$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa File: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (raw, json) Hash identifier: qVtuvaLAyVyzlxUOK24IsbOi4oPTvjaJSWHfX2QFiGs= Subject key identifier: 4C:45:11:B0:1E:5E:B0:A7:9C:63:80:9A:97:41:EF:A7:78:88:3B:A7 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584BAEC7C27F58C684AFAFB70580 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c2:7f:58:c6:84:af:af:b7:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1e6fd500-abf1-4230-a910-39659c03d3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:ef:93:9c:23:c0:e3:95:82:52:a2:fd:34: 36:e8:96:77:5b:75:59:4e:25:03:58:7e:fd:c0:23: fe:a3:2a:73:0a:4b:ea:b8:8d:7c:77:88:74:49:a8: 5a:6e:78:77:b8:93:dd:0b:4b:68:83:12:3e:7d:c2: cf:d8:ac:de:2d:52:f8:81:07:5c:8b:37:9e:33:80: 48:5f:b9:03:1d:f5:db:26:84:43:f8:cc:c5:72:2e: 47:39:2e:c4:02:b1:86:93:e0:c1:c2:75:d3:6e:44: e0:4f:ca:9c:37:1c:43:85:c6:01:14:1c:cd:5f:13: 00:e2:03:24:5e:04:a8:e2:a9:43:b9:49:39:b3:08: b1:3c:22:9e:44:42:05:88:96:c0:d8:9b:06:2f:7b: 10:35:10:1d:7d:8a:56:97:61:75:6a:c0:87:fc:9a: ba:46:9c:c0:f5:dd:1e:38:cb:be:9a:c5:6d:a3:0b: 3a:98:38:8c:43:7b:81:57:49:92:0e:b8:ca:82:e5: 0e:4e:95:34:ab:9c:a4:1b:82:cc:b0:12:6d:e0:47: 69:4d:7f:a4:6e:46:d9:d4:10:8b:3d:0a:83:c6:b4: 10:62:98:72:75:8a:1e:5d:4b:75:61:8c:73:85:97: 18:a2:8d:ed:05:c2:b0:cc:7e:ff:2b:b5:7e:f7:04: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:11:B0:1E:5E:B0:A7:9C:63:80:9A:97:41:EF:A7:78:88:3B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:63:1f:a5:c8:2e:25:d8:4e:4f:f3:19:20:de:d7:62:72:c1: e6:a5:6f:97:f9:21:11:04:31:28:1a:a6:6b:ae:4a:34:db:1d: 69:40:75:e0:20:27:6d:b6:3e:74:67:18:b7:21:2c:1d:65:ff: 3d:01:b0:99:ec:1a:f9:ac:aa:cd:b8:50:8d:ed:7f:21:5c:b9: 7e:cf:7f:c6:8d:3a:08:2a:73:96:2f:3d:d7:49:6e:64:f0:4c: e9:b4:b3:26:b4:59:a1:32:10:2a:d8:66:37:30:86:6b:4b:e7: 27:9c:26:bf:a9:2f:48:81:ab:8b:8d:b5:97:70:cd:70:20:d8: 96:a2:61:59:87:e8:71:5a:9c:68:d0:a3:d6:09:d7:b9:6f:f6: 6d:cc:78:86:01:5a:a2:6b:14:92:f3:26:ee:65:9a:6b:a0:24: fd:22:39:ea:d3:20:5c:66:d8:89:ac:2c:33:a1:4d:33:bb:f2: 59:f6:ac:ae:19:20:2e:a1:61:b1:8c:44:fc:f3:6d:98:96:05: 19:bd:eb:10:51:3f:7c:62:9c:26:15:57:56:db:b8:4b:93:06: b1:7b:49:47:a2:53:5a:7c:a1:b2:30:23:de:8e:23:67:79:97: ff:e5:e1:9d:23:b7:75:ba:10:b7:89:0f:16:32:01:cb:af:dc: da:85:78:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8J/WMaEr6+3BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MWU2ZmQ1MDAtYWJmMS00MjMwLWE5MTAtMzk2NTljMDNkM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsrvk5wjwOOVglKi/TQ26JZ3W3VZTiUDWH79 wCP+oypzCkvquI18d4h0Sahabnh3uJPdC0togxI+fcLP2KzeLVL4gQdcizeeM4BI X7kDHfXbJoRD+MzFci5HOS7EArGGk+DBwnXTbkTgT8qcNxxDhcYBFBzNXxMA4gMk XgSo4qlDuUk5swixPCKeREIFiJbA2JsGL3sQNRAdfYpWl2F1asCH/Jq6RpzA9d0e OMu+msVtows6mDiMQ3uBV0mSDrjKguUOTpU0q5ykG4LMsBJt4EdpTX+kbkbZ1BCL PQqDxrQQYphydYoeXUt1YYxzhZcYoo3tBcKwzH7/K7V+9wQ5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExFEbAeXrCnnGOAmpdB76d4iDunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZmIzY2VjM2MtZTNmOC0z MGI0LWFkNmUtNWVjZWRhMTA5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRjH6XILiXYTk/zGSDe12Jywealb5f5IREEMSgapmuuSjTbHWlAdeAg J222PnRnGLchLB1l/z0BsJnsGvmsqs24UI3tfyFcuX7Pf8aNOggqc5YvPddJbmTw TOm0sya0WaEyECrYZjcwhmtL5yecJr+pL0iBq4uNtZdwzXAg2JaiYVmH6HFanGjQ o9YJ17lv9m3MeIYBWqJrFJLzJu5lmmugJP0iOerTIFxm2ImsLDOhTTO78ln2rK4Z IC6hYbGMRPzzbZiWBRm96xBRP3xinCYVV1bbuEuTBrF7SUeiU1p8obIwI96OI2d5 l//l4Z0jt3W6ELeJDxYyAcuv3NqFeJk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:16 2025 by rpki-client