$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa File: ed81676c-13be-3e90-97d5-df858a13c13b.roa (raw, json) Hash identifier: RZGLhYqv7VXO/FrAdkP+QxfXrwsE93FFLhY6VR9IOMA= Subject key identifier: A0:6C:04:D3:DC:A1:C5:72:F2:4E:10:48:74:01:3B:F2:90:9F:ED:13 Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F4328584BBFA594C178CE20ED4926B0C0 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 32787 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:94:c1:78:ce:20:ed:49:26:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=2e67aef2-86de-48a8-b9ee-a78b826757fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:07:78:f2:c0:dd:7d:ab:fb:77:35:06:e0: 73:b3:38:61:0d:e2:59:cc:8c:26:5e:a2:77:89:7a: 37:d5:a3:f2:9b:5a:9e:35:7d:43:3b:78:15:69:19: cf:b8:14:c9:b4:ea:f6:81:d6:17:c5:79:e4:13:76: 16:35:2a:fb:e2:59:1d:15:98:7c:5d:87:1d:28:fe: 92:3e:8c:02:2c:9e:63:9f:47:c5:1f:24:1c:a7:28: a8:2a:c2:10:5f:98:8e:4d:e3:49:d8:71:e1:94:a8: ff:b9:12:65:fc:35:2c:14:48:89:32:30:9a:74:94: ce:ca:c7:7d:bc:59:e3:b6:f9:01:d1:18:cd:f9:51: 92:70:c5:a1:14:b5:54:15:c8:17:04:22:1b:39:ad: 4f:29:4d:ea:a4:bc:4a:a6:be:90:a4:34:ae:bd:23: ed:48:bc:e4:46:fc:db:e1:ba:c7:e6:b9:f8:4a:2e: 17:3f:8f:ff:94:27:f7:65:8d:e2:55:78:d8:2f:d0: 47:7e:5b:22:8b:18:71:5d:17:11:f8:b3:a5:9c:2d: 27:3a:57:42:50:4e:38:fe:83:b0:a1:19:5b:97:a0: f7:d3:16:10:3c:23:3b:b2:fd:81:09:96:7f:bc:20: 38:8f:04:11:ae:8e:c7:87:a2:a0:06:9d:b8:ca:1a: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6C:04:D3:DC:A1:C5:72:F2:4E:10:48:74:01:3B:F2:90:9F:ED:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:70:84:63:2a:04:2c:e8:a4:81:a7:13:84:dc:c3:99:6b:02: fb:01:3b:30:ab:fe:2a:b8:e0:09:f5:39:1f:12:6f:2a:38:f8: 65:02:b1:81:af:d0:1e:a9:1d:94:d5:1d:ee:93:ff:f4:4d:58: 63:77:4f:2b:2e:b5:07:97:1e:22:9a:8e:ac:af:a4:2e:f5:ec: fc:49:1d:8c:d3:ff:89:56:65:d6:e3:6b:0e:e6:3b:90:78:98: f2:0a:cf:d3:a0:21:7a:98:56:d8:2d:fd:d0:dc:c9:93:7f:e2: 3f:18:aa:88:3e:2b:78:2b:0a:64:b8:7f:e4:61:f5:c2:d5:77: 30:40:36:f9:fa:17:3f:96:ae:9f:b5:b3:ba:ce:8d:3d:01:86: e4:17:69:92:38:24:d2:22:c4:c8:cd:64:98:c8:de:df:75:b2: 54:88:8a:51:2b:bd:ce:35:8c:91:44:17:ed:be:bf:51:3c:61: 74:7c:4c:9c:57:f9:74:6f:c8:74:56:35:9f:6c:ed:b0:20:63: b8:b7:b8:8c:ed:5b:08:1a:4c:ac:30:1e:f0:ab:fc:91:af:bf: 61:7a:bd:51:d8:cc:00:e9:4e:51:a1:7a:60:bf:01:74:f9:e2: 78:cf:87:3d:e2:5c:20:c5:aa:51:37:f0:6c:1e:26:61:16:4f: 36:ce:51:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZTBeM4g7UkmsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MmU2N2FlZjItODZkZS00OGE4LWI5ZWUtYTc4YjgyNjc1N2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqUHePLA3X2r+3c1BuBzszhhDeJZzIwmXqJ3 iXo31aPym1qeNX1DO3gVaRnPuBTJtOr2gdYXxXnkE3YWNSr74lkdFZh8XYcdKP6S PowCLJ5jn0fFHyQcpyioKsIQX5iOTeNJ2HHhlKj/uRJl/DUsFEiJMjCadJTOysd9 vFnjtvkB0RjN+VGScMWhFLVUFcgXBCIbOa1PKU3qpLxKpr6QpDSuvSPtSLzkRvzb 4brH5rn4Si4XP4//lCf3ZY3iVXjYL9BHflsiixhxXRcR+LOlnC0nOldCUE44/oOw oRlbl6D30xYQPCM7sv2BCZZ/vCA4jwQRro7Hh6KgBp24yhorhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBsBNPcocVy8k4QSHQBO/KQn+0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvZWQ4MTY3NmMtMTNiZS0z ZTkwLTk3ZDUtZGY4NThhMTNjMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFwhGMqBCzopIGnE4Tcw5lrAvsBOzCr/iq44An1OR8Sbyo4+GUCsYGv 0B6pHZTVHe6T//RNWGN3TysutQeXHiKajqyvpC717PxJHYzT/4lWZdbjaw7mO5B4 mPIKz9OgIXqYVtgt/dDcyZN/4j8Yqog+K3grCmS4f+Rh9cLVdzBANvn6Fz+Wrp+1 s7rOjT0BhuQXaZI4JNIixMjNZJjI3t91slSIilErvc41jJFEF+2+v1E8YXR8TJxX +XRvyHRWNZ9s7bAgY7i3uIztWwgaTKwwHvCr/JGvv2F6vVHYzADpTlGhemC/AXT5 4njPhz3iXCDFqlE38GweJmEWTzbOUVc= -----END CERTIFICATE-----Generated at Tue Nov 4 17:14:21 2025 by rpki-client