$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa File: bbe2e43e-950f-32b7-9da7-d244a60303be.roa (raw, json) Hash identifier: 5bFKZU8txD399ON0J0OhA3vCob/FiD4puB/08a1wr2A= Subject key identifier: 3F:3C:66:40:28:FB:2D:48:24:83:49:CE:F3:7B:70:2E:D5:CB:E9:C0 Certificate issuer: /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Certificate serial: 010D0C9F4328584BABFD04132BBFD5841B61B430 Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 7212 IP address blocks: 192.111.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:04:13:2b:bf:d5:84:1b:61:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3ae01305-ed39-4f08-9422-29f62b71c57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:b6:50:89:d0:ab:65:8a:a7:20:14:d3:32: f5:ed:dc:ad:c0:cb:49:85:93:3a:0f:3b:05:15:42: bf:e5:6b:9a:7f:9d:ce:fd:5a:fd:af:cf:f2:0f:d1: a8:d3:63:01:2e:7a:f9:6d:dc:2c:dc:2e:98:1d:13: d1:53:58:de:4a:ed:6e:cd:21:c7:1a:db:f1:35:5e: 39:fe:37:5c:6b:9b:53:10:b8:bc:dc:ee:bb:b6:1b: db:78:73:0b:bf:7c:fc:85:2b:14:8a:56:cf:62:21: 49:a9:9e:ea:02:59:d8:ee:14:af:ed:cf:48:ce:99: 64:11:d4:43:28:c5:1c:c6:55:96:61:41:3a:ec:14: c5:75:f9:33:06:c2:66:ff:32:83:40:8b:bb:a4:ea: 88:57:06:20:dd:cd:a5:97:da:43:b0:3d:1e:a2:9b: 17:71:1f:7c:21:31:f1:5e:f9:4c:b5:bf:4b:9a:47: 1b:7b:2e:bf:d7:23:58:61:8d:e8:c8:04:9b:35:b2: 49:26:36:4a:44:00:ba:37:ae:31:55:3e:f7:31:be: ae:f2:e6:29:55:c2:c6:8b:80:0a:c2:f4:83:99:b8: 01:79:ab:fb:79:2a:55:35:76:ea:27:b0:7c:8b:51: 62:98:9c:b7:ec:2d:dd:d1:ea:86:9f:f0:d6:68:81: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:66:40:28:FB:2D:48:24:83:49:CE:F3:7B:70:2E:D5:CB:E9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl X509v3 Authority Key Identifier: keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer sbgp-ipAddrBlock: critical IPv4: 192.111.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:77:5c:14:08:17:b5:da:bb:e2:67:7e:0e:a4:cc:02:a1:69: f0:e8:b4:d8:5c:b1:22:df:45:e5:ba:7b:24:3d:ca:e8:e1:c6: e3:45:8d:e7:77:93:04:3f:15:61:c7:a7:57:a1:1d:fe:2d:1a: 24:e0:50:bd:4d:28:f4:e4:80:0c:d1:40:6a:02:db:ba:00:21: ce:43:85:be:48:8d:b5:bf:e4:4f:c2:f0:60:0f:b0:2b:7a:c5: 63:a6:1f:19:d9:1e:6b:4d:e9:44:3b:87:c3:45:9a:de:33:a8: 0e:e9:c5:53:69:13:3f:19:69:ec:48:9f:f4:08:47:77:ad:fa: c0:4f:fc:0c:7b:ad:86:09:ec:10:c5:75:85:db:52:4f:6f:d4: 82:55:ed:ab:1f:ba:f0:55:5f:e7:f2:8a:f1:f2:c7:3c:50:b0: 43:13:21:06:09:14:e7:73:7d:35:64:90:e8:16:1f:2d:e0:06: 93:6c:6c:d7:56:44:86:80:2b:8b:b2:e1:1c:71:27:78:97:75: 95:f8:60:1e:74:88:e5:12:84:da:89:bd:b2:12:7d:03:95:83: 79:64:ea:f9:43:c4:58:ef:01:77:1c:d9:3c:85:ee:01:4e:06: 81:f9:8d:37:99:b4:b1:15:b7:cb:cb:4d:1f:c6:e0:9d:bc:1c: 4e:46:aa:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QQTK7/VhBthtDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFjMDA4OTQtNWUxNy00ZTE0LWI4ZWItYjdmYjM0OGFk MWMyMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2FlMDEzMDUtZWQzOS00ZjA4LTk0MjItMjlmNjJiNzFjNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim+2UInQq2WKpyAU0zL17dytwMtJhZM6DzsF FUK/5Wuaf53O/Vr9r8/yD9Go02MBLnr5bdws3C6YHRPRU1jeSu1uzSHHGtvxNV45 /jdca5tTELi83O67thvbeHMLv3z8hSsUilbPYiFJqZ7qAlnY7hSv7c9IzplkEdRD KMUcxlWWYUE67BTFdfkzBsJm/zKDQIu7pOqIVwYg3c2ll9pDsD0eopsXcR98ITHx XvlMtb9Lmkcbey6/1yNYYY3oyASbNbJJJjZKRAC6N64xVT73Mb6u8uYpVcLGi4AK wvSDmbgBeav7eSpVNXbqJ7B8i1FimJy37C3d0eqGn/DWaIEr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD88ZkAo+y1IJINJzvN7cC7Vy+nAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMw MDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4YWQxYzIvYmJlMmU0M2UtOTUwZi0z MmI3LTlkYTctZDI0NGE2MDMwM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWFjMDA4OTQtNWUxNy00ZTE0LWI4 ZWItYjdmYjM0OGFkMWMyL2VhYzAwODk0LTVlMTctNGUxNC1iOGViLWI3ZmIzNDhh ZDFjMi5jcmwwHwYDVR0jBBgwFoAUwYzMbm96JB9XCrDBoqjJfPoxvcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2Zi MzQ4YWQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ3XBQIF7Xau+Jnfg6kzAKhafDotNhcsSLfReW6eyQ9yujhxuNFjed3 kwQ/FWHHp1ehHf4tGiTgUL1NKPTkgAzRQGoC27oAIc5Dhb5IjbW/5E/C8GAPsCt6 xWOmHxnZHmtN6UQ7h8NFmt4zqA7pxVNpEz8ZaexIn/QIR3et+sBP/Ax7rYYJ7BDF dYXbUk9v1IJV7asfuvBVX+fyivHyxzxQsEMTIQYJFOdzfTVkkOgWHy3gBpNsbNdW RIaAK4uy4RxxJ3iXdZX4YB50iOUShNqJvbISfQOVg3lk6vlDxFjvAXcc2TyF7gFO BoH5jTeZtLEVt8vLTR/G4J28HE5GqgQ= -----END CERTIFICATE-----Generated at Thu Nov 6 02:35:35 2025 by rpki-client