$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa File: dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json) Hash identifier: v3ERTP+1IYoKuVNrNxk4j+cvcJrciDIq6jABdgU6spk= Subject key identifier: 5D:47:2A:B5:20:3C:DE:C0:57:2D:9C:58:64:EE:5D:0D:35:10:6A:B9 Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584B477C73BF1229874FB7D4CE00 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 30211 IP address blocks: 192.161.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:73:bf:12:29:87:4f:b7:d4:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=5928fbf2-8185-4210-9025-6599544090f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:ec:3f:bf:74:21:e4:6a:66:c2:2c:83:35: 46:4e:5a:86:6f:65:28:c7:cb:95:a5:a7:49:81:9d: 8c:9a:d5:af:a6:0f:dc:37:82:19:37:16:7a:98:10: 37:4d:0b:3f:63:0d:7c:5e:a7:8e:fa:46:92:06:6b: e1:e3:81:ed:ac:b5:9f:d4:dd:da:96:e8:a2:16:48: f5:3a:bd:c4:77:df:25:61:55:0d:50:ac:8c:63:79: a7:78:e9:1a:b6:82:27:e0:cd:9a:ad:aa:1b:eb:a1: 6e:7a:f9:9f:04:6d:0d:e1:cb:2f:bc:ba:4d:dd:e2: 40:62:e0:95:c6:1b:23:4d:62:da:b9:ef:d8:cd:01: 1f:d7:de:92:93:f5:09:02:3b:42:d3:b7:b0:b0:63: d5:5e:3e:b6:79:41:7f:ee:00:ba:11:0c:54:6c:93: 4f:00:e7:07:13:66:0c:bb:d1:ec:c6:15:15:cd:70: 33:89:f7:1e:b8:e1:46:7a:6e:c3:2c:02:e3:94:15: a8:eb:31:69:9a:59:64:a0:a5:3a:a8:41:1a:4c:f2: 2f:61:69:2c:73:f8:32:db:95:37:f0:52:5f:bc:18: ef:62:c5:56:00:be:4c:28:31:b4:c1:fc:c7:e5:21: c0:1b:10:b0:96:b2:98:be:bd:bc:07:64:ee:10:12: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:47:2A:B5:20:3C:DE:C0:57:2D:9C:58:64:EE:5D:0D:35:10:6A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 192.161.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:02:1a:a3:c9:34:49:98:22:0f:e0:a1:74:78:d3:7c:f1:eb: 9f:ba:87:63:bc:08:13:87:cf:ca:09:5e:8b:3f:3e:8b:8a:67: c2:26:b6:74:8c:d6:f5:44:12:c9:2a:9e:df:f0:93:8f:76:d1: d9:ba:f7:c7:f5:da:b1:0f:9c:7d:a3:ee:6f:fd:1c:ff:69:1f: a3:64:bc:25:f9:97:f4:55:2c:ee:11:f1:ad:16:bb:5d:d7:a5: b3:ea:31:0c:ae:c6:ea:bb:e6:88:ca:4c:f7:75:be:35:38:0c: 92:21:9a:a8:16:22:92:3e:70:47:18:5f:a4:ae:38:6a:37:81: 1b:df:c7:8f:b2:aa:4a:d6:64:ee:a0:5f:c1:77:d3:ba:5c:85: ff:42:b1:ef:c5:6c:b4:e5:7a:b4:94:07:14:22:a8:1e:9d:dc: ee:d5:0c:9b:e7:f8:ea:65:63:59:13:60:bb:ac:8d:4d:4e:34: 7e:bc:31:7b:11:10:aa:f5:e6:8e:5c:c2:d3:4d:63:71:a0:1b: 0b:c5:60:42:ae:b6:2c:66:0d:37:d8:3e:4b:a0:c5:8a:b0:fe: 16:26:fa:d1:75:d7:de:fa:57:8b:1a:52:61:2c:ba:92:7c:60: 00:9f:b7:aa:9e:a0:9e:b4:96:6c:b1:db:e9:a5:4f:4d:d5:ca: 65:43:ab:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHO/EimHT7fUzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NTkyOGZiZjItODE4NS00MjEwLTkwMjUtNjU5OTU0NDA5MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c/sP790IeRqZsIsgzVGTlqGb2Uox8uVpadJ gZ2MmtWvpg/cN4IZNxZ6mBA3TQs/Yw18XqeO+kaSBmvh44HtrLWf1N3aluiiFkj1 Or3Ed98lYVUNUKyMY3mneOkatoIn4M2araob66FuevmfBG0N4csvvLpN3eJAYuCV xhsjTWLaue/YzQEf196Sk/UJAjtC07ewsGPVXj62eUF/7gC6EQxUbJNPAOcHE2YM u9HsxhUVzXAzifceuOFGem7DLALjlBWo6zFpmllkoKU6qEEaTPIvYWksc/gy25U3 8FJfvBjvYsVWAL5MKDG0wfzH5SHAGxCwlrKYvr28B2TuEBIX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1HKrUgPN7AVy2cWGTuXQ01EGq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvZGQzZjU2NzItNTZlMy0z MDhhLWE5NmYtNDAxNGE5NzgyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMCGqPJNEmYIg/goXR403zx65+6h2O8CBOHz8oJXos/PouKZ8ImtnSM 1vVEEskqnt/wk4920dm698f12rEPnH2j7m/9HP9pH6NkvCX5l/RVLO4R8a0Wu13X pbPqMQyuxuq75ojKTPd1vjU4DJIhmqgWIpI+cEcYX6SuOGo3gRvfx4+yqkrWZO6g X8F307pchf9Cse/FbLTlerSUBxQiqB6d3O7VDJvn+OplY1kTYLusjU1ONH68MXsR EKr15o5cwtNNY3GgGwvFYEKutixmDTfYPkugxYqw/hYm+tF11976V4saUmEsupJ8 YACft6qeoJ60lmyx2+mlT03VymVDq3o= -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:43 2025 by rpki-client