$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: i5f+PQMcneKVzCLqj+o9qGquF3BnF9iknTY4YXBoBSE= Subject key identifier: 11:22:0F:43:B7:01:65:A2:53:D5:5B:BE:3B:41:68:2B:52:84:B0:75 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584BB2F7B310906FAB52309B4B50 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b3:10:90:6f:ab:52:30:9b:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b6593548-e4e8-4ea9-aa98-7ede570426e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:5e:4d:12:5b:6a:cf:12:b3:0b:fe:99:40: 4c:17:01:bf:26:89:52:39:83:10:3f:89:5f:5a:66: 66:46:76:86:09:63:26:e0:8c:41:67:48:7f:c8:ba: b5:d6:4e:65:f7:ac:5f:70:dd:f4:bf:2f:b3:e4:90: 1d:11:03:49:56:e8:f9:59:32:e0:46:df:52:64:52: 65:f7:88:49:a8:35:2b:ec:c9:31:0e:09:21:14:c4: dd:cd:de:30:7e:e5:72:fa:e4:4f:5a:d9:5d:bf:1f: ce:00:f3:89:b6:e8:35:40:d4:3f:3f:3e:14:c0:3d: c9:89:fd:40:83:25:73:98:aa:40:47:a0:61:39:1d: de:a2:ae:ca:da:66:35:a1:a6:88:b1:11:7a:ee:c5: 00:28:c5:90:05:de:ac:4f:40:4e:15:ac:42:62:68: 14:0d:68:60:c9:d3:6b:e4:b2:47:c4:01:8e:f8:de: 6f:b1:17:a6:98:0c:c0:9b:0b:5e:70:a1:a3:56:dd: 16:2f:5e:80:32:50:70:6e:4d:1c:52:ce:cf:50:0b: 48:a6:43:7d:88:68:0b:5e:6e:76:94:ac:28:aa:b4: 1e:d3:b6:6a:f8:ee:ca:67:2a:68:c8:8f:9e:db:27: 92:08:48:af:22:cd:96:6d:49:79:ba:60:99:f5:a1: ad:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:22:0F:43:B7:01:65:A2:53:D5:5B:BE:3B:41:68:2B:52:84:B0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:86:eb:71:5b:7d:17:05:97:21:27:51:d7:0e:8f:22:9c:e4: 1c:cb:03:bc:c3:1e:21:6e:2a:b9:45:d4:ce:a4:22:fe:6e:b9: 60:3d:f2:01:b3:06:71:73:fe:b9:9a:50:40:f5:0d:bd:01:83: 85:78:f8:91:29:cc:20:1b:f9:2c:51:59:9f:ad:87:c1:7f:bc: 79:5d:d2:52:f4:dc:21:a0:e9:f8:c3:a2:d8:54:2e:fd:fd:d4: c8:c2:a0:24:30:77:86:33:0d:b1:0e:04:d8:ad:39:59:7a:ef: 4f:33:73:5c:9f:6a:7c:22:af:03:cd:69:6c:eb:92:c2:b7:79: 54:c6:ab:b5:45:1f:b2:3c:54:33:24:0f:21:88:bc:9d:07:65: a4:a7:ee:ee:5a:b2:fd:aa:07:4d:13:d6:ff:a2:96:db:b2:e6: d1:8f:c1:ae:c3:10:9e:96:02:80:ec:16:39:ab:a5:42:36:ea: 80:3f:70:f3:7f:c3:1c:45:d0:a5:00:00:1a:0f:cb:05:f3:d4: 6c:35:9c:da:ba:fb:54:b6:18:32:91:a6:f5:25:6d:d6:24:a1: ae:b2:17:ee:59:b3:f4:b0:2e:e3:e0:14:08:87:c9:c3:3e:9b: 04:2c:43:de:38:de:56:8c:54:27:57:9c:52:5b:ff:fd:82:f7: 38:87:f1:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97MQkG+rUjCbS1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjY1OTM1NDgtZTRlOC00ZWE5LWFhOTgtN2VkZTU3MDQyNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7ReTRJbas8Sswv+mUBMFwG/JolSOYMQP4lf WmZmRnaGCWMm4IxBZ0h/yLq11k5l96xfcN30vy+z5JAdEQNJVuj5WTLgRt9SZFJl 94hJqDUr7MkxDgkhFMTdzd4wfuVy+uRPWtldvx/OAPOJtug1QNQ/Pz4UwD3Jif1A gyVzmKpAR6BhOR3eoq7K2mY1oaaIsRF67sUAKMWQBd6sT0BOFaxCYmgUDWhgydNr 5LJHxAGO+N5vsRemmAzAmwtecKGjVt0WL16AMlBwbk0cUs7PUAtIpkN9iGgLXm52 lKwoqrQe07Zq+O7KZypoyI+e2yeSCEivIs2WbUl5umCZ9aGtrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEiD0O3AWWiU9VbvjtBaCtShLB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSG63FbfRcFlyEnUdcOjyKc5BzLA7zDHiFuKrlF1M6kIv5uuWA98gGz BnFz/rmaUED1Db0Bg4V4+JEpzCAb+SxRWZ+th8F/vHld0lL03CGg6fjDothULv39 1MjCoCQwd4YzDbEOBNitOVl6708zc1yfanwirwPNaWzrksK3eVTGq7VFH7I8VDMk DyGIvJ0HZaSn7u5asv2qB00T1v+iltuy5tGPwa7DEJ6WAoDsFjmrpUI26oA/cPN/ wxxF0KUAABoPywXz1Gw1nNq6+1S2GDKRpvUlbdYkoa6yF+5Zs/SwLuPgFAiHycM+ mwQsQ9443laMVCdXnFJb//2C9ziH8VY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:30 2025 by rpki-client