$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/d656a100-7f34-33f0-80bf-33ba4080253f.roa File: d656a100-7f34-33f0-80bf-33ba4080253f.roa (raw, json) Hash identifier: 9CXlRlADuSvL/dMs2cujYpYByACvsq5EPW+kadkkSN4= Subject key identifier: 63:A7:8E:BB:92:BB:53:3C:45:02:17:AF:AD:E2:08:C2:0C:E2:B0:04 Certificate issuer: /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Certificate serial: 010D0C9F4328584B434C5A072C8362D9C0E1E280 Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/d656a100-7f34-33f0-80bf-33ba4080253f.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 399331 IP address blocks: 192.135.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5a:07:2c:83:62:d9:c0:e1:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6d956e5f-0eba-4dd7-a48f-056b159a8cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2b:fa:07:d9:9d:e8:27:6a:99:4e:9a:41:69: 06:df:a3:1e:60:55:7a:68:e7:e8:60:65:ed:72:a4: d4:49:10:03:aa:6c:c5:dc:df:c0:5c:de:f3:bd:bf: be:0c:f7:88:60:21:c0:57:7f:69:98:37:5a:0e:f3: 95:88:4f:c9:cc:c6:af:b8:9b:0b:37:1a:48:99:00: 75:31:7a:f7:50:86:1f:55:cd:2c:78:d4:ef:eb:28: 9b:8d:29:73:0d:76:dd:c9:01:45:52:a4:1c:47:66: 5d:21:92:6c:f6:42:d2:cb:8e:6b:8b:21:79:97:cf: 7f:e0:0a:32:87:87:36:18:01:b8:31:46:50:81:81: 2c:81:88:f6:65:b0:bc:73:37:41:7c:32:dc:2d:8e: cf:f1:c3:11:61:6d:e8:ab:0b:6b:7a:df:27:dd:df: 55:c4:bc:35:fb:0d:b4:ad:1c:cf:0a:7a:11:94:ea: c0:2a:e3:83:15:22:58:fb:88:05:b0:62:26:be:41: 64:81:03:c9:53:2e:2b:5d:56:f0:10:f0:ef:dd:ec: 10:63:ed:83:26:7a:fb:25:2e:64:d6:c2:db:94:57: 57:9d:ec:b7:6c:f2:3a:21:cb:f5:50:73:91:5d:19: 46:e6:b5:23:4f:56:db:87:26:3c:7d:22:a6:ba:df: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A7:8E:BB:92:BB:53:3C:45:02:17:AF:AD:E2:08:C2:0C:E2:B0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/d656a100-7f34-33f0-80bf-33ba4080253f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl X509v3 Authority Key Identifier: keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer sbgp-ipAddrBlock: critical IPv4: 192.135.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8e:96:d5:92:27:26:c4:40:d0:cb:2f:58:d6:b7:b1:1e:89: a8:d9:a0:b7:3e:f7:22:aa:93:c0:9a:d4:f9:af:0e:45:cf:3b: bf:9f:e4:98:8a:9d:6b:e0:e2:67:25:0c:cc:ff:9f:4a:ff:d8: 48:16:68:40:9a:5e:86:bb:13:ba:00:91:b1:a8:cd:4a:c0:3f: 17:76:f7:8b:31:10:6a:71:d8:c2:3a:f7:74:b8:c4:af:2a:c3: f1:32:02:58:b8:fa:e7:ef:1d:02:10:c5:84:d7:9b:8e:2a:d7: b0:42:b4:16:b5:87:cc:98:f6:e6:18:f9:ef:70:e8:e5:01:46: e7:22:8d:2a:b2:11:ce:39:21:79:2d:9f:5e:da:31:c9:ea:bc: db:06:1b:e7:9c:66:ea:6a:c1:d3:6f:20:59:ec:f2:a3:4f:c0: fd:a9:3c:7a:25:dc:f0:1d:1b:c7:eb:e5:36:0c:78:b7:2e:be: 84:f3:65:0c:c1:68:e4:d1:b1:44:c5:61:8b:f1:a5:80:27:fd: 02:54:8c:ec:2c:7f:ec:d5:b7:79:51:b0:b6:49:76:6e:dd:6c: 61:22:83:20:dd:80:15:4b:20:2c:32:70:06:e0:a6:13:1c:87: c8:e8:73:fe:0e:29:17:ec:d9:5d:33:88:bd:b4:47:77:65:d2: a2:cc:8b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFoHLINi2cDh4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx YWU4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NmQ5NTZlNWYtMGViYS00ZGQ3LWE0OGYtMDU2YjE1OWE4Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiv6B9md6CdqmU6aQWkG36MeYFV6aOfoYGXt cqTUSRADqmzF3N/AXN7zvb++DPeIYCHAV39pmDdaDvOViE/JzMavuJsLNxpImQB1 MXr3UIYfVc0seNTv6yibjSlzDXbdyQFFUqQcR2ZdIZJs9kLSy45riyF5l89/4Aoy h4c2GAG4MUZQgYEsgYj2ZbC8czdBfDLcLY7P8cMRYW3oqwtret8n3d9VxLw1+w20 rRzPCnoRlOrAKuODFSJY+4gFsGImvkFkgQPJUy4rXVbwEPDv3ewQY+2DJnr7JS5k 1sLblFdXney3bPI6Icv1UHORXRlG5rUjT1bbhyY8fSKmut9scQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOnjruSu1M8RQIXr63iCMIM4rAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvZDY1NmExMDAtN2YzNC0z M2YwLTgwYmYtMzNiYTQwODAyNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3 MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5 YTExNzFhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOOltWSJybEQNDLL1jWt7EeiajZoLc+9yKqk8Ca1PmvDkXPO7+f5JiK nWvg4mclDMz/n0r/2EgWaECaXoa7E7oAkbGozUrAPxd294sxEGpx2MI693S4xK8q w/EyAli4+ufvHQIQxYTXm44q17BCtBa1h8yY9uYY+e9w6OUBRucijSqyEc45IXkt n17aMcnqvNsGG+ecZupqwdNvIFns8qNPwP2pPHol3PAdG8fr5TYMeLcuvoTzZQzB aOTRsUTFYYvxpYAn/QJUjOwsf+zVt3lRsLZJdm7dbGEigyDdgBVLICwycAbgphMc h8joc/4OKRfs2V0ziL20R3dl0qLMi9k= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:00 2025 by rpki-client