$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa File: 8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa (raw, json) Hash identifier: 2CJaxmBGyE4j9/mIyUNJdIxrkfU0Yz1wYFo2RQCMG4U= Subject key identifier: D2:D1:B8:EB:91:4B:5B:6F:DF:2B:05:32:0C:93:06:0B:AB:45:62:17 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584B76F2296344DC8B6F86FA4A00 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 54054 IP address blocks: 199.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:29:63:44:dc:8b:6f:86:fa:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=12ada875-848e-420e-b347-707f18114212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:bc:cb:67:7a:ea:38:30:a7:1e:ce:95:31: 36:ea:a0:db:75:b6:ef:9b:f4:5c:30:1e:c8:5c:59: 8f:64:76:30:cd:f0:f8:a3:1a:17:25:35:ca:02:4c: 6f:38:94:3e:f2:c1:55:48:1a:3e:e1:d6:d4:c9:0b: ca:98:f4:15:a7:37:a1:ca:0e:e7:a5:1b:e8:bb:2d: 2d:a5:90:94:a3:0a:88:03:ef:50:49:b0:4f:a4:12: c4:35:43:95:66:0a:3c:b4:59:9b:28:08:00:dc:83: 91:bc:da:61:12:54:ba:fa:95:39:ee:78:c4:da:af: 0f:6d:19:9a:c1:52:ba:37:f5:c8:3d:42:33:d2:4e: bb:57:a1:4e:40:22:e1:d8:61:2b:88:d6:87:46:a1: e2:9a:74:1a:4d:a1:16:6b:f8:97:54:b3:29:02:e3: c4:72:18:af:43:7f:a0:90:f1:41:31:fa:2d:63:ec: ee:23:47:f4:bf:48:5b:e9:af:fd:14:89:c9:e7:73: 38:3d:71:3e:bf:d9:c5:72:f7:30:36:76:26:ea:a4: 2f:24:23:43:76:9f:08:dd:9d:36:ec:79:25:49:a2: 71:31:7e:0c:70:19:29:c9:0c:2b:be:60:32:e8:25: 8f:b3:6a:1a:90:17:d4:97:cd:cd:64:76:93:1a:38: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D1:B8:EB:91:4B:5B:6F:DF:2B:05:32:0C:93:06:0B:AB:45:62:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 199.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3b:1b:d1:64:22:15:21:5f:bb:6d:ee:93:a3:32:a2:81:aa: 8e:b1:22:c1:b9:70:ed:5d:2c:e1:58:d9:c5:96:cc:0c:34:11: d9:b8:33:92:67:0e:50:dd:42:b6:c2:7c:12:22:87:8e:8c:29: b4:b5:96:dd:59:1c:b1:3b:26:fe:7e:55:b2:76:26:d5:68:34: 96:d9:0d:04:4d:47:af:30:69:01:7f:65:bc:80:b7:a0:f3:c4: 55:41:a4:bf:58:f9:74:ef:d2:95:43:2f:8b:91:a2:a8:e8:1f: ef:e9:a8:05:7e:ce:47:cf:96:9a:58:2c:45:86:1a:60:68:a5: d1:81:c8:1f:a4:40:c3:44:36:7c:53:49:d6:2d:a0:7a:2c:22: da:9f:7c:a1:63:ea:97:85:7d:f1:bf:4d:31:29:6a:b9:5e:ae: ba:a6:c2:06:1b:9b:5c:10:ab:00:9a:af:bc:16:4a:bf:81:5f: 4a:97:ea:5b:23:2b:c6:7c:95:18:7e:53:3e:58:f4:cb:be:6c: 9a:dd:50:43:10:74:25:39:53:a5:8c:b0:6f:3d:68:6a:ef:7e: be:8b:1d:91:2e:90:bf:c6:7f:0a:8a:67:94:76:8c:28:72:aa: 94:a2:bd:6b:4a:00:c5:2f:cf:19:08:6a:14:fb:7d:00:73:c3: 6b:94:57:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iljRNyLb4b6SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTJhZGE4NzUtODQ4ZS00MjBlLWIzNDctNzA3ZjE4MTE0MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDi8y2d66jgwpx7OlTE26qDbdbbvm/RcMB7I XFmPZHYwzfD4oxoXJTXKAkxvOJQ+8sFVSBo+4dbUyQvKmPQVpzehyg7npRvouy0t pZCUowqIA+9QSbBPpBLENUOVZgo8tFmbKAgA3IORvNphElS6+pU57njE2q8PbRma wVK6N/XIPUIz0k67V6FOQCLh2GEriNaHRqHimnQaTaEWa/iXVLMpAuPEchivQ3+g kPFBMfotY+zuI0f0v0hb6a/9FInJ53M4PXE+v9nFcvcwNnYm6qQvJCNDdp8I3Z02 7HklSaJxMX4McBkpyQwrvmAy6CWPs2oakBfUl83NZHaTGjjOvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLRuOuRS1tv3ysFMgyTBgurRWIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvOGMzOWU5ZTUtYmZmOS0z YmY5LWIwODItYTc4ZGI3OTdkN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo7G9FkIhUhX7tt7pOjMqKBqo6xIsG5cO1dLOFY2cWWzAw0Edm4M5Jn DlDdQrbCfBIih46MKbS1lt1ZHLE7Jv5+VbJ2JtVoNJbZDQRNR68waQF/ZbyAt6Dz xFVBpL9Y+XTv0pVDL4uRoqjoH+/pqAV+zkfPlppYLEWGGmBopdGByB+kQMNENnxT SdYtoHosItqffKFj6peFffG/TTEparlerrqmwgYbm1wQqwCar7wWSr+BX0qX6lsj K8Z8lRh+Uz5Y9Mu+bJrdUEMQdCU5U6WMsG89aGrvfr6LHZEukL/GfwqKZ5R2jChy qpSivWtKAMUvzxkIahT7fQBzw2uUV2k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:31 2025 by rpki-client