$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa File: 844b98f5-e6cd-370e-ac40-d2d72926edf0.roa (raw, json) Hash identifier: PUmV9hNfCMWOVl5Niw6JUhs/VwSMfNle1j+VLD88rOA= Subject key identifier: DC:21:32:EE:F1:1A:26:81:5A:4E:34:05:81:05:C8:79:98:DA:51:95 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584BBFA5BB5F3487B8B21454B3D0 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 5739 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:bb:5f:34:87:b8:b2:14:54:b3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=7c4648a4-60f0-4a4c-8663-f2cfa809701e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:bb:46:f3:1c:39:1a:f7:51:d4:7f:2e:70: 21:7b:a8:b9:96:7e:9d:38:71:45:b5:c9:7d:41:cc: fb:d7:9c:0c:44:34:86:8c:87:57:3a:78:39:9a:f3: 71:f9:5b:d2:4d:8e:71:22:0b:ef:47:f0:be:a4:45: 56:e9:e2:a3:d9:5c:08:7b:26:9a:0d:0a:5a:c7:75: 91:b5:56:3f:6c:60:78:b6:84:f9:f9:98:fc:d0:38: 46:06:2c:fd:9f:da:23:ef:0a:de:67:95:25:27:68: ef:89:47:17:62:3e:53:ce:4b:3c:f7:50:a8:94:43: 9c:2f:bf:7e:8a:ca:bb:8d:1d:61:b7:67:e9:94:5a: a5:6e:e5:f0:98:d8:e7:3d:d6:b7:83:16:55:0f:47: 7a:09:ec:5a:0a:b7:ba:7e:84:00:e3:f1:c6:67:4b: a9:3d:d5:0f:f0:ec:ae:9c:d9:fe:98:b9:29:a4:9c: 71:1f:ad:18:50:6d:df:3f:0f:f2:8b:ea:3e:3f:c0: 06:a7:80:92:2f:5d:f4:e5:b9:61:f5:30:8f:79:1d: ad:32:1c:e0:d9:f0:27:95:a9:3c:01:3f:4e:f5:b1: e3:59:be:95:45:16:33:9d:a2:6e:24:05:94:a7:38: ea:6e:a3:2d:46:1b:d1:d7:e1:c9:2c:36:1a:75:4e: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:32:EE:F1:1A:26:81:5A:4E:34:05:81:05:C8:79:98:DA:51:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/844b98f5-e6cd-370e-ac40-d2d72926edf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c5:5f:8e:ea:2f:79:99:d3:6c:ba:70:f5:af:f5:01:45:06: 8b:54:0f:fb:9b:ea:c6:ce:29:13:01:17:3d:0f:d1:d0:f4:83: 5e:d4:c7:64:05:b0:1e:a7:68:dd:50:20:c2:16:b4:9d:e7:47: 4d:2a:a8:22:b4:2b:f1:74:aa:ff:5b:2f:c3:bb:7a:ce:28:8f: b7:db:41:d2:a1:19:2b:01:7f:a7:da:42:d3:67:3d:7f:bd:4e: ad:85:96:a4:e1:e9:73:ac:a5:45:1f:3a:f8:d9:2e:63:41:8e: fa:1b:91:9c:a2:fd:ef:49:13:d2:a0:c4:17:cb:c7:37:6c:ac: 10:ab:46:4b:4a:b8:48:d8:8b:d1:03:31:9b:eb:4f:ae:de:8a: 39:43:5c:7b:82:fd:04:72:10:df:4f:be:ad:9c:d0:2e:f3:7b: 45:3c:7b:cd:67:61:2d:4a:46:ef:48:21:6c:5b:7f:12:2c:a1: 84:1c:08:51:75:ca:c9:5b:92:96:fd:01:c9:78:d4:10:ac:da: e3:8a:07:b9:17:dc:0f:ca:7a:53:46:e2:ca:bb:af:a1:19:56: 78:4d:5c:36:20:a0:54:a3:3d:e1:62:9e:31:63:6e:4d:3f:52: c7:81:f8:6d:02:55:03:f4:0e:d2:26:45:f5:27:df:04:52:8b: 09:b0:59:0c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu/pbtfNIe4shRUs9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk N2M0NjQ4YTQtNjBmMC00YTRjLTg2NjMtZjJjZmE4MDk3MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4y7RvMcORr3UdR/LnAhe6i5ln6dOHFFtcl9 Qcz715wMRDSGjIdXOng5mvNx+VvSTY5xIgvvR/C+pEVW6eKj2VwIeyaaDQpax3WR tVY/bGB4toT5+Zj80DhGBiz9n9oj7wreZ5UlJ2jviUcXYj5Tzks891ColEOcL79+ isq7jR1ht2fplFqlbuXwmNjnPda3gxZVD0d6CexaCre6foQA4/HGZ0upPdUP8Oyu nNn+mLkppJxxH60YUG3fPw/yi+o+P8AGp4CSL1305blh9TCPeR2tMhzg2fAnlak8 AT9O9bHjWb6VRRYznaJuJAWUpzjqbqMtRhvR1+HJLDYadU5lVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNwhMu7xGiaBWk40BYEFyHmY2lGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODQ0Yjk4ZjUtZTZjZC0z NzBlLWFjNDAtZDJkNzI5MjZlZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC7FX47qL3mZ02y6cPWv9QFFBotUD/ub6sbOKRMBFz0P0dD0 g17Ux2QFsB6naN1QIMIWtJ3nR00qqCK0K/F0qv9bL8O7es4oj7fbQdKhGSsBf6fa QtNnPX+9Tq2FlqTh6XOspUUfOvjZLmNBjvobkZyi/e9JE9KgxBfLxzdsrBCrRktK uEjYi9EDMZvrT67eijlDXHuC/QRyEN9Pvq2c0C7ze0U8e81nYS1KRu9IIWxbfxIs oYQcCFF1yslbkpb9Acl41BCs2uOKB7kX3A/KelNG4sq7r6EZVnhNXDYgoFSjPeFi njFjbk0/UseB+G0CVQP0DtImRfUn3wRSiwmwWQw= -----END CERTIFICATE-----Generated at Thu Nov 6 06:09:54 2025 by rpki-client