdXcDMuaF1u6LW1ElTn6EFmHijryF/KSq6dVg36IJ5V2F5a1t+rkFq NmaOaGObdtaCxNlaelQcmQjx0rB5zapeZVsZsUiijk1rUBE0wbYXU2bIrpp3fLC0 j1GC5gXGq+9qYNjdQDFtp7K8UxbcBkiw9tlAFf2OnR71JGzuu+x/k2JqgeR3wgq3 3lgmlPceO5LXmQ4vENpBQ5eiax+/FUzrc5/jmxAAT59ThL7NBFJfGSVSqyPWDi+c upNT37oHkmUrfntE6wSSaJ6ISpTCNqM9emEIeN52txNMNafNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF5/qIbn+cDP+WBcW3WKbqryus6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvZDQ4ODRmNGUtYzQ2OC0z NmQ4LWFhNzItM2IyNzdhMTAyZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGM28njx79IO8CmeSWOWhxjHf0jHUZvMh07WSxAnXMOaalrcwIzGTXn 5xH9033M6mOZYZLnWQSSWFtjMev5kIq7qotxbS0PXQTQqsb5nXZNiGlBwzN722IF qvFaANFvv6/LKSrwhkNs8a13xGHWpP2AUIunDCaB96j0OSWFpE9xLU3Hip8/pK59 C+FBwdN2NkyCvQMRDOdVMHjmupVFqMGkmFTUU9JvAVwkszMe53hLF0oqTsZrmNae GsCXhN0fEjB6j4Uhll/G7MQWrEGY/DI9ilz87NU8encDyfcTd/+oA4DiuAW5VaYl mfIVd9LeVNM+FeBdMkw+eXa3CGxTXGI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:03 2025 by rpki-client