$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa File: 65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa (raw, json) Hash identifier: UWPYfrem91p0uE3Sx3tXmGy/PIpFkOYw8qQi5p5bE6Q= Subject key identifier: CF:68:A5:25:EE:E2:00:B9:E6:C8:F5:7A:B8:8F:50:64:75:23:74:C3 Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F4328584BBFA594AF9B2A83228FE07700 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 55034 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:94:af:9b:2a:83:22:8f:e0:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=79b12dc0-88f8-4850-9ada-c9232efda6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:c4:ee:4d:db:6d:23:cc:1a:45:af:7e:f3: 8e:2a:ad:44:74:0c:4f:e2:ca:d0:a9:e5:a2:34:aa: 16:38:95:14:e2:f4:70:fe:4c:8e:53:36:1f:72:a3: e2:f5:d3:0d:0c:9d:0b:8c:93:4f:3c:20:66:1b:55: 00:66:b1:fc:dd:04:03:10:78:9c:4d:0d:de:9a:db: 70:3c:7d:c6:44:99:33:69:c9:fb:86:11:f5:c9:af: 07:0b:44:88:22:5e:d5:e8:fb:c4:b9:f4:99:c6:0d: cf:9c:9b:6f:10:b1:cf:10:67:38:da:93:2a:ae:1a: 51:f7:46:41:39:0f:77:35:08:ba:af:85:c3:5e:15: e4:d6:e8:21:c2:1c:29:18:49:10:54:00:b6:8a:73: 4b:da:8c:b0:a5:37:69:e3:00:85:22:0b:0f:36:a6: 06:ee:7d:c0:ef:32:c2:67:0b:73:7c:77:2d:25:6f: 0e:fa:2d:ad:69:e0:ae:54:9d:28:1f:63:47:39:b8: cd:1a:4b:11:c2:24:6f:a8:8f:2a:d4:eb:1f:1f:ca: 64:f4:43:ab:3d:71:99:09:db:9f:39:27:5f:30:ef: ab:f0:ec:a3:cc:87:7f:25:4b:ee:b8:8a:54:79:e2: 0e:0a:8c:4a:55:91:28:7b:f9:07:c8:8b:4a:b2:5d: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:68:A5:25:EE:E2:00:B9:E6:C8:F5:7A:B8:8F:50:64:75:23:74:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/65c1aea1-c02b-3d72-b84f-6e726068e5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9b:0f:4f:30:54:15:d1:5d:6b:79:5e:00:c9:b2:9b:69:e5: d6:2c:cf:1e:b0:35:9d:cf:82:00:94:01:d6:5f:61:8f:1d:cd: 90:77:1e:dc:e4:32:9c:a4:e8:46:ea:5b:eb:e7:ac:0e:fe:d7: d9:cb:eb:2a:d5:e9:d8:70:f7:7a:17:e5:4b:d2:b1:88:ff:80: 89:ed:84:7e:04:43:bb:41:8c:15:5a:5a:1a:7c:7f:cc:ec:fb: 2c:89:c7:84:02:d4:e8:39:ed:1c:a4:6b:d7:47:72:ec:b8:d7: c0:06:9c:b5:cd:eb:0a:77:85:d9:49:d1:34:a9:c8:ad:16:ea: 5e:84:35:08:62:71:48:ba:f6:ef:04:e8:d3:1f:5f:d9:98:10: dc:2c:79:51:a1:0d:d8:6f:e7:77:8d:c5:c9:ff:f4:7d:78:6f: 7b:2b:de:a0:1e:08:5d:5f:47:bb:b4:7d:92:17:e0:0b:ea:fd: 92:3a:23:41:54:07:5c:a1:ce:77:6f:e0:dc:91:9d:23:0d:a5: 1e:f6:e3:f8:5e:67:62:86:3d:bc:5d:ed:ad:49:94:08:b1:e5: 1b:13:18:ae:03:b8:de:f7:d9:fa:79:88:17:db:a6:bd:95:06: 19:ee:19:60:c0:61:e3:9c:3b:88:59:cc:0e:df:12:4e:ef:f3: 1f:14:1c:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZSvmyqDIo/gdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NzliMTJkYzAtODhmOC00ODUwLTlhZGEtYzkyMzJlZmRhNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWXE7k3bbSPMGkWvfvOOKq1EdAxP4srQqeWi NKoWOJUU4vRw/kyOUzYfcqPi9dMNDJ0LjJNPPCBmG1UAZrH83QQDEHicTQ3emttw PH3GRJkzacn7hhH1ya8HC0SIIl7V6PvEufSZxg3PnJtvELHPEGc42pMqrhpR90ZB OQ93NQi6r4XDXhXk1ughwhwpGEkQVAC2inNL2oywpTdp4wCFIgsPNqYG7n3A7zLC ZwtzfHctJW8O+i2taeCuVJ0oH2NHObjNGksRwiRvqI8q1OsfH8pk9EOrPXGZCduf OSdfMO+r8OyjzId/JUvuuIpUeeIOCoxKVZEoe/kHyItKsl0PTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9opSXu4gC55sj1eriPUGR1I3TDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvNjVjMWFlYTEtYzAyYi0z ZDcyLWI4NGYtNmU3MjYwNjhlNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqbD08wVBXRXWt5XgDJsptp5dYszx6wNZ3PggCUAdZfYY8dzZB3Htzk Mpyk6EbqW+vnrA7+19nL6yrV6dhw93oX5UvSsYj/gInthH4EQ7tBjBVaWhp8f8zs +yyJx4QC1Og57Ryka9dHcuy418AGnLXN6wp3hdlJ0TSpyK0W6l6ENQhicUi69u8E 6NMfX9mYENwseVGhDdhv53eNxcn/9H14b3sr3qAeCF1fR7u0fZIX4Avq/ZI6I0FU B1yhzndv4NyRnSMNpR724/heZ2KGPbxd7a1JlAix5RsTGK4DuN732fp5iBfbpr2V BhnuGWDAYeOcO4hZzA7fEk7v8x8UHB4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:12 2025 by rpki-client