$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa File: 3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa (raw, json) Hash identifier: 9U7nrGgVYohmjpn+qOVLpx/suMsAOwdYWZOJcISdn3U= Subject key identifier: 5F:B7:D0:52:A9:2A:34:A0:9F:BF:78:C2:9D:53:34:38:BA:FC:84:31 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584BBFA58F2D0C742A052BECC180 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:8f:2d:0c:74:2a:05:2b:ec:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=0065697a-367b-48b6-b3e6-dc0a712bcd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:3d:87:9a:b8:5f:bd:8c:8a:ce:fe:9b:26: 58:4e:c5:c3:41:ef:7d:a2:d7:ea:ef:82:90:62:86: f4:9e:81:3b:a8:d3:ec:8e:93:cf:8f:2e:03:08:21: 93:db:4e:af:16:5c:ee:eb:00:ac:4d:a5:85:c8:28: 6c:39:37:f7:5f:72:9f:df:13:6b:5e:b3:fd:4b:71: 48:76:7e:2c:58:f5:c2:83:0b:78:55:55:7c:6f:de: 13:df:e7:50:05:d1:97:55:d9:82:1f:c5:e5:3d:f7: b8:de:26:7f:6a:02:3f:1c:30:df:33:c1:15:4e:ad: 25:30:82:ae:2d:87:3c:76:8b:09:65:e4:4e:c9:14: 8b:04:84:08:96:c9:8b:f0:c8:a4:07:f0:0a:da:f4: cd:30:32:6a:d0:21:1e:94:28:3d:8f:e6:ab:e3:4e: e6:b6:4b:b4:55:f3:c1:7e:8f:3f:4d:4e:65:7e:72: 6d:15:30:1e:70:9d:be:92:cc:00:6a:53:1f:8b:c7: 00:80:06:b6:3e:20:a7:57:ee:eb:89:a2:14:d7:1c: 6c:f9:50:ac:89:64:83:9c:9c:99:1c:86:76:21:49: 6e:6f:b1:3e:90:18:8d:1a:c4:b0:41:5d:0c:18:d0: f5:11:b5:4f:57:ae:57:c0:ca:94:6b:57:0c:77:c5: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B7:D0:52:A9:2A:34:A0:9F:BF:78:C2:9D:53:34:38:BA:FC:84:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:57:5b:7b:bc:f5:d6:40:92:64:5a:9a:be:e7:0c:a5:fd:27: 72:6b:f5:7c:94:61:1e:82:25:35:51:6d:b6:d0:d9:de:0e:04: d2:4a:e6:83:5d:d9:94:de:ff:6f:94:52:26:8d:d2:54:30:5b: d6:9b:b2:6c:ac:fa:c0:54:72:a3:48:fc:0e:22:4c:cc:2c:50: f4:aa:0b:de:56:9a:ae:14:f6:6d:f0:f4:11:4e:bb:94:2f:64: 0a:8a:d3:46:07:4c:39:35:5d:6d:f2:ce:ac:84:d9:02:03:ca: 4d:b9:d0:4d:32:ba:86:9d:ce:5b:41:14:08:79:fe:14:0a:fb: a0:62:8d:15:b4:e8:b7:f5:b8:a6:0e:51:88:dc:b5:f1:c4:11: 68:f8:37:c8:08:02:c6:7e:05:4a:93:72:d4:cf:6b:4f:b5:a8: ce:ab:69:c3:62:1d:9a:7d:75:83:33:b4:72:41:f8:7a:8b:9f: c1:0b:a9:90:f8:27:e9:45:75:60:a0:79:9e:fc:a5:53:a0:71: a9:89:7c:7b:41:2d:37:72:de:6d:4a:48:87:c6:13:2f:65:da: 5e:63:d4:15:83:dd:3f:96:76:43:eb:7c:15:26:99:92:e8:28: fc:d5:83:a6:4c:86:fd:c4:0a:a3:6a:da:cb:27:b5:dd:48:ca: 97:6a:c9:69 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu/pY8tDHQqBSvswYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDA2NTY5N2EtMzY3Yi00OGI2LWIzZTYtZGMwYTcxMmJjZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvE9h5q4X72Mis7+myZYTsXDQe99otfq74KQ Yob0noE7qNPsjpPPjy4DCCGT206vFlzu6wCsTaWFyChsOTf3X3Kf3xNrXrP9S3FI dn4sWPXCgwt4VVV8b94T3+dQBdGXVdmCH8XlPfe43iZ/agI/HDDfM8EVTq0lMIKu LYc8dosJZeROyRSLBIQIlsmL8MikB/AK2vTNMDJq0CEelCg9j+ar407mtku0VfPB fo8/TU5lfnJtFTAecJ2+kswAalMfi8cAgAa2PiCnV+7riaIU1xxs+VCsiWSDnJyZ HIZ2IUlub7E+kBiNGsSwQV0MGND1EbVPV65XwMqUa1cMd8UAAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF+30FKpKjSgn794wp1TNDi6/IQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvM2M4NTkxOGEtMmJhZi0z ZmY5LTg1NmMtNGY3NjY2YzQwZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEhXW3u89dZAkmRamr7nDKX9J3Jr9XyUYR6CJTVRbbbQ2d4O BNJK5oNd2ZTe/2+UUiaN0lQwW9absmys+sBUcqNI/A4iTMwsUPSqC95Wmq4U9m3w 9BFOu5QvZAqK00YHTDk1XW3yzqyE2QIDyk250E0yuoadzltBFAh5/hQK+6BijRW0 6Lf1uKYOUYjctfHEEWj4N8gIAsZ+BUqTctTPa0+1qM6racNiHZp9dYMztHJB+HqL n8ELqZD4J+lFdWCgeZ78pVOgcamJfHtBLTdy3m1KSIfGEy9l2l5j1BWD3T+WdkPr fBUmmZLoKPzVg6ZMhv3ECqNq2ssntd1IypdqyWk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:39 2025 by rpki-client