$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/47a20700-57d1-3b05-917e-cfad4ad510ef.roa File: 47a20700-57d1-3b05-917e-cfad4ad510ef.roa (raw, json) Hash identifier: 0JTIaxYp6aZOQ53+V5bV5dV49gRwIG8tGkiHEJJunOY= Subject key identifier: 23:4D:14:2A:96:6E:E5:B4:97:29:57:DC:0B:B4:C2:7B:0D:7A:D1:89 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584B9E6877C63B40448D3EEFC080 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/47a20700-57d1-3b05-917e-cfad4ad510ef.roa Signing time: Thu 23 Oct 2025 16:15:55 +0000 ROA not before: Thu 23 Oct 2025 16:15:55 +0000 ROA not after: Wed 21 Jan 2026 17:15:55 +0000 asID: 213440 IP address blocks: 128.254.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:68:77:c6:3b:40:44:8d:3e:ef:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Oct 23 16:15:55 2025 GMT Not After : Jan 21 17:15:55 2026 GMT Subject: CN=c1659c5e-59e8-4489-8c59-511bcec3fe3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9b:d6:07:b5:22:60:59:93:70:c9:03:38:fc: 0b:ba:a1:8f:72:26:e9:20:fd:24:4f:61:5c:df:4e: e9:f1:23:0d:b0:60:71:98:93:ec:d2:18:12:16:88: 14:b4:db:3b:07:77:6f:2d:fa:54:af:d9:ba:6e:ba: 80:83:21:7e:1c:a0:d6:f5:28:70:96:c6:b0:30:5d: 0d:30:f6:d9:36:12:19:2e:e9:22:21:31:f3:87:93: ef:27:4e:fb:67:67:f3:8d:e1:67:cc:fd:fa:d4:45: 39:01:7c:a8:e7:d2:3d:6d:d2:54:79:14:65:6b:40: 3a:c1:97:53:d3:79:9b:55:da:5a:1e:55:cb:ba:18: f1:47:e6:86:54:cf:5c:b3:9b:06:af:c9:08:63:40: 39:5a:f5:98:bb:57:bc:b1:37:71:e9:b9:68:6d:53: c7:4f:9e:31:05:96:4a:c7:4b:af:c3:15:7c:23:46: 2b:32:44:50:50:20:a2:68:f5:9e:33:22:e6:aa:d9: ef:71:a5:2f:2f:d2:eb:8d:c7:1a:3b:50:87:a2:0c: 41:7d:df:a7:66:c0:9e:51:8c:f5:7b:49:63:96:5b: 9d:3f:19:0f:99:57:b7:10:b2:4a:bf:79:9e:3c:36: 1e:15:9e:f7:ad:65:ad:1c:85:03:4b:67:3b:b8:7a: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4D:14:2A:96:6E:E5:B4:97:29:57:DC:0B:B4:C2:7B:0D:7A:D1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/47a20700-57d1-3b05-917e-cfad4ad510ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c0:00:fe:a8:a8:7f:98:6a:84:fc:f2:3d:07:17:15:d9:2e: 45:fe:a4:1c:74:86:df:23:b2:4f:9b:68:fa:f6:4b:0d:95:07: b6:2d:6a:df:3f:e0:4b:1e:6f:99:a0:9d:fb:9d:83:fc:fe:6f: e4:a6:9f:61:0d:07:4b:32:4b:ec:50:0f:ad:26:f5:a3:e7:70: 28:db:38:92:58:58:39:ce:59:2e:d5:80:53:09:b2:71:7d:32: b7:c6:da:6a:d7:15:65:5b:0d:a8:96:c3:bc:d5:e2:e7:40:5f: 5d:ab:3e:47:ec:05:c0:28:cc:8b:c8:42:31:35:8a:fc:80:24: e5:b4:f3:a1:59:2f:9a:a6:7d:05:10:b9:a3:10:b4:0b:ad:09: 24:23:e8:a5:37:bb:b8:06:af:df:79:e8:af:43:52:8b:0a:78: 6b:60:bc:8b:28:98:12:d3:a4:8d:05:16:b3:72:60:c7:6a:73: 96:4f:3e:8b:de:6e:0c:d4:10:af:c5:66:f9:3d:03:d3:35:80: a7:18:87:1d:bc:11:5d:b9:86:21:3a:cc:54:bc:e0:f9:cd:ea: c3:93:d2:c8:7b:e2:ad:c6:f9:6c:4b:ce:f8:78:75:4c:5e:a0: f7:5e:7d:80:23:2e:9a:7a:d2:7a:9f:8d:e9:8a:cd:79:4e:37: 77:e7:7d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueaHfGO0BEjT7vwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MTAyMzE2MTU1NVoXDTI2MDEyMTE3MTU1NVowLzEtMCsGA1UEAxMk YzE2NTljNWUtNTllOC00NDg5LThjNTktNTExYmNlYzNmZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZvWB7UiYFmTcMkDOPwLuqGPcibpIP0kT2Fc 307p8SMNsGBxmJPs0hgSFogUtNs7B3dvLfpUr9m6brqAgyF+HKDW9ShwlsawMF0N MPbZNhIZLukiITHzh5PvJ077Z2fzjeFnzP361EU5AXyo59I9bdJUeRRla0A6wZdT 03mbVdpaHlXLuhjxR+aGVM9cs5sGr8kIY0A5WvWYu1e8sTdx6blobVPHT54xBZZK x0uvwxV8I0YrMkRQUCCiaPWeMyLmqtnvcaUvL9LrjccaO1CHogxBfd+nZsCeUYz1 e0ljlludPxkPmVe3ELJKv3mePDYeFZ73rWWtHIUDS2c7uHohrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNNFCqWbuW0lylX3Au0wnsNetGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvNDdhMjA3MDAtNTdkMS0z YjA1LTkxN2UtY2ZhZDRhZDUxMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP66MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbAAP6oqH+YaoT88j0HFxXZLkX+pBx0ht8jsk+baPr2Sw2VB7Ytat8/ 4Eseb5mgnfudg/z+b+Smn2ENB0syS+xQD60m9aPncCjbOJJYWDnOWS7VgFMJsnF9 MrfG2mrXFWVbDaiWw7zV4udAX12rPkfsBcAozIvIQjE1ivyAJOW086FZL5qmfQUQ uaMQtAutCSQj6KU3u7gGr9956K9DUosKeGtgvIsomBLTpI0FFrNyYMdqc5ZPPove bgzUEK/FZvk9A9M1gKcYhx28EV25hiE6zFS84PnN6sOT0sh74q3G+WxLzvh4dUxe oPdefYAjLpp60nqfjemKzXlON3fnfbQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:09 2025 by rpki-client