$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa File: f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa (raw, json) Hash identifier: Xdluxkz7TjIZCwqpHggD+nvP7RKMUGF6U4PDuS9j4E4= Subject key identifier: 45:70:91:D3:71:EA:AF:66:4F:DD:E3:C2:2F:67:4B:C6:FF:F8:E0:55 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584B4081A9DBDFC9FAD78C231D00 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 21559 IP address blocks: 192.254.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a9:db:df:c9:fa:d7:8c:23:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=2d9175da-10d6-4af7-937c-33ed6296f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:a9:d7:b8:68:67:58:e2:5b:5b:b1:56:18: 3a:20:9f:c6:1f:ed:d6:ac:1a:e9:70:a9:da:a3:4b: 1b:ca:30:d9:df:87:29:b9:c4:ae:20:59:98:6c:1d: 99:2e:f6:28:ea:74:24:2f:c1:b0:b8:96:f1:24:09: 72:05:30:4c:e9:d8:40:aa:5e:64:ad:93:3b:5b:63: a7:31:2b:e0:6f:c1:91:f1:0c:b8:ec:38:a9:49:af: 3f:c4:e6:62:ba:e8:f4:ef:b6:74:7c:a6:ba:9a:fa: 26:2e:01:4e:50:51:b7:8d:56:91:0f:ae:2c:00:1a: 99:9e:f5:4e:87:c6:13:1a:1c:34:28:cf:0b:94:bd: 2d:29:8e:09:c7:b3:69:42:4c:f6:52:0e:55:fe:fe: b3:9c:a9:99:e6:b7:5e:fc:3d:83:08:68:00:5a:a0: 4b:6e:77:2a:80:20:6e:a8:f8:c9:a8:2d:c6:14:12: 8d:60:f8:84:f4:99:8d:a2:71:08:1a:27:81:70:5b: 7d:13:0f:dd:69:52:e7:b8:22:1d:29:5e:dc:32:fb: 55:d7:81:4d:ee:65:00:95:49:dc:1a:25:2c:5b:cd: 4d:c7:74:69:84:30:f6:76:d2:ca:42:34:ac:05:69: b7:b4:40:60:97:89:13:27:fa:3c:9c:3d:84:7d:18: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:70:91:D3:71:EA:AF:66:4F:DD:E3:C2:2F:67:4B:C6:FF:F8:E0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f0c31c28-17a3-32cc-8048-4b3bb200b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0a:1f:da:1d:04:64:b1:31:c5:83:81:77:a8:ce:ca:09:cc: 62:0e:9e:db:d4:a7:d2:16:1d:7f:91:0c:bd:1d:af:42:02:33: 88:ba:10:24:f6:30:09:ab:df:e4:a6:77:e9:13:2c:d6:ac:b9: 09:5b:72:84:c2:d3:87:5f:1c:8a:0a:09:04:77:64:0e:63:fa: ab:0b:d5:de:09:3f:7c:a8:6c:9a:a7:e6:05:af:65:ae:34:5f: d8:00:4c:2b:a6:82:57:b1:e1:7b:a2:69:89:a9:4e:5e:c5:0b: a7:f3:4f:22:74:52:00:da:cd:44:be:c2:f1:da:98:12:47:f8: 72:e3:82:ff:42:6b:ee:14:62:75:98:0c:7f:47:31:09:ab:f7: e7:97:f6:5d:a8:43:d5:31:f0:24:02:1f:a0:03:e9:24:39:b9: 0b:53:c5:d8:36:ee:9d:b5:c6:70:9a:24:db:ca:0f:4c:71:1e: e8:0b:ac:29:34:98:f1:b0:4d:1b:36:59:fa:fe:fb:fe:29:eb: 9d:31:c3:33:5c:37:ec:b9:e9:5b:fb:fd:96:6d:f9:b8:6f:3c: b1:45:b2:1d:a5:8f:af:4b:f1:22:7c:d7:ce:87:61:6c:87:65: 64:ef:6d:02:43:4f:04:79:f1:4e:50:11:98:e0:60:21:43:45: 1c:de:70:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAganb38n614wjHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MmQ5MTc1ZGEtMTBkNi00YWY3LTkzN2MtMzNlZDYyOTZmOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBep17hoZ1jiW1uxVhg6IJ/GH+3WrBrpcKna o0sbyjDZ34cpucSuIFmYbB2ZLvYo6nQkL8GwuJbxJAlyBTBM6dhAql5krZM7W2On MSvgb8GR8Qy47DipSa8/xOZiuuj077Z0fKa6mvomLgFOUFG3jVaRD64sABqZnvVO h8YTGhw0KM8LlL0tKY4Jx7NpQkz2Ug5V/v6znKmZ5rde/D2DCGgAWqBLbncqgCBu qPjJqC3GFBKNYPiE9JmNonEIGieBcFt9Ew/daVLnuCIdKV7cMvtV14FN7mUAlUnc GiUsW81Nx3RphDD2dtLKQjSsBWm3tEBgl4kTJ/o8nD2EfRiGZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVwkdNx6q9mT93jwi9nS8b/+OBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvZjBjMzFjMjgtMTdhMy0z MmNjLTgwNDgtNGIzYmIyMDBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwP5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8KH9odBGSxMcWDgXeozsoJzGIOntvUp9IWHX+RDL0dr0ICM4i6ECT2 MAmr3+Smd+kTLNasuQlbcoTC04dfHIoKCQR3ZA5j+qsL1d4JP3yobJqn5gWvZa40 X9gATCumglex4XuiaYmpTl7FC6fzTyJ0UgDazUS+wvHamBJH+HLjgv9Ca+4UYnWY DH9HMQmr9+eX9l2oQ9Ux8CQCH6AD6SQ5uQtTxdg27p21xnCaJNvKD0xxHugLrCk0 mPGwTRs2Wfr++/4p650xwzNcN+y56Vv7/ZZt+bhvPLFFsh2lj69L8SJ8186HYWyH ZWTvbQJDTwR58U5QEZjgYCFDRRzecJI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:54:38 2025 by rpki-client