$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa File: da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa (raw, json) Hash identifier: Qkh3nDICA7wt97uGzRz+FxCtaoDPafji8imKXI+zSLY= Subject key identifier: 7A:45:62:75:DE:EA:52:CE:A5:D3:23:88:23:CF:25:F7:B4:F6:E9:49 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B970CD123A44A448C48FA12C0 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 30133 IP address blocks: 192.228.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d1:23:a4:4a:44:8c:48:fa:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0e1e7d21-06c3-4312-a8a0-4d6d4c995933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:43:2e:39:fd:e5:c0:ed:e2:88:ef:87:a8: 75:f5:e4:ed:83:1a:2c:7f:4b:42:79:ad:e1:e0:37: d3:ca:5e:61:18:4f:f4:05:0c:6d:75:6d:95:12:1d: 62:fa:dc:07:92:4f:c3:df:8b:dd:7c:2f:e3:33:bf: f5:1a:a3:28:59:25:b0:6a:5b:e2:4a:fd:89:7b:3b: cf:db:b9:61:9d:26:ea:1f:93:4c:b7:43:11:f6:02: d3:9e:3c:ed:3e:6d:83:d0:0c:ef:91:8d:43:04:83: 33:b9:94:d3:f6:6b:a9:af:f8:57:35:78:a8:e1:75: 8a:2d:f7:50:f1:a7:ac:e1:aa:fb:03:27:43:37:bd: a6:9f:21:8c:a6:e1:60:47:54:65:a0:20:c0:6b:0c: 98:f3:e0:56:09:08:57:8a:4f:c3:1d:f8:f9:6c:13: e6:02:00:c3:fb:66:b6:f4:ed:77:08:e3:bf:aa:3f: 6c:a4:e2:89:66:63:34:6d:59:f9:e5:5d:e1:c6:0a: 3d:fd:48:c4:9b:f9:bf:e1:ac:99:2f:15:b6:49:9f: 40:19:f9:4d:d3:f3:dd:29:59:c0:6e:07:ea:b3:ea: cb:3a:c4:39:c7:90:40:e4:e7:4a:f2:27:ba:91:3f: c3:8b:a0:49:f0:42:0b:b3:e7:03:22:66:b2:d1:1b: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:45:62:75:DE:EA:52:CE:A5:D3:23:88:23:CF:25:F7:B4:F6:E9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f6:c2:67:33:cf:39:4c:5d:1e:4b:8c:c2:18:c4:6b:6a:87: d7:9b:2b:3e:d2:a0:55:8d:ff:c5:18:d5:41:e7:f9:a8:3e:c0: a2:ea:68:2a:eb:e9:07:78:b1:7e:a4:0f:b4:99:e0:9b:9f:68: 12:a2:29:22:9a:60:ec:a4:e4:e8:f1:84:6f:77:f8:10:e8:ee: 65:b0:74:b7:8a:11:c1:aa:f5:0b:46:d2:f0:bb:d5:83:8b:5e: d8:4a:92:b5:4c:20:d0:f3:d7:7b:31:80:40:d8:14:8c:f9:4c: 68:fa:73:cd:b7:51:a2:94:25:a0:3f:8f:20:56:33:c2:27:19: e8:9d:8b:0a:7c:a1:8e:96:2d:a4:e4:78:6e:73:fa:62:2a:01: cf:64:80:46:f6:07:30:e7:0d:8b:7d:d2:ec:6e:48:2e:5b:9f: 1f:4e:7c:0c:66:58:55:f1:53:e4:d4:95:46:37:8e:a7:cd:a7: d6:fa:ec:25:aa:48:c5:cb:3c:7b:2a:31:2a:89:6a:a1:03:e6: 6e:50:3a:19:19:66:bc:f6:09:6e:6a:78:ee:da:0d:a9:4c:20: 12:1f:49:4f:73:16:34:64:c1:56:7c:ef:06:9d:9e:bf:1b:b2: 5c:bd:93:f4:44:60:e4:88:c8:2a:76:44:a9:e9:0d:9a:c9:e0: 73:0f:4a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNEjpEpEjEj6EsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGUxZTdkMjEtMDZjMy00MzEyLWE4YTAtNGQ2ZDRjOTk1OTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UtDLjn95cDt4ojvh6h19eTtgxosf0tCea3h 4DfTyl5hGE/0BQxtdW2VEh1i+twHkk/D34vdfC/jM7/1GqMoWSWwalviSv2JezvP 27lhnSbqH5NMt0MR9gLTnjztPm2D0AzvkY1DBIMzuZTT9mupr/hXNXio4XWKLfdQ 8aes4ar7AydDN72mnyGMpuFgR1RloCDAawyY8+BWCQhXik/DHfj5bBPmAgDD+2a2 9O13COO/qj9spOKJZmM0bVn55V3hxgo9/UjEm/m/4ayZLxW2SZ9AGflN0/PdKVnA bgfqs+rLOsQ5x5BA5OdK8ie6kT/Di6BJ8EILs+cDImay0Rv+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpFYnXe6lLOpdMjiCPPJfe09ulJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZGE2Y2QxN2UtNTAyMy0z ZDEyLThiOTktYTVkNGY5OGRhZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr2wmczzzlMXR5LjMIYxGtqh9ebKz7SoFWN/8UY1UHn+ag+wKLqaCrr 6Qd4sX6kD7SZ4JufaBKiKSKaYOyk5OjxhG93+BDo7mWwdLeKEcGq9QtG0vC71YOL XthKkrVMINDz13sxgEDYFIz5TGj6c823UaKUJaA/jyBWM8InGeidiwp8oY6WLaTk eG5z+mIqAc9kgEb2BzDnDYt90uxuSC5bnx9OfAxmWFXxU+TUlUY3jqfNp9b67CWq SMXLPHsqMSqJaqED5m5QOhkZZrz2CW5qeO7aDalMIBIfSU9zFjRkwVZ87wadnr8b sly9k/REYOSIyCp2RKnpDZrJ4HMPSiA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:03 2025 by rpki-client