$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa File: 9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa (raw, json) Hash identifier: Bq8JHANoMBFss0G1GpVgideozT5by/feYI0yLnQxsAY= Subject key identifier: 6C:87:38:81:E4:77:AE:99:72:9A:33:82:F2:39:CA:39:87:EF:55:BC Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584BA0D24DD61A8406B63F9E2E80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 21766 IP address blocks: 192.131.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4d:d6:1a:84:06:b6:3f:9e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=eccd3dd0-a4a0-4a03-b130-72167aab80b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:a6:fd:5a:dc:96:b8:bc:9a:30:34:16:b4: 30:1d:13:ef:f8:f3:c1:14:64:9a:33:66:d2:ba:56: dd:79:e1:f2:49:ba:7d:4c:dd:39:95:2f:6b:bc:19: e8:59:99:6d:8f:52:b8:bf:ba:15:29:b0:a7:87:c5: 0d:2d:63:81:c7:0c:20:f5:6d:f6:81:60:35:e5:e6: c7:73:3e:2f:46:6f:27:67:ed:47:9f:c3:3d:f9:5b: 21:13:1e:96:6b:5a:ab:61:c7:f2:5d:c8:01:ec:52: dc:a7:75:a7:a4:64:71:d9:82:5e:53:ff:bd:38:17: dd:10:56:5a:83:50:8a:ce:77:61:8e:ad:65:ee:41: 17:6b:7b:c6:08:58:ac:dc:14:5a:8c:49:69:cf:84: f6:b9:16:5f:cc:ce:10:7c:0c:42:da:3e:98:1c:03: 14:4f:ba:f1:7d:f0:6d:ef:d1:58:7b:5d:f4:7d:76: 22:91:cc:2f:90:9f:36:13:62:4e:3d:4f:d5:90:52: 07:02:2c:80:42:f5:68:5d:75:4d:d4:7f:6b:60:ca: bd:ad:7b:e3:29:49:6b:b8:ba:1c:a0:8d:32:80:78: fb:69:9b:e1:d6:23:fc:3f:de:45:18:e0:28:4f:80: 18:e5:12:7c:0f:62:da:13:e7:03:d4:8c:c5:6f:4b: b4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:87:38:81:E4:77:AE:99:72:9A:33:82:F2:39:CA:39:87:EF:55:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 192.131.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:61:34:7c:34:36:ae:1d:9f:64:eb:9e:60:5d:98:0c:0a:01: 35:9c:ba:f3:bf:bb:45:61:d4:b0:cb:cd:98:5a:da:51:1a:3d: cf:c6:04:29:72:bd:3a:a7:d8:3f:48:2a:35:8a:c1:cb:9c:fa: 25:5f:2e:0d:6e:b5:26:7e:8d:03:1f:f7:0b:84:65:5d:82:8e: cb:fb:a0:b1:81:d3:e2:2f:75:73:58:61:fa:2d:a1:22:cd:b7: d9:02:5a:7e:b4:66:de:0f:4a:f1:fa:74:ef:27:4f:d3:43:b8: 8c:de:71:fa:d3:0b:32:78:51:69:fa:03:bc:52:3a:7d:95:ec: 45:98:bc:7f:b6:63:98:7e:59:b8:85:b5:41:91:b4:61:99:ea: de:17:d8:63:9c:71:f3:5d:31:05:fd:0b:ab:a6:61:25:17:a3: 81:99:36:42:ff:e3:aa:5c:43:92:c8:67:6d:e4:10:56:c1:f6: 6c:5d:43:df:a9:bd:97:b5:28:a1:c2:b2:c2:26:85:d9:43:2f: a6:3c:25:fc:21:5f:31:5f:e1:dd:f3:3d:cd:a8:50:c0:6b:16: 1a:b7:15:8a:a0:81:af:38:93:bb:e1:01:fb:f5:5c:ba:78:56: 4a:cb:d6:7e:48:fe:b1:bd:86:05:e3:4f:0f:86:e0:3e:eb:f8: 30:e3:eb:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k3WGoQGtj+eLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZWNjZDNkZDAtYTRhMC00YTAzLWIxMzAtNzIxNjdhYWI4MGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVOm/Vrclri8mjA0FrQwHRPv+PPBFGSaM2bS ulbdeeHySbp9TN05lS9rvBnoWZltj1K4v7oVKbCnh8UNLWOBxwwg9W32gWA15ebH cz4vRm8nZ+1Hn8M9+VshEx6Wa1qrYcfyXcgB7FLcp3WnpGRx2YJeU/+9OBfdEFZa g1CKzndhjq1l7kEXa3vGCFis3BRajElpz4T2uRZfzM4QfAxC2j6YHAMUT7rxffBt 79FYe130fXYikcwvkJ82E2JOPU/VkFIHAiyAQvVoXXVN1H9rYMq9rXvjKUlruLoc oI0ygHj7aZvh1iP8P95FGOAoT4AY5RJ8D2LaE+cD1IzFb0u0FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyHOIHkd66ZcpozgvI5yjmH71W8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvOWJmNGE4ZTAtNzVmMi0z ZWZjLWFiNzQtNjUzYTI0ZDhiYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwIM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZhNHw0Nq4dn2TrnmBdmAwKATWcuvO/u0Vh1LDLzZha2lEaPc/GBCly vTqn2D9IKjWKwcuc+iVfLg1utSZ+jQMf9wuEZV2Cjsv7oLGB0+IvdXNYYfotoSLN t9kCWn60Zt4PSvH6dO8nT9NDuIzecfrTCzJ4UWn6A7xSOn2V7EWYvH+2Y5h+WbiF tUGRtGGZ6t4X2GOccfNdMQX9C6umYSUXo4GZNkL/46pcQ5LIZ23kEFbB9mxdQ9+p vZe1KKHCssImhdlDL6Y8JfwhXzFf4d3zPc2oUMBrFhq3FYqgga84k7vhAfv1XLp4 VkrL1n5I/rG9hgXjTw+G4D7r+DDj6xs= -----END CERTIFICATE-----Generated at Wed Nov 5 23:01:58 2025 by rpki-client