$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa File: 848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json) Hash identifier: uOIhL/KXlE5lQg1P164i2hJ7TAPr5M/CZuKKyKaftQY= Subject key identifier: C2:EB:FF:E4:3F:3A:D8:C0:CC:07:5B:28:50:39:1C:E3:F1:32:EB:AD Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Certificate serial: 010D0C9F4328584B0A11682C913400F256E06500 Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 398774 IP address blocks: 209.250.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:68:2c:91:34:00:f2:56:e0:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=c87b3a3c-aea5-494d-a789-a5dfd4f92d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:34:68:e0:94:cc:55:cd:45:b2:11:c2:44: bb:48:38:7f:c5:b0:9f:9e:aa:a3:9a:91:4e:0b:aa: 5d:22:a6:a9:98:d3:3c:bb:9c:76:9f:89:d1:a2:74: fc:87:24:b0:87:4f:15:34:72:ef:2f:8e:84:c6:31: 0a:fd:d3:5a:2e:5f:1c:4b:51:44:cc:80:28:fe:c5: 39:96:fa:4d:ae:12:4c:e0:07:e9:8f:ad:a4:37:df: 23:76:c9:5d:68:7a:f9:26:c3:f4:46:78:99:45:6f: ae:bf:b7:98:d4:33:1e:0c:5e:be:02:26:3c:08:c1: b0:cf:09:10:e6:e9:14:20:98:21:88:6f:6f:db:d6: 4d:cf:ce:37:05:9e:d5:cc:52:e9:ed:8a:7c:ac:46: 9c:a8:5b:d2:63:32:8e:17:25:bc:53:a5:03:82:7c: 91:7c:cd:39:fe:3b:4c:59:47:ad:ee:fa:23:67:29: 9e:5f:f4:4a:3d:52:be:af:06:d4:98:bf:c8:ba:91: 61:5e:14:81:0a:4d:86:bc:30:0a:43:2c:19:9b:68: 26:a7:de:9a:2b:ba:89:6c:df:da:a5:62:30:6a:77: dd:9d:e2:b4:8b:8e:34:b6:34:b1:5c:5f:b2:08:38: ef:68:32:48:7d:e2:98:d6:2b:72:79:c5:bb:ae:fc: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:FF:E4:3F:3A:D8:C0:CC:07:5B:28:50:39:1C:E3:F1:32:EB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl X509v3 Authority Key Identifier: keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer sbgp-ipAddrBlock: critical IPv4: 209.250.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:23:82:59:88:7c:11:db:77:b1:e4:11:c3:2e:fe:cb:39:15: 3b:81:df:79:2c:d5:e3:e6:25:25:78:7c:33:56:01:f6:0f:34: 32:c6:1c:c6:4c:4e:65:1b:61:58:a2:12:a0:5e:c2:22:37:52: be:00:4a:b5:f8:4c:c9:22:1e:22:78:55:57:79:e0:92:12:e3: eb:8b:97:a6:aa:20:25:4a:9a:12:fb:51:64:5f:66:c1:d5:cd: 67:fd:91:ed:28:59:f1:a2:d7:e5:f4:f0:96:d1:6a:d5:a0:47: 05:69:06:e9:9b:5a:7c:e0:bf:06:ff:cf:a0:1c:b3:06:00:ad: 8d:e7:6e:87:89:66:44:19:6d:f3:7e:eb:a7:c2:ad:d4:5b:a8: 1b:f7:cb:91:17:b6:06:ee:87:09:39:d7:91:6f:fd:75:0c:d6: 35:3c:26:8a:97:5c:9e:99:cd:e3:d3:77:45:e2:1f:5d:b4:6e: 6b:ba:97:78:30:7d:2f:3c:a8:ce:01:7a:cc:5d:d1:07:70:77: a3:ef:ac:43:54:17:39:29:77:c4:c9:2b:7e:7e:df:19:1b:c6: b5:a1:5d:c6:a0:38:68:61:c9:23:e8:27:e4:e8:d3:a7:b4:c3: be:56:6a:92:19:cd:93:a5:62:a5:b6:60:52:66:ea:a9:16:7a: 07:55:bf:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWgskTQA8lbgZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2 ODNjMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk Yzg3YjNhM2MtYWVhNS00OTRkLWE3ODktYTVkZmQ0ZjkyZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugQ0aOCUzFXNRbIRwkS7SDh/xbCfnqqjmpFO C6pdIqapmNM8u5x2n4nRonT8hySwh08VNHLvL46ExjEK/dNaLl8cS1FEzIAo/sU5 lvpNrhJM4Afpj62kN98jdsldaHr5JsP0RniZRW+uv7eY1DMeDF6+AiY8CMGwzwkQ 5ukUIJghiG9v29ZNz843BZ7VzFLp7Yp8rEacqFvSYzKOFyW8U6UDgnyRfM05/jtM WUet7vojZymeX/RKPVK+rwbUmL/IupFhXhSBCk2GvDAKQywZm2gmp96aK7qJbN/a pWIwanfdneK0i440tjSxXF+yCDjvaDJIfeKY1ityecW7rvwxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLr/+Q/OtjAzAdbKFA5HOPxMuutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZm YzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvODQ4YmJkMjktNWJjNC0z OWI1LWJlOWMtYjkwYjc1ZjhhN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFmZmMxOTItZDRhOC00MTg5LWJh YjItY2U3YTM3ZWE2ODNjL2ExZmZjMTkyLWQ0YTgtNDE4OS1iYWIyLWNlN2EzN2Vh NjgzYy5jcmwwHwYDVR0jBBgwFoAUaLusZqgHi4Xm7ZwBPcI1vdKnq/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdh MzdlYTY4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0frAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwjglmIfBHbd7HkEcMu/ss5FTuB33ks1ePmJSV4fDNWAfYPNDLGHMZM TmUbYViiEqBewiI3Ur4ASrX4TMkiHiJ4VVd54JIS4+uLl6aqICVKmhL7UWRfZsHV zWf9ke0oWfGi1+X08JbRatWgRwVpBumbWnzgvwb/z6AcswYArY3nboeJZkQZbfN+ 66fCrdRbqBv3y5EXtgbuhwk515Fv/XUM1jU8JoqXXJ6ZzePTd0XiH120bmu6l3gw fS88qM4Besxd0Qdwd6PvrENUFzkpd8TJK35+3xkbxrWhXcagOGhhySPoJ+To06e0 w75WapIZzZOlYqW2YFJm6qkWegdVvzA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:34 2025 by rpki-client