$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8/6786a223-60cc-3ab6-9a95-e43a84806fb3.roa File: 6786a223-60cc-3ab6-9a95-e43a84806fb3.roa (raw, json) Hash identifier: av16mgcED1iUvCdNYv5V8hURhzLbpiBWXCvGB/yZVGs= Subject key identifier: 67:C9:35:3F:B9:C6:13:46:AE:ED:B1:5A:9E:4F:CD:BC:9F:7A:26:E2 Certificate issuer: /CN=ec979aec-0467-4daa-a91a-af19ccde04e8 Certificate serial: 010D0C9F4328584B5E0104BA50F477F6067EF780 Authority key identifier: DE:42:50:39:67:D5:6F:5E:A0:96:BD:B3:8E:F0:35:AE:1E:0D:F5:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8/6786a223-60cc-3ab6-9a95-e43a84806fb3.roa Signing time: Tue 30 Sep 2025 14:35:44 +0000 ROA not before: Tue 30 Sep 2025 14:35:44 +0000 ROA not after: Mon 29 Dec 2025 15:35:44 +0000 asID: 19366 IP address blocks: 192.188.110.0/24 maxlen: 24 192.190.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8/ec979aec-0467-4daa-a91a-af19ccde04e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8/ec979aec-0467-4daa-a91a-af19ccde04e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:01:04:ba:50:f4:77:f6:06:7e:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec979aec-0467-4daa-a91a-af19ccde04e8 Validity Not Before: Sep 30 14:35:44 2025 GMT Not After : Dec 29 15:35:44 2025 GMT Subject: CN=cfafecf1-3512-42b4-9c27-d843cdfa9b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:93:d9:e5:58:70:3e:c8:49:5c:4a:f6:84:02: b7:c3:f6:a8:25:d5:89:86:36:38:b8:91:18:55:0f: ff:0d:c9:9f:de:e9:e6:c3:58:8b:7e:40:ed:9e:c0: ab:8b:b3:37:f1:40:aa:30:02:c1:53:19:11:e7:d6: ef:3e:3b:e9:40:18:d4:fb:38:5f:17:88:3f:51:ee: 68:6d:ab:fd:ac:da:2e:62:50:03:07:7e:0e:25:c6: 6a:72:a4:89:0c:ba:c5:12:7e:e2:3d:5d:79:36:58: b0:33:35:61:55:6b:e2:99:23:45:0c:82:a6:14:43: 31:92:bc:5c:74:ed:43:86:f1:cc:b8:8c:e5:8a:18: 87:44:db:ce:e8:81:3c:b6:bb:8c:49:db:b9:5e:99: 42:6c:3f:d8:89:0f:f8:04:7b:d6:c1:64:a5:5e:01: 06:9a:4d:eb:ed:2b:bc:80:e1:95:f0:71:87:9c:fa: 8c:54:c3:33:68:fb:a5:20:01:a2:6f:47:bb:2f:4a: c1:5d:2f:5e:bb:d7:f5:4a:02:d0:13:3b:61:1d:82: 3c:3c:e4:ad:ac:7d:c7:c9:0c:dd:54:a7:ed:be:e3: 25:2a:d0:e7:1e:4a:e8:97:ed:b3:fb:d1:9f:41:4d: 64:20:85:98:68:c1:1c:da:bc:d9:c3:af:70:3b:eb: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C9:35:3F:B9:C6:13:46:AE:ED:B1:5A:9E:4F:CD:BC:9F:7A:26:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8/6786a223-60cc-3ab6-9a95-e43a84806fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8/ec979aec-0467-4daa-a91a-af19ccde04e8.crl X509v3 Authority Key Identifier: keyid:DE:42:50:39:67:D5:6F:5E:A0:96:BD:B3:8E:F0:35:AE:1E:0D:F5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ec979aec-0467-4daa-a91a-af19ccde04e8.cer sbgp-ipAddrBlock: critical IPv4: 192.188.110.0/24 192.190.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:aa:a9:c1:2f:2f:74:16:e5:bd:4c:7e:44:48:67:c3:6f:03: dc:1a:72:06:40:af:76:ca:a9:fa:9b:f1:ce:19:a9:2d:38:15: d2:35:ec:68:8b:64:db:02:15:5a:02:b5:ac:42:a4:c3:21:e0: 1c:29:59:9f:21:8d:fc:bb:5c:a5:5a:c4:bb:c2:5d:8a:9d:4e: d1:f6:9b:57:1d:f7:b2:e5:99:7f:58:0a:77:af:84:59:3e:b3: cd:d7:59:0f:7c:52:bc:d9:e5:2e:23:6b:23:29:86:fd:89:88: 0b:f2:c6:1f:6e:cc:fc:8b:07:8c:4f:ed:2c:7d:6e:07:4c:cc: 38:f9:ef:8c:7d:ad:03:9e:46:3d:2b:69:a1:89:a6:05:7e:b1: 2e:1d:98:1c:d0:24:cd:f4:ba:de:52:83:3f:c6:0f:46:a3:95: 33:b5:a1:79:06:2e:39:fb:e2:68:93:c8:44:12:77:5e:d2:df: 69:b6:0e:2c:80:e4:fe:ec:d1:60:a6:1f:73:87:7e:9a:49:68: 95:bd:b7:21:7f:32:c4:62:13:c0:5f:51:b5:b6:75:fb:1e:da: a8:0b:b1:8e:8d:49:bc:0d:25:a4:ab:49:1c:49:3b:29:48:5c: bb:e3:e1:cd:70:d1:6f:31:1e:cd:bd:0e:36:07:c9:3c:87:a5: e7:5d:56:d3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEteAQS6UPR39gZ+94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM5NzlhZWMtMDQ2Ny00ZGFhLWE5MWEtYWYxOWNjZGUw NGU4MB4XDTI1MDkzMDE0MzU0NFoXDTI1MTIyOTE1MzU0NFowLzEtMCsGA1UEAxMk Y2ZhZmVjZjEtMzUxMi00MmI0LTljMjctZDg0M2NkZmE5YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipPZ5VhwPshJXEr2hAK3w/aoJdWJhjY4uJEY VQ//Dcmf3unmw1iLfkDtnsCri7M38UCqMALBUxkR59bvPjvpQBjU+zhfF4g/Ue5o bav9rNouYlADB34OJcZqcqSJDLrFEn7iPV15NliwMzVhVWvimSNFDIKmFEMxkrxc dO1DhvHMuIzlihiHRNvO6IE8truMSdu5XplCbD/YiQ/4BHvWwWSlXgEGmk3r7Su8 gOGV8HGHnPqMVMMzaPulIAGib0e7L0rBXS9eu9f1SgLQEzthHYI8POStrH3HyQzd VKftvuMlKtDnHkrol+2z+9GfQU1kIIWYaMEc2rzZw69wO+vNcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGfJNT+5xhNGru2xWp5PzbyfeibiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYzk3 OWFlYy0wNDY3LTRkYWEtYTkxYS1hZjE5Y2NkZTA0ZTgvNjc4NmEyMjMtNjBjYy0z YWI2LTlhOTUtZTQzYTg0ODA2ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWM5NzlhZWMtMDQ2Ny00ZGFhLWE5 MWEtYWYxOWNjZGUwNGU4L2VjOTc5YWVjLTA0NjctNGRhYS1hOTFhLWFmMTljY2Rl MDRlOC5jcmwwHwYDVR0jBBgwFoAU3kJQOWfVb16glr2zjvA1rh4N9dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYzk3OWFlYy0wNDY3LTRkYWEtYTkxYS1hZjE5 Y2NkZTA0ZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwLxuAwQA wL5kMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJiqqcEvL3QW5b1MfkRIZ8NvA9wacgZAr3bKqfqb8c4ZqS04 FdI17GiLZNsCFVoCtaxCpMMh4BwpWZ8hjfy7XKVaxLvCXYqdTtH2m1cd97LlmX9Y CnevhFk+s83XWQ98UrzZ5S4jayMphv2JiAvyxh9uzPyLB4xP7Sx9bgdMzDj574x9 rQOeRj0raaGJpgV+sS4dmBzQJM30ut5Sgz/GD0ajlTO1oXkGLjn74miTyEQSd17S 32m2DiyA5P7s0WCmH3OHfppJaJW9tyF/MsRiE8BfUbW2dfse2qgLsY6NSbwNJaSr SRxJOylIXLvj4c1w0W8xHs29DjYHyTyHpeddVtM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:31:16 2025 by rpki-client