$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa File: a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa (raw, json) Hash identifier: 4cfK+OTWkzLaIlwI91StcvzuykNyHVz670IFS1WDG9Q= Subject key identifier: B4:D6:FF:A9:8E:DE:95:AD:C7:90:D7:CC:C0:CE:67:0D:2C:B9:D5:7E Certificate issuer: /CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Certificate serial: 010D0C9F4328584BA0D2434020E2A1BBB8D816A0 Authority key identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 394193 IP address blocks: 192.84.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:43:40:20:e2:a1:bb:b8:d8:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0ee01f7a-dcb4-4a1c-8877-3fc989413505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:2a:48:d3:6f:ce:61:2b:47:cf:ad:09:e6: d4:6b:07:a6:f1:66:cb:31:5f:57:9c:6b:b9:d2:e9: 5a:1f:de:15:0e:5b:b6:81:2a:88:80:66:31:28:70: c0:8a:c5:54:e8:43:5e:86:e9:95:79:c6:6f:e2:28: 64:69:47:7c:48:9a:21:6c:4c:3d:f6:d5:e7:6e:87: 8d:32:9b:d5:4a:38:a3:80:7a:34:3c:52:8a:99:be: d3:f2:a0:32:eb:97:7e:31:2b:5f:f8:be:28:3e:e6: 5b:e1:aa:76:b2:6d:9e:73:8b:08:85:26:4d:14:6f: fa:66:ed:ee:13:c9:42:a2:f8:4a:89:24:52:19:e3: 04:55:a8:f0:bb:b4:a5:c5:b6:bb:31:75:f6:55:72: b1:62:fc:60:6b:e4:8e:12:b5:9e:28:44:7e:92:b2: 81:c6:ed:77:3d:b4:94:36:d2:59:b8:49:e0:18:37: da:a9:69:f3:5b:fa:3e:7d:31:cd:b5:7b:fd:96:3b: 47:de:6a:0b:0f:4a:4a:a5:68:87:91:93:fb:e3:9f: 3b:4c:1a:fe:a7:bb:2f:22:d0:be:dd:00:49:33:12: df:10:0a:e2:4c:44:4a:c1:b5:81:e4:98:5b:40:02: f8:8a:24:cb:c5:75:99:12:f3:b3:dd:6b:09:46:ae: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D6:FF:A9:8E:DE:95:AD:C7:90:D7:CC:C0:CE:67:0D:2C:B9:D5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl X509v3 Authority Key Identifier: keyid:5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer sbgp-ipAddrBlock: critical IPv4: 192.84.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ef:55:f9:68:76:41:07:2c:11:8e:af:55:74:43:c4:a4:a5: 85:b4:65:ad:23:82:36:0e:6f:39:99:f3:9c:64:0d:1f:1f:19: f0:f8:5f:a7:7c:2a:d2:6e:51:25:c5:8b:22:89:dc:f2:0b:96: 34:99:59:25:a5:a1:06:74:c8:54:8e:3b:6e:91:20:c0:75:63: 08:f3:cd:09:eb:43:41:35:36:99:ad:44:5e:6f:b0:c3:e4:d4: d0:9c:9b:69:3b:fe:27:69:5c:96:e7:db:eb:aa:e3:0a:87:85: 61:9b:95:d9:93:b0:4f:8e:90:db:53:2f:22:46:1f:26:dc:25: 93:63:63:bb:3c:d0:b1:9b:bc:6f:22:3b:95:30:7b:f8:9e:d5: 3f:1d:82:07:f3:05:4e:a9:4c:83:9c:3f:9b:f9:26:68:b4:d0: fe:9b:5d:76:72:3b:75:f6:c4:07:ac:1b:d7:de:69:c0:51:a7: 54:52:5f:67:93:c2:50:5a:f3:65:92:29:b0:74:c7:7e:5d:18: 20:1e:e0:9f:61:1a:31:5b:aa:7d:22:8a:d3:d0:06:92:4a:27: 3d:db:09:27:f4:aa:3f:77:a5:54:89:d2:27:88:50:21:e8:e6: 15:c4:39:0e:75:4f:e5:79:4f:ca:77:ca:d2:36:67:71:f0:d1: 58:a0:49:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kNAIOKhu7jYFqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg5YmRjYjktMjJmMC00NjI5LThlZDgtYmI0YTMzZjkx MDJiMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MGVlMDFmN2EtZGNiNC00YTFjLTg4NzctM2ZjOTg5NDEzNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbMqSNNvzmErR8+tCebUawem8WbLMV9XnGu5 0ulaH94VDlu2gSqIgGYxKHDAisVU6ENehumVecZv4ihkaUd8SJohbEw99tXnboeN MpvVSjijgHo0PFKKmb7T8qAy65d+MStf+L4oPuZb4ap2sm2ec4sIhSZNFG/6Zu3u E8lCovhKiSRSGeMEVajwu7Slxba7MXX2VXKxYvxga+SOErWeKER+krKBxu13PbSU NtJZuEngGDfaqWnzW/o+fTHNtXv9ljtH3moLD0pKpWiHkZP74587TBr+p7svItC+ 3QBJMxLfEAriTERKwbWB5JhbQAL4iiTLxXWZEvOz3WsJRq5GWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTW/6mO3pWtx5DXzMDOZw0sudV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iODli ZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRhMzNmOTEwMmIvYTRiZjAyMzEtZTllNi0z Y2I2LWE2NDItYTFkOWEzZDFlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjg5YmRjYjktMjJmMC00NjI5LThl ZDgtYmI0YTMzZjkxMDJiL2I4OWJkY2I5LTIyZjAtNDYyOS04ZWQ4LWJiNGEzM2Y5 MTAyYi5jcmwwHwYDVR0jBBgwFoAUXo/TiOwTh8r1s8zo08zfuxKRu+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iODliZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRh MzNmOTEwMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnvVflodkEHLBGOr1V0Q8SkpYW0Za0jgjYObzmZ85xkDR8fGfD4X6d8 KtJuUSXFiyKJ3PILljSZWSWloQZ0yFSOO26RIMB1YwjzzQnrQ0E1NpmtRF5vsMPk 1NCcm2k7/idpXJbn2+uq4wqHhWGbldmTsE+OkNtTLyJGHybcJZNjY7s80LGbvG8i O5Uwe/ie1T8dggfzBU6pTIOcP5v5Jmi00P6bXXZyO3X2xAesG9feacBRp1RSX2eT wlBa82WSKbB0x35dGCAe4J9hGjFbqn0iitPQBpJKJz3bCSf0qj93pVSJ0ieIUCHo 5hXEOQ51T+V5T8p3ytI2Z3Hw0VigSbU= -----END CERTIFICATE-----Generated at Wed Nov 5 17:42:14 2025 by rpki-client