$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa File: 0999b1e3-4785-38ae-a00d-63b70427c4f0.roa (raw, json) Hash identifier: cYpQVyS4KM6pW9gBGMIFmJmdV6k1sK10xqVuUf0GYTI= Subject key identifier: D6:D9:4D:7A:74:78:D1:F0:70:95:B2:6F:6E:A2:8F:4E:6B:9C:21:71 Certificate issuer: /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Certificate serial: 010D0C9F4328584B5F3725555845F4E83C6C4820 Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 192.190.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:25:55:58:45:f4:e8:3c:6c:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=48879507-daf8-4083-94d0-8b35712890fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:49:ec:5a:fe:b5:d6:4a:d1:d3:02:0c:bf: f2:af:9a:62:b4:5f:b8:7f:63:c3:3f:39:c5:70:d9: cd:86:61:90:01:44:f9:ca:80:f7:38:e2:aa:20:fa: 36:f8:5e:84:12:7a:d5:75:57:d0:e3:ce:46:43:b6: 33:da:40:86:ae:46:0a:aa:31:75:ce:fa:42:1a:12: 79:27:29:2f:71:63:c7:7c:e0:18:54:3c:83:b3:a3: 53:70:ec:31:d7:30:7e:5c:ca:f5:f6:b9:9c:e6:d5: f8:fd:05:32:48:a4:fd:ce:46:36:78:bb:e0:75:54: 74:c4:8b:55:92:43:9f:58:9c:49:9f:c0:f6:5b:73: 9d:5f:0a:16:36:ff:21:b4:30:69:ed:9c:5d:2a:73: dd:b7:d8:da:ce:e2:f8:ce:54:c8:23:66:dc:ce:08: a0:a3:e8:be:9c:ac:0a:46:24:fe:0d:9c:ce:ec:f0: 4c:ae:52:2a:0b:6a:b0:3b:e7:ef:7e:c7:f8:e3:b7: 31:dc:67:b5:e0:01:e9:dd:93:a4:f1:f0:50:35:5e: 09:7d:79:f9:81:ef:84:ad:28:3e:cb:5e:31:7c:19: a5:f5:5f:07:41:75:df:10:9c:03:16:dd:60:2b:d7: 46:ea:e2:53:55:53:09:b3:4e:73:09:dd:33:85:19: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D9:4D:7A:74:78:D1:F0:70:95:B2:6F:6E:A2:8F:4E:6B:9C:21:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl X509v3 Authority Key Identifier: keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer sbgp-ipAddrBlock: critical IPv4: 192.190.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ab:87:6d:1d:a4:9e:53:4e:ac:5f:aa:c5:1c:fb:ef:89:a7: bf:b6:87:3d:1f:8f:bb:bd:ae:51:ac:9e:f3:d1:76:14:90:b7: 13:69:82:d2:5a:21:53:76:84:1d:b0:e6:77:90:5e:75:8d:32: b6:2f:ea:4d:3e:d2:4c:95:1c:db:f5:c8:73:7c:81:5f:5a:cb: f6:48:a5:21:9a:7a:ac:89:7d:5e:4a:6c:32:cb:2b:cf:f1:fe: 37:0a:0d:1b:21:6c:0c:b7:1f:c6:3a:0f:d9:91:d1:3a:ba:10: db:c1:07:37:4a:98:93:e5:c4:60:16:7c:6d:c7:39:ff:c3:9c: 7e:62:4b:ef:67:f7:3f:d6:f8:09:14:60:69:60:dc:b6:56:b1: e4:25:5d:b3:d8:83:4b:8d:25:6c:f7:d6:7a:36:3f:1e:b1:bb: a7:88:ec:fc:a4:41:0a:f2:44:b8:c2:2f:4f:f0:e3:fd:92:a4: a4:e6:d5:ce:a1:31:b8:5c:26:a6:28:e3:66:6f:8c:db:02:62: 8a:13:6f:87:27:00:6c:57:81:02:9d:12:0b:b9:b6:18:e0:ce: 6e:23:80:1d:c8:20:a3:ed:fc:22:2b:d5:65:4b:49:b0:84:a7: c1:d6:03:57:45:f1:d0:58:56:d7:3d:a8:48:99:1e:9f:69:70: 50:d2:e8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyVVWEX06DxsSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyYWI1ODEtYTBiNC00ZjAxLTlhYjEtOGRhYzZkODgx NTA4MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NDg4Nzk1MDctZGFmOC00MDgzLTk0ZDAtOGIzNTcxMjg5MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNlJ7Fr+tdZK0dMCDL/yr5pitF+4f2PDPznF cNnNhmGQAUT5yoD3OOKqIPo2+F6EEnrVdVfQ485GQ7Yz2kCGrkYKqjF1zvpCGhJ5 JykvcWPHfOAYVDyDs6NTcOwx1zB+XMr19rmc5tX4/QUySKT9zkY2eLvgdVR0xItV kkOfWJxJn8D2W3OdXwoWNv8htDBp7ZxdKnPdt9jazuL4zlTII2bczgigo+i+nKwK RiT+DZzO7PBMrlIqC2qwO+fvfsf447cx3Ge14AHp3ZOk8fBQNV4JfXn5ge+ErSg+ y14xfBml9V8HQXXfEJwDFt1gK9dG6uJTVVMJs05zCd0zhRm87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbZTXp0eNHwcJWyb26ij05rnCFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjJh YjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFjNmQ4ODE1MDgvMDk5OWIxZTMtNDc4NS0z OGFlLWEwMGQtNjNiNzA0MjdjNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIyYWI1ODEtYTBiNC00ZjAxLTlh YjEtOGRhYzZkODgxNTA4LzgyMmFiNTgxLWEwYjQtNGYwMS05YWIxLThkYWM2ZDg4 MTUwOC5jcmwwHwYDVR0jBBgwFoAUQasLrQXsMOk8Ntl0D1mitgcdWtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjJhYjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFj NmQ4ODE1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyrh20dpJ5TTqxfqsUc+++Jp7+2hz0fj7u9rlGsnvPRdhSQtxNpgtJa IVN2hB2w5neQXnWNMrYv6k0+0kyVHNv1yHN8gV9ay/ZIpSGaeqyJfV5KbDLLK8/x /jcKDRshbAy3H8Y6D9mR0Tq6ENvBBzdKmJPlxGAWfG3HOf/DnH5iS+9n9z/W+AkU YGlg3LZWseQlXbPYg0uNJWz31no2Px6xu6eI7PykQQryRLjCL0/w4/2SpKTm1c6h MbhcJqYo42ZvjNsCYooTb4cnAGxXgQKdEgu5thjgzm4jgB3IIKPt/CIr1WVLSbCE p8HWA1dF8dBYVtc9qEiZHp9pcFDS6Lk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:07:13 2025 by rpki-client