$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa File: 3dec3551-0bf3-3375-88e1-4193eace0ec4.roa (raw, json) Hash identifier: mb+oC3h5eoaWTgp8Kc3zU+BzoQ8/F0/1AH6/lRgz61U= Subject key identifier: 65:B4:E8:DA:2B:62:4B:11:0F:8C:97:A3:0F:FE:AF:AF:21:10:5E:94 Certificate issuer: /CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Certificate serial: 010D0C9F4328584AECC14C76218454B9AC8F6D80 Authority key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 192.245.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4c:76:21:84:54:b9:ac:8f:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fb0098ab-4094-459d-8d07-abca2104fb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:82:9c:91:41:61:b4:a3:32:cb:05:61:f0: df:04:13:92:ba:2f:5c:9b:89:a1:4d:d3:c1:87:cf: 6d:91:85:b1:14:19:15:35:33:74:23:d1:65:ce:65: 83:52:70:4f:17:46:7e:e8:a5:6a:98:0e:bb:6e:7b: 68:89:d6:1d:0b:fc:54:31:0d:d7:92:ed:e9:29:23: 6e:28:97:2c:8a:9e:b3:82:02:ac:3e:67:60:78:cc: 78:5f:87:e7:99:51:dd:6b:e7:0f:af:f5:c4:f7:45: c2:a7:a1:28:b9:0b:04:75:15:32:ee:ab:1d:0e:c0: 36:53:87:30:01:f7:9b:f1:0b:52:a0:0d:b8:d7:c7: 16:97:6d:b4:9b:b1:f6:b2:51:95:f7:5f:97:d8:44: 51:e9:ed:fe:f8:31:73:91:ab:9e:93:cd:08:18:9c: cb:eb:5d:2b:09:27:85:f2:a9:ef:57:a8:95:57:96: e1:9b:b8:26:c2:f5:90:47:e6:eb:1b:d8:67:ad:51: f6:ef:4d:1a:3f:58:d7:fe:8a:e1:f4:98:4f:75:b5: af:53:86:e5:d0:9b:20:76:3b:82:c6:2b:8a:6e:91: 9e:24:89:e2:82:21:82:7c:d6:e6:b5:50:6f:2f:77: d4:95:24:ca:40:e5:f0:61:50:d2:24:c2:6e:5b:e2: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:E8:DA:2B:62:4B:11:0F:8C:97:A3:0F:FE:AF:AF:21:10:5E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl X509v3 Authority Key Identifier: keyid:92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer sbgp-ipAddrBlock: critical IPv4: 192.245.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d9:30:be:36:7e:5c:ba:b2:b9:52:63:6e:23:ba:57:b3:82: 8f:84:b7:43:8f:7a:a2:e2:a6:c5:30:c8:e5:af:e4:b8:2f:67: 13:6d:06:f8:ad:79:4b:6d:83:b3:7f:1d:2e:23:5d:22:1b:20: a3:ca:93:87:25:d4:db:89:73:84:27:23:a1:1f:74:03:26:8d: 56:3f:6e:73:99:18:2c:14:ea:75:37:7a:0e:31:a1:64:ce:5f: 54:35:9d:e4:23:d2:54:15:de:ff:89:bb:43:56:11:b3:f6:4c: 89:75:21:e6:14:63:2a:bc:c9:5f:6f:bd:b2:07:f6:eb:17:f0: 82:c0:71:08:cb:9c:90:3b:6c:58:83:59:30:59:d0:53:da:76: 7e:65:25:54:97:89:94:4c:53:31:6f:b5:1a:7e:34:7f:36:08: 3a:68:84:ec:0b:06:0b:20:9b:6c:9e:c5:83:25:47:17:b9:88: 77:5e:97:a9:26:7b:e6:a5:4f:49:df:5a:da:a9:11:64:5a:92: df:94:e7:88:00:30:f6:5a:40:e3:d2:07:5a:c7:65:a9:b4:83: 00:ae:e0:22:ba:3e:e4:4d:4b:79:d9:09:c2:bc:d0:b9:b0:9c: 70:a6:4b:13:68:6f:05:83:b0:ea:ac:fd:93:31:f5:c5:97:a4: 4b:8d:8c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUx2IYRUuayPbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlYjkwZTktNjUwYS00YWZhLTkyMzgtNWJjZjRkZTM4 YzlkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmIwMDk4YWItNDA5NC00NTlkLThkMDctYWJjYTIxMDRmYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopGCnJFBYbSjMssFYfDfBBOSui9cm4mhTdPB h89tkYWxFBkVNTN0I9FlzmWDUnBPF0Z+6KVqmA67bntoidYdC/xUMQ3Xku3pKSNu KJcsip6zggKsPmdgeMx4X4fnmVHda+cPr/XE90XCp6EouQsEdRUy7qsdDsA2U4cw Afeb8QtSoA2418cWl220m7H2slGV91+X2ERR6e3++DFzkauek80IGJzL610rCSeF 8qnvV6iVV5bhm7gmwvWQR+brG9hnrVH2700aP1jX/orh9JhPdbWvU4bl0JsgdjuC xiuKbpGeJInigiGCfNbmtVBvL3fUlSTKQOXwYVDSJMJuW+LONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW06NorYksRD4yXow/+r68hEF6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NmVi OTBlOS02NTBhLTRhZmEtOTIzOC01YmNmNGRlMzhjOWQvM2RlYzM1NTEtMGJmMy0z Mzc1LTg4ZTEtNDE5M2VhY2UwZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjZlYjkwZTktNjUwYS00YWZhLTky MzgtNWJjZjRkZTM4YzlkLzY2ZWI5MGU5LTY1MGEtNGFmYS05MjM4LTViY2Y0ZGUz OGM5ZC5jcmwwHwYDVR0jBBgwFoAUkqnrcWPXMKGcHQ82zZ1iP5szOgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NmViOTBlOS02NTBhLTRhZmEtOTIzOC01YmNm NGRlMzhjOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/ZML42fly6srlSY24julezgo+Et0OPeqLipsUwyOWv5LgvZxNtBvit eUttg7N/HS4jXSIbIKPKk4cl1NuJc4QnI6EfdAMmjVY/bnOZGCwU6nU3eg4xoWTO X1Q1neQj0lQV3v+Ju0NWEbP2TIl1IeYUYyq8yV9vvbIH9usX8ILAcQjLnJA7bFiD WTBZ0FPadn5lJVSXiZRMUzFvtRp+NH82CDpohOwLBgsgm2yexYMlRxe5iHdel6km e+alT0nfWtqpEWRakt+U54gAMPZaQOPSB1rHZam0gwCu4CK6PuRNS3nZCcK80Lmw nHCmSxNobwWDsOqs/ZMx9cWXpEuNjL4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:10 2025 by rpki-client