$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa File: 4075d6f0-6747-3705-bcd1-320a5d5683a1.roa (raw, json) Hash identifier: mO6eTbK6x16nCybzKOs2Ol2LF4xsdEwDxmR1T4qzXKs= Subject key identifier: E9:E8:0E:E8:5C:A2:18:61:21:EB:C0:C2:C0:7F:28:7C:95:FD:94:FD Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584BB88D2E0C691DA83EAC8EF900 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 19637 IP address blocks: 192.19.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2e:0c:69:1d:a8:3e:ac:8e:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=2f7c362c-38ee-4d43-aaa0-340ce6d111cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:a1:fb:ee:1c:b4:6f:14:14:23:12:ba:5b: d8:b6:77:1e:21:20:6f:84:4f:9f:92:41:5f:48:2d: 20:e7:53:6d:9a:af:ec:48:8d:ec:9f:cd:ff:71:b2: 04:8b:0f:69:69:c7:ff:5f:f5:9f:fc:d6:e5:21:09: e2:4c:f9:ce:09:fa:64:31:c8:33:ab:73:ef:2a:87: 60:d9:81:9a:77:c2:79:7a:12:70:58:21:83:3f:63: 02:63:64:3d:4a:af:66:65:c9:1a:00:db:50:05:7e: ed:6b:8e:e8:45:35:0e:f5:3a:28:20:88:31:e4:2d: 44:63:e2:ba:63:8d:91:60:ba:0e:9c:c0:8b:e1:9a: 9b:b2:9a:ac:30:f0:1b:20:e5:0e:52:37:fb:ef:ca: f0:68:95:bc:bf:1a:46:7d:f6:b3:f3:12:c2:af:ea: 86:89:92:2e:e5:a0:b8:79:30:81:53:dc:0e:33:f1: b9:77:de:28:94:b4:0b:1f:df:c7:bd:71:8d:1e:9c: 3c:2f:85:ad:30:b5:0c:0c:20:c8:71:6f:25:2a:5b: f6:18:be:8b:f6:7c:03:22:ef:28:a5:09:46:a8:15: cb:f4:a9:6c:e6:b8:ba:5d:a2:b1:46:bd:a3:26:b5: 06:a3:60:df:07:47:f2:1d:fe:dd:99:49:33:48:fb: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E8:0E:E8:5C:A2:18:61:21:EB:C0:C2:C0:7F:28:7C:95:FD:94:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:36:ee:f0:29:e6:26:94:8d:24:b7:a3:a5:49:f0:2c:8b:b2: c4:6b:3e:bd:9a:76:48:18:ad:57:e1:98:cc:6a:5d:b2:0c:89: 0b:a4:48:9a:52:28:6e:66:47:6b:ce:8b:1f:f9:07:a5:c0:2b: 46:01:de:57:d5:ee:cb:8c:df:f6:e9:e4:25:a3:f4:77:e5:6e: 95:e3:f8:c7:ff:d1:9c:9b:f3:97:fa:22:dd:48:97:ad:21:cd: 94:07:5a:31:53:be:d5:b5:57:30:e0:69:22:62:ba:d7:55:37: cc:ed:8c:3f:74:27:08:e7:24:39:c6:31:de:db:32:fe:a5:fc: 01:20:37:f1:8c:68:f1:18:09:46:75:bb:ed:91:ea:9a:e5:92: d7:2a:ed:64:99:8b:ad:8e:3e:a7:07:03:25:f7:70:ce:23:4c: f6:8b:75:04:4c:c6:60:49:71:19:48:82:ec:06:b2:06:ce:a4: bf:e7:eb:3b:69:3e:9e:e2:d5:0c:c7:26:9e:df:93:75:95:d4: f2:e5:11:f8:70:0a:93:32:9c:ba:3b:28:fd:25:24:53:94:60: fa:97:06:00:23:07:d6:b2:9c:4b:4e:30:23:e7:03:66:fe:ac: 5a:22:07:e9:23:a0:58:4c:d0:10:66:40:c6:5f:70:9c:68:81: e7:65:48:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jS4MaR2oPqyO+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmY3YzM2MmMtMzhlZS00ZDQzLWFhYTAtMzQwY2U2ZDExMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e+h++4ctG8UFCMSulvYtnceISBvhE+fkkFf SC0g51Ntmq/sSI3sn83/cbIEiw9pacf/X/Wf/NblIQniTPnOCfpkMcgzq3PvKodg 2YGad8J5ehJwWCGDP2MCY2Q9Sq9mZckaANtQBX7ta47oRTUO9TooIIgx5C1EY+K6 Y42RYLoOnMCL4ZqbspqsMPAbIOUOUjf778rwaJW8vxpGffaz8xLCr+qGiZIu5aC4 eTCBU9wOM/G5d94olLQLH9/HvXGNHpw8L4WtMLUMDCDIcW8lKlv2GL6L9nwDIu8o pQlGqBXL9Kls5ri6XaKxRr2jJrUGo2DfB0fyHf7dmUkzSPu3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnoDuhcohhhIevAwsB/KHyV/ZT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNDA3NWQ2ZjAtNjc0Ny0z NzA1LWJjZDEtMzIwYTVkNTY4M2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBM7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY27vAp5iaUjSS3o6VJ8CyLssRrPr2adkgYrVfhmMxqXbIMiQukSJpS KG5mR2vOix/5B6XAK0YB3lfV7suM3/bp5CWj9HflbpXj+Mf/0Zyb85f6It1Il60h zZQHWjFTvtW1VzDgaSJiutdVN8ztjD90JwjnJDnGMd7bMv6l/AEgN/GMaPEYCUZ1 u+2R6prlktcq7WSZi62OPqcHAyX3cM4jTPaLdQRMxmBJcRlIguwGsgbOpL/n6ztp Pp7i1QzHJp7fk3WV1PLlEfhwCpMynLo7KP0lJFOUYPqXBgAjB9aynEtOMCPnA2b+ rFoiB+kjoFhM0BBmQMZfcJxogedlSDI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:31 2025 by rpki-client