$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa File: f8daf407-7390-3a49-9321-c774a1b0419c.roa (raw, json) Hash identifier: y9X5n1TYjVMcgzKFr2SdKBc4mW32CoLScjtD22Z96kc= Subject key identifier: DA:66:AA:3B:B4:F0:85:2A:86:CB:7C:BD:6C:27:5A:DF:D0:79:56:BD Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584B970D02CFC041D2BC42EC4900 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 46450 IP address blocks: 192.159.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:02:cf:c0:41:d2:bc:42:ec:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=989ec5c8-93a2-4365-b9c2-2cd906e21329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:82:96:43:99:ff:2f:20:ba:e9:db:c5:7e: ee:13:4b:ee:b8:8b:f8:4b:6b:88:2f:02:24:e1:7a: 37:df:2e:0f:8c:1a:ac:a9:4b:55:98:4d:49:9b:65: 53:6d:c9:93:68:1a:37:73:fe:14:58:4b:b1:4b:8b: cb:c9:b9:ed:9b:55:42:74:ff:2e:ba:3d:94:50:e7: 47:05:a1:24:11:b4:4d:41:ae:de:e3:d1:4a:95:a3: 13:eb:72:cd:df:b1:da:41:58:31:84:bb:aa:20:16: 90:bb:de:a9:c4:0d:00:4c:a3:aa:dd:a7:90:4e:79: ba:76:39:a1:d4:29:1b:4b:ce:67:0d:56:b2:6b:b0: 50:27:b3:aa:d2:fb:f1:93:b4:13:2f:c4:98:84:86: dc:f3:d0:5d:d7:a0:3b:34:1d:be:65:2e:de:b3:e1: b2:10:e0:e0:e5:7b:81:60:e7:0b:95:9e:0a:6b:8a: 1d:a5:85:fd:bd:a5:4f:ad:39:90:68:d2:8d:6d:63: 19:31:ab:d4:d9:66:4c:71:c5:3f:5b:08:64:69:99: f9:a1:41:d5:ac:35:99:12:eb:7d:8c:19:88:68:b5: 05:58:a7:5d:71:ca:b7:00:52:93:22:7e:a8:c6:8b: 99:c2:26:76:99:f0:9f:93:d5:c0:c0:cf:be:f6:03: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:66:AA:3B:B4:F0:85:2A:86:CB:7C:BD:6C:27:5A:DF:D0:79:56:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:38:c7:7b:d8:7c:07:a3:8e:cd:21:c7:16:1a:99:5e:1c:85: 90:96:cf:72:38:0b:ee:ca:fa:e3:c1:d7:41:9e:d0:52:9f:db: e0:91:6f:ee:fe:a9:e3:68:ae:44:70:74:4b:fd:3a:60:17:11: 16:de:1c:bb:b0:55:22:78:16:3a:ef:8d:7a:0f:08:54:3b:85: 60:9a:db:6f:a2:16:fd:4e:0f:1a:ca:ea:40:7f:81:b8:00:0f: 4a:60:e4:69:6c:4b:fc:a3:bc:92:d3:1c:ac:0b:69:1f:da:f7: 72:81:41:06:0d:8e:04:b4:90:ab:88:78:9b:05:74:16:4c:4f: 09:b4:38:f4:20:fe:3d:5e:e3:88:14:8b:c3:8a:7f:7a:a9:7d: 67:ff:1e:35:9a:4f:c9:0e:40:f1:ad:39:ee:4e:91:ec:a1:82: 93:32:9e:5b:6f:18:b2:5d:cc:0b:04:68:6c:50:21:d7:c6:5b: 77:64:10:f4:2c:5a:9b:cc:29:97:13:7e:a6:13:0c:a4:83:0f: 88:41:ba:01:d8:f6:61:0c:a0:d3:f3:35:83:d6:c3:f1:34:1e: 34:ed:5f:ba:bc:15:cf:a0:7e:5c:75:3a:f9:e0:9a:d7:12:5b: 77:52:c4:d9:d7:60:08:55:15:2d:08:0c:c9:05:88:da:69:a1: ec:10:48:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQLPwEHSvELsSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OTg5ZWM1YzgtOTNhMi00MzY1LWI5YzItMmNkOTA2ZTIxMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9WClkOZ/y8guunbxX7uE0vuuIv4S2uILwIk 4Xo33y4PjBqsqUtVmE1Jm2VTbcmTaBo3c/4UWEuxS4vLybntm1VCdP8uuj2UUOdH BaEkEbRNQa7e49FKlaMT63LN37HaQVgxhLuqIBaQu96pxA0ATKOq3aeQTnm6djmh 1CkbS85nDVaya7BQJ7Oq0vvxk7QTL8SYhIbc89Bd16A7NB2+ZS7es+GyEODg5XuB YOcLlZ4Ka4odpYX9vaVPrTmQaNKNbWMZMavU2WZMccU/WwhkaZn5oUHVrDWZEut9 jBmIaLUFWKddccq3AFKTIn6oxouZwiZ2mfCfk9XAwM++9gPL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpmqju08IUqhst8vWwnWt/QeVa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZjhkYWY0MDctNzM5MC0z YTQ5LTkzMjEtYzc3NGExYjA0MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA4x3vYfAejjs0hxxYamV4chZCWz3I4C+7K+uPB10Ge0FKf2+CRb+7+ qeNorkRwdEv9OmAXERbeHLuwVSJ4FjrvjXoPCFQ7hWCa22+iFv1ODxrK6kB/gbgA D0pg5GlsS/yjvJLTHKwLaR/a93KBQQYNjgS0kKuIeJsFdBZMTwm0OPQg/j1e44gU i8OKf3qpfWf/HjWaT8kOQPGtOe5OkeyhgpMynltvGLJdzAsEaGxQIdfGW3dkEPQs WpvMKZcTfqYTDKSDD4hBugHY9mEMoNPzNYPWw/E0HjTtX7q8Fc+gflx1OvngmtcS W3dSxNnXYAhVFS0IDMkFiNppoewQSOU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:49 2025 by rpki-client