$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/be08875f-e705-3ff9-89b8-057bd7061382.roa File: be08875f-e705-3ff9-89b8-057bd7061382.roa (raw, json) Hash identifier: O/6CEQFLyEjUvSEY5qaGcjZvG9HbciNSbXun2S5t7kA= Subject key identifier: D2:94:25:05:53:59:73:52:2F:A9:D7:FC:4C:1D:65:29:99:67:25:F6 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584BABFD0A7A7A4C85047EB83BF6 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/be08875f-e705-3ff9-89b8-057bd7061382.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 160 IP address blocks: 192.170.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0a:7a:7a:4c:85:04:7e:b8:3b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=27f80825-50a9-4a7c-bc5d-9b0a137f068f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:a4:2e:14:43:3f:f0:7d:5b:a2:ff:e2:8d: b4:1c:d8:38:84:80:05:a6:a6:20:12:0d:e7:4a:d7: ee:a5:1e:99:97:4d:00:5b:5e:6e:95:59:e7:5a:c1: ba:98:f9:37:1b:0f:44:b5:44:e9:d7:4c:c0:72:6d: e9:9f:70:b4:9e:0b:da:c2:97:17:9d:48:cf:9e:2a: 41:91:99:bb:fb:e8:f7:a9:ab:51:79:4f:f6:76:bb: f7:16:97:46:c5:9f:ea:be:b9:f4:4c:54:9d:08:92: 8e:01:7b:24:7f:40:9e:8d:e7:a6:54:1a:f4:46:57: d7:df:a7:5b:74:e8:47:17:70:e8:53:d3:21:6c:39: 06:c7:4e:4d:64:ee:f8:fe:fa:3e:fb:fb:8e:7e:e2: 28:1c:52:c8:58:02:c2:2f:9e:28:6e:db:cf:b6:8f: ae:74:81:92:8b:bb:cb:9e:e1:ab:31:8a:46:18:a0: 6f:7b:75:35:c7:59:75:39:cd:1d:06:0e:13:25:c9: e9:03:c4:32:49:d7:d5:14:36:3e:2e:13:fe:fa:7e: 5a:e7:2e:5f:e1:8e:c3:13:35:ec:59:06:79:24:c4: 96:27:64:a3:59:52:36:90:d4:6e:15:73:e7:60:a4: 67:41:00:ef:2c:d6:b3:d5:2f:7c:dc:ac:e5:6b:3e: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:25:05:53:59:73:52:2F:A9:D7:FC:4C:1D:65:29:99:67:25:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/be08875f-e705-3ff9-89b8-057bd7061382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv4: 192.170.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:be:5a:1a:2a:9f:b0:70:1d:94:60:f6:40:66:c0:6d:0d:da: b4:40:49:06:59:ed:e4:33:0b:56:a8:5f:79:e0:a3:66:6c:37: f2:06:5a:dc:fc:8d:77:f7:e1:69:f8:cf:c0:bd:48:92:26:1c: d9:3c:86:2d:8d:05:34:bd:8f:41:3a:91:2f:07:f6:37:0f:ff: d1:76:82:ff:88:d4:99:57:3a:90:53:89:ae:a4:3b:38:86:53: b2:75:12:6a:3a:80:10:1d:36:06:2b:9e:10:f1:c2:32:08:75: 1d:2c:a1:89:40:02:2b:c6:4f:db:bd:40:38:48:61:31:80:56: 98:27:69:1a:73:61:ad:c7:8c:6a:4c:b9:0a:51:56:94:c1:7e: 04:75:db:56:bc:dc:fa:34:fe:cf:9d:a2:28:25:59:9a:b5:d7: 4e:17:01:b3:a6:39:b3:2e:04:81:ab:4b:a2:2e:63:c9:1d:d3: c9:d2:ae:74:e4:0b:73:9c:1d:84:46:77:fb:e8:46:53:71:a2: 0f:3d:f7:09:d6:5e:5b:f8:51:2d:24:00:b1:b4:5e:e5:6d:aa: ec:11:8a:dc:84:5e:c0:b4:83:1b:e6:1a:d7:c0:df:88:99:f8: e3:bd:88:ff:b6:42:5d:5a:1a:66:e7:d4:fe:57:14:8e:f1:27: 65:a2:5f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Qp6ekyFBH64O/YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjdmODA4MjUtNTBhOS00YTdjLWJjNWQtOWIwYTEzN2YwNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpGkLhRDP/B9W6L/4o20HNg4hIAFpqYgEg3n StfupR6Zl00AW15ulVnnWsG6mPk3Gw9EtUTp10zAcm3pn3C0ngvawpcXnUjPnipB kZm7++j3qatReU/2drv3FpdGxZ/qvrn0TFSdCJKOAXskf0CejeemVBr0RlfX36db dOhHF3DoU9MhbDkGx05NZO74/vo++/uOfuIoHFLIWALCL54obtvPto+udIGSi7vL nuGrMYpGGKBve3U1x1l1Oc0dBg4TJcnpA8QySdfVFDY+LhP++n5a5y5f4Y7DEzXs WQZ5JMSWJ2SjWVI2kNRuFXPnYKRnQQDvLNaz1S983Kzlaz68ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKUJQVTWXNSL6nX/EwdZSmZZyX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvYmUwODg3NWYtZTcwNS0z ZmY5LTg5YjgtMDU3YmQ3MDYxMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK+Whoqn7BwHZRg9kBmwG0N2rRASQZZ7eQzC1aoX3ngo2ZsN/IGWtz8 jXf34Wn4z8C9SJImHNk8hi2NBTS9j0E6kS8H9jcP/9F2gv+I1JlXOpBTia6kOziG U7J1Emo6gBAdNgYrnhDxwjIIdR0soYlAAivGT9u9QDhIYTGAVpgnaRpzYa3HjGpM uQpRVpTBfgR121a83Po0/s+doiglWZq1104XAbOmObMuBIGrS6IuY8kd08nSrnTk C3OcHYRGd/voRlNxog899wnWXlv4US0kALG0XuVtquwRityEXsC0gxvmGtfA34iZ +OO9iP+2Ql1aGmbn1P5XFI7xJ2WiX1A= -----END CERTIFICATE-----Generated at Wed Nov 5 09:02:59 2025 by rpki-client