$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa File: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (raw, json) Hash identifier: A0RYZf+MyknDafmpalwUpbS2682xPhUZpCHYBa8ODXA= Subject key identifier: DC:21:93:CB:E3:52:26:ED:A5:89:C0:2E:97:8D:1D:5D:B6:A8:4E:8E Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584AFC1BF4F5951D554456035280 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 192.64.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f4:f5:95:1d:55:44:56:03:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9be04766-03c4-4c3c-befa-e1bcb6365ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ca:0a:4e:53:15:8a:b2:30:e5:44:95:e0:86: 85:eb:0b:16:7b:f1:be:b4:a1:83:f6:fa:e7:48:67: 61:66:a2:e2:4e:b1:26:6f:91:62:69:18:f8:f6:ff: 91:1e:31:05:84:b7:f0:62:ff:f6:a1:e5:c9:d5:65: 90:03:bc:ba:65:a8:8d:48:ba:0d:46:f2:23:2f:5b: fc:33:18:af:03:d1:36:75:42:03:e1:d9:a7:27:c3: cf:43:2b:de:45:ff:92:c6:43:46:e5:87:dd:fd:9b: 7e:11:46:b0:68:f5:71:84:e1:b4:03:e1:90:43:f5: d6:53:83:48:62:8c:07:31:91:b3:30:5a:ed:18:dc: 91:ad:40:36:e4:e2:b7:f3:f1:cb:55:d0:a9:53:d6: 5f:27:9c:01:e0:a7:20:e6:c2:2a:13:1d:88:fb:6c: 32:58:5b:b8:0a:ee:b0:dc:e7:97:36:44:96:af:5d: 58:61:9d:62:7a:6d:83:70:78:43:3b:89:3c:ae:75: 4d:0b:b1:e5:cc:67:b1:34:eb:f6:77:78:1f:b5:a8: 71:0c:b9:6c:d4:0f:ca:b6:f5:50:f5:4d:28:1f:17: e5:a9:fc:82:bd:3f:00:4d:e5:29:b5:22:29:e2:84: 7d:23:6d:a1:24:ff:bd:11:76:1c:04:7e:78:1f:da: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:93:CB:E3:52:26:ED:A5:89:C0:2E:97:8D:1D:5D:B6:A8:4E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c2:98:7c:45:7b:bc:be:ca:13:bb:e7:6c:33:f7:b6:e9:c6: b8:38:56:33:c8:97:cf:b5:63:34:60:ed:e9:e1:b3:69:2d:50: eb:5d:5e:40:c9:71:4a:2d:5d:e5:6a:4f:ad:fe:11:69:5d:ea: 5d:64:b7:9c:a7:dd:35:61:3b:d0:2c:a7:39:a9:21:54:75:cf: 78:ea:b4:ee:99:f0:a2:a6:69:0d:da:db:9d:a5:8b:f6:8f:14: 9f:3e:c9:8f:54:21:4f:9d:9e:9f:b6:7a:32:4d:72:b8:bb:f5: 78:d3:ea:73:29:34:79:41:0c:a6:e4:ce:da:ab:b2:05:c7:3f: 24:bf:07:2f:de:da:01:ec:2c:72:f8:82:c9:af:60:a8:fb:95: 27:33:dc:f9:71:6f:35:c7:03:73:74:76:26:91:a0:d1:a5:82: c7:8a:92:fe:45:9f:e0:45:13:f9:2c:1f:80:9f:b2:48:74:c5: 62:c4:63:8e:a3:63:7c:fb:98:9f:00:6c:ca:d4:f2:ca:ac:6a: 4e:a8:bb:b0:34:58:5c:5b:a5:e9:08:52:a9:0e:34:da:47:1d: c5:eb:af:42:98:98:82:99:a6:62:e0:3c:c8:2d:ce:92:ab:40: c0:2e:c9:3e:b8:8e:16:dc:82:6d:52:5c:9c:85:f1:26:10:ea: 84:40:1b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/T1lR1VRFYDUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWJlMDQ3NjYtMDNjNC00YzNjLWJlZmEtZTFiY2I2MzY1YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8oKTlMVirIw5USV4IaF6wsWe/G+tKGD9vrn SGdhZqLiTrEmb5FiaRj49v+RHjEFhLfwYv/2oeXJ1WWQA7y6ZaiNSLoNRvIjL1v8 MxivA9E2dUID4dmnJ8PPQyveRf+SxkNG5Yfd/Zt+EUawaPVxhOG0A+GQQ/XWU4NI YowHMZGzMFrtGNyRrUA25OK38/HLVdCpU9ZfJ5wB4Kcg5sIqEx2I+2wyWFu4Cu6w 3OeXNkSWr11YYZ1iem2DcHhDO4k8rnVNC7HlzGexNOv2d3gftahxDLls1A/KtvVQ 9U0oHxflqfyCvT8ATeUptSIp4oR9I22hJP+9EXYcBH54H9oc8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwhk8vjUibtpYnALpeNHV22qE6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvZDU5YjhjMTItYTFlNC0z OGJiLTg1N2QtZWE3OGVkM2EzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrCmHxFe7y+yhO752wz97bpxrg4VjPIl8+1YzRg7enhs2ktUOtdXkDJ cUotXeVqT63+EWld6l1kt5yn3TVhO9AspzmpIVR1z3jqtO6Z8KKmaQ3a252li/aP FJ8+yY9UIU+dnp+2ejJNcri79XjT6nMpNHlBDKbkztqrsgXHPyS/By/e2gHsLHL4 gsmvYKj7lScz3PlxbzXHA3N0diaRoNGlgseKkv5Fn+BFE/ksH4Cfskh0xWLEY46j Y3z7mJ8AbMrU8sqsak6ou7A0WFxbpekIUqkONNpHHcXrr0KYmIKZpmLgPMgtzpKr QMAuyT64jhbcgm1SXJyF8SYQ6oRAG6A= -----END CERTIFICATE-----Generated at Wed Nov 5 22:52:51 2025 by rpki-client