$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa File: db977bdb-7775-35b2-83b4-688332a81542.roa (raw, json) Hash identifier: mr4umTKtVPmuTcKbnbSV6qBCi1hpn/0qdcoA08UMA3g= Subject key identifier: D0:57:BB:5C:6F:B7:F1:58:55:B9:F2:21:64:7B:8F:EF:BD:4B:7B:9C Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584B9B3CDFF920AA0DFF00533004 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 29 IP address blocks: 192.31.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:df:f9:20:aa:0d:ff:00:53:30:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3de17501-af11-4ebf-8962-0e61cfd88c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:2c:4f:00:c2:32:4d:f0:2d:00:2a:43:3e: ba:b6:e1:30:20:83:0f:58:9c:09:17:e2:65:be:06: 4b:e3:b9:d4:54:a7:24:67:d7:ad:c4:f9:75:f6:4b: a9:a5:62:aa:08:17:1d:6b:b6:c6:83:8b:9d:ad:24: f4:18:f4:40:58:89:1c:fb:06:c3:08:36:9e:71:c9: 27:46:35:87:82:7d:37:de:c2:48:38:87:41:dd:9b: 08:02:f7:0f:7a:15:85:24:18:12:07:fa:49:d8:4b: aa:52:a5:9d:7d:d9:74:bb:98:eb:5e:0a:8e:d7:f3: e5:a0:52:25:cf:50:f3:51:f2:a7:64:6f:a0:70:84: 0a:5a:27:de:da:42:6a:f2:5a:0f:24:ac:18:ae:5c: ab:9b:df:26:29:c5:00:49:ec:b3:fb:4a:60:2c:5f: 98:12:0f:65:fe:eb:64:15:d1:94:a8:70:94:27:3d: 15:6b:22:88:f9:7a:20:73:ab:50:a6:e8:97:2d:bb: e7:5c:15:d3:b1:c4:18:a6:e3:44:6b:64:30:c0:e4: 5e:13:03:c7:d9:87:22:01:16:5b:f1:5c:06:54:34: 90:02:bb:06:9b:0e:95:04:71:10:c9:a4:45:5b:29: a5:df:64:72:cb:f4:ea:48:f2:f5:49:b8:48:46:7d: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:57:BB:5C:6F:B7:F1:58:55:B9:F2:21:64:7B:8F:EF:BD:4B:7B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6b:95:dd:1e:be:a4:f1:e7:07:e7:56:62:9d:27:24:e5:e4: 8d:6a:16:6f:a0:db:79:ce:a0:f8:41:f8:4c:5a:a4:e4:11:e4: a1:7b:d4:f8:f4:d0:91:4d:5d:dc:cb:ac:63:d2:61:ab:e4:d1: 77:f9:01:66:ba:4d:ad:8f:b0:f7:6c:2a:f0:3d:d0:19:19:15: a2:66:7a:87:ab:e6:ce:d4:4e:e8:a1:31:eb:a7:e2:9e:d3:46: 8a:99:3b:9b:4c:27:7a:8d:4c:76:0d:1a:fa:45:19:dd:9f:81: f9:41:9c:b3:27:9e:76:2d:35:1c:ef:37:cb:eb:99:75:a6:60: 68:0e:b8:b9:17:e1:57:8b:6f:c4:0a:1b:40:7e:84:5b:16:26: af:ac:98:c4:c0:8e:cc:95:c9:a1:86:01:e0:a8:23:fa:b4:bb: d9:16:64:7d:71:37:34:ee:c1:54:35:ba:8b:99:e3:60:b3:76: 1c:bd:19:df:97:9a:37:3d:35:c8:d3:3a:a2:1e:e2:4c:38:53: d6:ca:d1:a2:94:80:21:54:ae:e6:2d:6b:5c:4a:1f:5a:38:25: 0c:85:5a:97:5e:2f:8d:60:9b:c6:64:8e:e7:a1:f1:cb:a5:89: 2c:cb:18:05:1c:18:42:78:42:ff:4f:a9:be:6f:2d:57:62:57: b2:ae:51:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPN/5IKoN/wBTMAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2RlMTc1MDEtYWYxMS00ZWJmLTg5NjItMGU2MWNmZDg4Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCwsTwDCMk3wLQAqQz66tuEwIIMPWJwJF+Jl vgZL47nUVKckZ9etxPl19kuppWKqCBcda7bGg4udrST0GPRAWIkc+wbDCDaecckn RjWHgn033sJIOIdB3ZsIAvcPehWFJBgSB/pJ2EuqUqWdfdl0u5jrXgqO1/PloFIl z1DzUfKnZG+gcIQKWife2kJq8loPJKwYrlyrm98mKcUASeyz+0pgLF+YEg9l/utk FdGUqHCUJz0VayKI+Xogc6tQpuiXLbvnXBXTscQYpuNEa2QwwOReEwPH2YciARZb 8VwGVDSQArsGmw6VBHEQyaRFWyml32Ryy/TqSPL1SbhIRn02WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBXu1xvt/FYVbnyIWR7j++9S3ucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvZGI5NzdiZGItNzc3NS0z NWIyLTgzYjQtNjg4MzMyYTgxNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxrld0evqTx5wfnVmKdJyTl5I1qFm+g23nOoPhB+ExapOQR5KF71Pj0 0JFNXdzLrGPSYavk0Xf5AWa6Ta2PsPdsKvA90BkZFaJmeoer5s7UTuihMeun4p7T RoqZO5tMJ3qNTHYNGvpFGd2fgflBnLMnnnYtNRzvN8vrmXWmYGgOuLkX4VeLb8QK G0B+hFsWJq+smMTAjsyVyaGGAeCoI/q0u9kWZH1xNzTuwVQ1uouZ42Czdhy9Gd+X mjc9NcjTOqIe4kw4U9bK0aKUgCFUruYta1xKH1o4JQyFWpdeL41gm8Zkjueh8cul iSzLGAUcGEJ4Qv9Pqb5vLVdiV7KuUWI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:01 2025 by rpki-client