$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa File: 718aca4e-36f9-388f-afe0-123ff07786c7.roa (raw, json) Hash identifier: K3IcOWPhIIw5yR+95DyFPW/gHz+Vpldgjsb6ERDNBec= Subject key identifier: 99:4E:F4:7C:F8:58:1A:77:D9:0C:4C:81:CD:15:34:AF:91:8E:D6:E9 Certificate issuer: /CN=4a669737-4387-4a5c-829a-5cf431c6469e Certificate serial: 010D0C9F4328584BA5023CAB59AF1694B62B7240 Authority key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 393453 IP address blocks: 192.138.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3c:ab:59:af:16:94:b6:2b:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a669737-4387-4a5c-829a-5cf431c6469e Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=67bed34f-c74d-4066-a37c-ff39992a8a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:01:6b:d6:94:03:b8:af:34:81:10:d8:a4: 59:2d:5a:4b:83:59:71:8d:e0:6e:cc:4b:25:83:ec: 04:4a:f6:26:e4:02:9b:24:f9:a6:ac:3c:e6:a1:66: d5:f3:8f:b4:21:ed:52:40:8b:a1:c1:99:f2:3d:7d: 8e:cf:9a:2f:98:75:98:70:78:31:d0:55:77:f2:93: e0:dc:c8:0d:f9:c7:b8:af:06:ba:a9:c0:8d:60:db: 39:3e:74:71:01:4e:99:8f:94:f1:d5:38:a4:28:54: 34:cc:ce:e2:b0:bf:8b:4c:33:3e:a8:54:ff:55:5a: c7:38:97:8c:83:bf:6f:fb:c0:54:66:ad:9d:fd:cf: c2:47:b9:c2:85:9e:a2:37:e7:b2:90:bd:4f:12:4b: a3:e1:25:91:2f:a5:41:23:5d:d6:de:e5:d9:92:36: e8:47:d7:9b:9c:f0:45:5b:13:75:2f:92:1f:f4:ad: c9:bc:24:da:8c:1f:79:c1:51:8b:42:d2:67:a0:8a: a7:65:85:ea:5e:2a:d8:5d:c9:52:d5:54:aa:ce:14: 02:cc:79:aa:00:f3:71:be:89:55:84:33:e4:02:34: 89:42:a0:8c:86:af:9e:54:47:2c:7f:b9:8b:3c:0b: cd:b5:46:01:1f:e2:8e:84:bc:22:8a:a4:6f:dd:6a: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:F4:7C:F8:58:1A:77:D9:0C:4C:81:CD:15:34:AF:91:8E:D6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl X509v3 Authority Key Identifier: keyid:C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer sbgp-ipAddrBlock: critical IPv4: 192.138.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:dc:e6:6b:65:c9:de:fc:6c:a9:d1:94:bc:4d:49:71:2e:e3: 1c:71:50:2b:55:2f:62:b9:c7:67:19:7f:25:00:73:89:4f:b0: 02:d1:0d:8f:ee:2e:c0:d4:dc:dd:d6:3c:af:67:30:6a:7d:d4: 45:31:af:ee:27:cd:ca:95:2f:dd:12:e5:c5:ea:9e:d3:d0:e3: 88:b0:f0:89:a0:68:75:a3:8b:91:a5:1d:f4:4f:ad:28:ad:41: e0:39:6b:ab:28:26:97:65:a5:6d:16:17:39:cc:36:6f:f8:eb: e6:be:1b:bb:d7:96:62:80:a7:04:d4:80:b7:5b:0e:fd:79:a7: b0:88:26:f5:69:aa:4c:3d:d1:c0:3d:b7:1e:1d:3c:d4:c8:90: be:0c:ed:9d:1d:bc:8b:ac:83:10:1c:92:95:78:ea:d4:50:84: 77:db:aa:11:b8:9a:f5:78:09:25:28:7f:63:6f:78:3f:ca:cb: 26:ae:45:6c:f3:d2:2b:86:f6:30:e8:43:ab:2e:bc:5e:06:72: c3:76:d2:c8:57:8b:2f:31:4b:4e:33:3d:be:69:18:c7:ab:51: 11:ac:7c:86:85:ab:c6:7c:8f:2e:37:16:d4:68:cd:54:a7:1f: ee:22:f9:5a:72:af:d0:69:f6:39:46:88:49:45:98:1d:f2:30: 43:46:82:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjyrWa8WlLYrckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2Njk3MzctNDM4Ny00YTVjLTgyOWEtNWNmNDMxYzY0 NjllMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NjdiZWQzNGYtYzc0ZC00MDY2LWEzN2MtZmYzOTk5MmE4YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWsBa9aUA7ivNIEQ2KRZLVpLg1lxjeBuzEsl g+wESvYm5AKbJPmmrDzmoWbV84+0Ie1SQIuhwZnyPX2Oz5ovmHWYcHgx0FV38pPg 3MgN+ce4rwa6qcCNYNs5PnRxAU6Zj5Tx1TikKFQ0zM7isL+LTDM+qFT/VVrHOJeM g79v+8BUZq2d/c/CR7nChZ6iN+eykL1PEkuj4SWRL6VBI13W3uXZkjboR9ebnPBF WxN1L5If9K3JvCTajB95wVGLQtJnoIqnZYXqXirYXclS1VSqzhQCzHmqAPNxvolV hDPkAjSJQqCMhq+eVEcsf7mLPAvNtUYBH+KOhLwiiqRv3WoS3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlO9Hz4WBp32QxMgc0VNK+RjtbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80YTY2 OTczNy00Mzg3LTRhNWMtODI5YS01Y2Y0MzFjNjQ2OWUvNzE4YWNhNGUtMzZmOS0z ODhmLWFmZTAtMTIzZmYwNzc4NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGE2Njk3MzctNDM4Ny00YTVjLTgy OWEtNWNmNDMxYzY0NjllLzRhNjY5NzM3LTQzODctNGE1Yy04MjlhLTVjZjQzMWM2 NDY5ZS5jcmwwHwYDVR0jBBgwFoAUwSEc+7d8t5PVFOi4il4KliXCqKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80YTY2OTczNy00Mzg3LTRhNWMtODI5YS01Y2Y0 MzFjNjQ2OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLc5mtlyd78bKnRlLxNSXEu4xxxUCtVL2K5x2cZfyUAc4lPsALRDY/u LsDU3N3WPK9nMGp91EUxr+4nzcqVL90S5cXqntPQ44iw8ImgaHWji5GlHfRPrSit QeA5a6soJpdlpW0WFznMNm/46+a+G7vXlmKApwTUgLdbDv15p7CIJvVpqkw90cA9 tx4dPNTIkL4M7Z0dvIusgxAckpV46tRQhHfbqhG4mvV4CSUof2NveD/KyyauRWzz 0iuG9jDoQ6suvF4GcsN20shXiy8xS04zPb5pGMerURGsfIaFq8Z8jy43FtRozVSn H+4i+Vpyr9Bp9jlGiElFmB3yMENGgqY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:26 2025 by rpki-client