$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa File: bda6574d-81c2-38f7-b624-cdc878c38860.roa (raw, json) Hash identifier: zuPmFOPI3iT55m/17YxMXYyjgccfuimlUaSAnFs+Stk= Subject key identifier: CA:6F:3B:2B:60:D9:C5:A4:74:5A:25:CB:2B:3A:75:B3:79:AB:08:CD Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584BC10ADA2A0F391CC304110F80 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 400702 IP address blocks: 192.81.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:da:2a:0f:39:1c:c3:04:11:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=6c2f66b7-1006-4256-9444-14f9a306cc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ed:1d:56:ed:2d:29:68:c6:f6:74:64:80:e1: 66:50:9d:f8:12:bf:80:f0:8b:ec:4d:36:36:ab:98: f4:01:7d:e5:0f:be:c3:f9:37:9d:da:30:20:b7:1d: f7:40:58:22:d5:21:5c:c7:f6:d2:fb:bd:42:43:05: 30:15:f5:63:d9:74:a0:00:3b:08:63:66:89:4b:70: 2a:30:c6:86:f0:80:b0:0f:2e:9a:b9:1e:1e:a7:77: db:b4:5a:df:aa:e9:31:14:ce:86:9a:8b:76:50:f8: 66:f1:64:ad:e4:c5:90:79:4b:c3:3e:87:0b:2b:2b: e2:17:09:c2:a4:97:23:65:91:d4:c6:0c:0e:b9:26: db:1a:fd:a5:67:fc:e0:83:8a:26:dd:c7:d5:93:40: c3:7c:bf:a9:58:15:a8:07:34:e0:21:a3:a8:ef:e3: c3:0b:0e:c9:d4:f6:25:15:3f:9c:a8:78:1d:bf:40: d0:72:41:88:0e:d2:5c:d5:24:99:ce:24:c4:a3:bc: 95:fe:9a:d1:e8:7a:5d:c9:0a:9d:ae:44:80:87:67: 96:15:54:c0:c2:29:3d:47:9f:6f:35:67:41:fa:59: 0c:48:ed:b6:14:32:6e:e8:22:f3:6c:28:5c:81:6c: 17:14:c1:3e:66:61:44:f2:5c:c6:31:72:e2:74:ee: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6F:3B:2B:60:D9:C5:A4:74:5A:25:CB:2B:3A:75:B3:79:AB:08:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 192.81.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c2:80:6c:82:83:4b:fa:ef:d7:1c:ca:a4:51:96:da:d9:26: e6:0b:68:4e:02:43:28:f6:48:18:4e:47:9b:c2:0f:ce:4b:ef: 5d:45:76:89:29:d8:fe:76:a0:ed:9d:a3:e5:93:2d:64:7f:f0: d5:0c:7a:62:30:f2:78:66:84:6d:27:b6:d4:a5:f0:ec:b4:39: a2:3b:1f:5a:db:d4:f0:aa:40:e5:a1:8c:bd:58:47:1c:71:80: e2:e3:d7:a7:41:8c:40:16:48:62:e1:3b:83:f7:4a:df:a6:8b: 7c:db:a8:19:92:8d:a4:81:ed:a4:4e:b2:1f:74:5b:71:70:d1: f5:66:40:b7:1b:da:f4:5c:6e:76:54:90:2a:16:fa:c2:1f:3e: 88:6c:75:42:13:a4:45:43:6b:1c:ed:3e:5f:e5:56:5e:54:4d: d5:b7:f3:95:ca:05:cb:2f:2b:c0:11:0d:f4:3b:66:90:58:f7: 9a:a6:4a:2b:34:9f:d2:f2:ed:d9:43:8f:94:ef:c1:ca:16:3f: cf:ea:af:fa:f5:0e:bd:da:78:80:ef:fd:38:91:76:6f:ad:be: 45:e8:68:8d:b9:d6:cf:bc:57:ae:bb:2e:8d:21:08:be:40:a0: 38:48:cd:41:50:6a:2c:45:8f:93:25:1c:4e:6e:9a:65:41:ad: a8:fa:54:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtoqDzkcwwQRD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk NmMyZjY2YjctMTAwNi00MjU2LTk0NDQtMTRmOWEzMDZjYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku0dVu0tKWjG9nRkgOFmUJ34Er+A8IvsTTY2 q5j0AX3lD77D+Ted2jAgtx33QFgi1SFcx/bS+71CQwUwFfVj2XSgADsIY2aJS3Aq MMaG8ICwDy6auR4ep3fbtFrfqukxFM6Gmot2UPhm8WSt5MWQeUvDPocLKyviFwnC pJcjZZHUxgwOuSbbGv2lZ/zgg4om3cfVk0DDfL+pWBWoBzTgIaOo7+PDCw7J1PYl FT+cqHgdv0DQckGIDtJc1SSZziTEo7yV/prR6HpdyQqdrkSAh2eWFVTAwik9R59v NWdB+lkMSO22FDJu6CLzbChcgWwXFME+ZmFE8lzGMXLidO63UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpvOytg2cWkdFolyys6dbN5qwjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvYmRhNjU3NGQtODFjMi0z OGY3LWI2MjQtY2RjODc4YzM4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbCgGyCg0v679ccyqRRltrZJuYLaE4CQyj2SBhOR5vCD85L711Fdokp 2P52oO2do+WTLWR/8NUMemIw8nhmhG0nttSl8Oy0OaI7H1rb1PCqQOWhjL1YRxxx gOLj16dBjEAWSGLhO4P3St+mi3zbqBmSjaSB7aROsh90W3Fw0fVmQLcb2vRcbnZU kCoW+sIfPohsdUITpEVDaxztPl/lVl5UTdW385XKBcsvK8ARDfQ7ZpBY95qmSis0 n9Ly7dlDj5TvwcoWP8/qr/r1Dr3aeIDv/TiRdm+tvkXoaI251s+8V667Lo0hCL5A oDhIzUFQaixFj5MlHE5ummVBraj6VCw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:33 2025 by rpki-client