$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa File: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (raw, json) Hash identifier: ujgVMTfIvEahoejZvGGpGNWU6Dh17/KyBzzWeG5SSeI= Subject key identifier: 3C:1F:E9:51:D3:66:EC:E1:BE:8D:F2:74:21:EA:C2:54:36:FB:39:B5 Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584BA667A00CD0A1A37A56BEE608 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 7127 IP address blocks: 192.214.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a0:0c:d0:a1:a3:7a:56:be:e6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b8bffd2a-3bb0-4c18-9d80-507c12906798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:0d:21:69:35:81:45:1b:ed:f3:0f:dd:58: d6:77:6b:68:b1:57:ae:98:69:2d:ae:10:9e:8e:ca: 9f:8b:27:7c:87:c8:e0:dc:10:20:c4:3b:b1:12:21: 83:57:92:66:f9:69:58:f4:f3:30:36:8b:d5:bd:33: e3:8e:62:1b:91:ab:7d:d3:5b:1b:4a:72:d1:ac:91: b7:88:f0:f1:e7:52:f1:cc:9a:5d:c8:5b:9e:fd:66: 7d:9c:c9:68:ca:1b:09:24:32:a9:2e:f4:51:78:20: eb:97:77:db:26:ef:dd:db:3b:7b:83:f3:00:fa:29: 11:41:1a:f6:3c:a7:c6:79:95:95:9b:84:1e:7c:6f: 52:9a:b3:be:db:ca:a8:e1:40:7c:2f:61:ca:24:ec: 4e:bd:d2:7a:53:d7:b4:02:b4:fc:15:e9:0e:94:13: 3b:19:ec:1a:52:d9:ef:4b:a7:31:8f:8d:8e:19:69: bb:84:20:60:d4:56:62:58:bc:0c:e4:b9:66:d1:fb: 6f:99:5e:45:c7:d1:67:0b:6d:9f:9b:76:91:60:72: 11:bd:83:6c:69:30:80:20:a5:43:91:d6:02:7b:c0: c8:46:74:07:f3:16:52:bc:53:4e:7d:90:8e:70:6a: f3:01:35:ef:55:80:ed:d2:c3:b0:2e:c8:91:b1:aa: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1F:E9:51:D3:66:EC:E1:BE:8D:F2:74:21:EA:C2:54:36:FB:39:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: 192.214.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:99:c9:6c:cb:41:df:a7:b6:c2:6c:6a:a5:e2:59:6d:f9:a1: 16:03:f1:93:07:3a:b9:c9:aa:f5:54:a0:b2:71:7d:24:f5:41: 39:d6:20:dc:a2:f9:fd:52:ac:8d:c7:d4:86:3a:c8:e0:ab:d7: 4c:8f:02:af:4e:68:fb:f6:9b:00:b5:cc:6f:82:f4:d0:84:46: 30:17:7f:ac:5b:49:88:69:5f:91:1b:5d:4d:51:cc:bd:97:c8: 23:44:01:6e:1a:26:f1:77:54:c7:2e:24:02:51:bc:64:df:fa: 1a:00:2b:a2:c7:aa:5a:e0:93:06:36:d7:53:53:3a:bc:29:08: 10:a0:cb:a1:1c:62:1d:4e:a9:8d:d8:0b:e8:a4:34:85:49:db: 0e:d9:d5:e9:ef:f7:03:13:60:b1:14:ed:a6:51:69:b9:cf:46: 15:ba:b3:f0:81:13:95:1d:d2:d6:6c:df:10:e6:2a:bb:a2:a0: 2b:8b:75:47:b9:7b:92:ba:54:e8:a8:ec:63:5e:a6:65:ca:6a: 78:db:e7:25:95:fb:26:4b:cd:0e:e4:a2:23:31:39:b8:bb:44: e5:bd:3b:40:3f:fc:1b:70:8e:51:b1:63:32:de:76:f1:77:2a: 9a:ed:b4:89:dd:18:fb:1f:48:9d:e5:b9:a9:c8:7f:2c:08:29: 75:4e:83:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6AM0KGjela+5ggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjhiZmZkMmEtM2JiMC00YzE4LTlkODAtNTA3YzEyOTA2Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxscNIWk1gUUb7fMP3VjWd2tosVeumGktrhCe jsqfiyd8h8jg3BAgxDuxEiGDV5Jm+WlY9PMwNovVvTPjjmIbkat901sbSnLRrJG3 iPDx51LxzJpdyFue/WZ9nMloyhsJJDKpLvRReCDrl3fbJu/d2zt7g/MA+ikRQRr2 PKfGeZWVm4QefG9SmrO+28qo4UB8L2HKJOxOvdJ6U9e0ArT8FekOlBM7GewaUtnv S6cxj42OGWm7hCBg1FZiWLwM5Llm0ftvmV5Fx9FnC22fm3aRYHIRvYNsaTCAIKVD kdYCe8DIRnQH8xZSvFNOfZCOcGrzATXvVYDt0sOwLsiRsarUlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwf6VHTZuzhvo3ydCHqwlQ2+zm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvNjYyNGI5OTgtMTNlMC0z YTRkLWFhYzktNDAzN2EzNGJmZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwNYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCZyWzLQd+ntsJsaqXiWW35oRYD8ZMHOrnJqvVUoLJxfST1QTnWINyi +f1SrI3H1IY6yOCr10yPAq9OaPv2mwC1zG+C9NCERjAXf6xbSYhpX5EbXU1RzL2X yCNEAW4aJvF3VMcuJAJRvGTf+hoAK6LHqlrgkwY211NTOrwpCBCgy6EcYh1OqY3Y C+ikNIVJ2w7Z1env9wMTYLEU7aZRabnPRhW6s/CBE5Ud0tZs3xDmKruioCuLdUe5 e5K6VOio7GNepmXKanjb5yWV+yZLzQ7koiMxObi7ROW9O0A//BtwjlGxYzLedvF3 KprttIndGPsfSJ3luanIfywIKXVOg9Q= -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:25 2025 by rpki-client