$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa File: a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa (raw, json) Hash identifier: n8mXkxhce3+O6FwmPYilz3YBmEV5y1CzKHCFvEZ/Gho= Subject key identifier: 7B:46:D5:F3:CF:00:21:57:D6:8C:CA:A2:0A:4F:CE:88:7E:03:34:8A Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F4328584B41E70B60538DDF44A2361880 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15108 IP address blocks: 192.160.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0b:60:53:8d:df:44:a2:36:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4cb25834-ec98-492a-b3f2-88d0682f33c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:40:68:5f:59:01:2f:25:0e:49:e1:37:50: 71:ee:4e:db:37:69:2f:5a:0d:d4:61:02:a5:e2:2f: 56:13:5a:29:81:04:aa:5e:cb:24:9e:9f:4e:39:07: 49:a6:36:a3:3f:15:f3:30:e2:93:24:a2:ac:0b:da: 73:5a:e9:dc:0d:6c:6c:56:e1:10:ab:b2:95:97:c0: 2e:08:83:b3:67:b6:f1:a9:63:52:1d:f8:72:11:59: e8:8f:03:f6:a9:29:1b:0d:91:a1:6e:2e:c7:cd:3e: 4c:47:df:a2:99:3f:a2:3e:f0:09:9c:ad:49:ad:2e: 4e:49:33:99:2a:29:e6:e3:7c:11:c4:1a:25:61:fe: fd:d2:f6:eb:28:f2:74:84:59:bb:a2:05:04:37:62: 90:4c:04:94:bc:cd:d8:24:9a:e6:0e:ab:b4:22:d9: 19:00:30:23:fd:37:a1:1c:74:d3:31:87:be:5c:a1: 9c:20:0d:85:aa:6c:15:c9:6b:d4:81:61:0f:0c:f5: 3c:39:d3:a8:67:63:ee:5b:87:8d:eb:5f:83:40:b6: 89:25:46:12:e6:e3:d3:ec:38:4e:70:ed:4c:7b:a1: 5a:8e:7f:1e:32:80:99:bb:9b:c5:35:da:80:e6:87: 86:8a:54:90:2f:7c:7d:87:ad:c5:b0:78:ec:45:7f: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:46:D5:F3:CF:00:21:57:D6:8C:CA:A2:0A:4F:CE:88:7E:03:34:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.160.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8a:c1:bf:4d:fb:35:e2:f0:df:cc:63:97:dd:24:33:29:c5: 2a:9f:72:8d:28:b8:3b:b5:4c:67:de:81:4f:25:9e:34:b3:90: bd:47:3f:f0:21:c8:5f:15:2f:f4:4c:aa:0c:eb:73:fb:f9:ab: 23:0a:f7:d3:2b:c9:1e:e0:71:c9:67:bc:82:29:14:c5:02:a9: 44:86:c8:c4:b3:5d:13:59:5c:fe:40:96:bd:ef:81:94:c6:31: 87:68:55:2e:c1:5d:7b:4f:59:77:f7:47:fc:04:96:eb:8e:c1: 62:89:4d:1a:38:6b:58:a1:42:e2:e2:f5:e8:47:b5:a1:cd:39: a0:24:36:b7:e4:ef:e6:cc:a1:03:a2:fb:9b:0c:0c:c4:58:01: a3:01:d2:9c:da:66:89:11:c5:28:9e:24:a4:4a:2e:90:2a:88: 00:5b:36:70:a6:d4:01:a9:a5:e9:5c:5b:9d:a3:4c:85:67:72: a9:0c:4d:39:f8:18:5a:2e:49:fe:bd:0e:b2:9b:20:5b:25:ba: b7:29:23:c8:3a:3a:37:eb:45:c3:b0:80:94:9b:45:09:e9:b3: cc:fa:02:d2:09:5c:13:33:94:16:60:2e:ca:fa:fd:a3:76:02: 11:82:d6:fc:44:b6:9a:0f:b4:37:2e:cd:0e:27:88:3d:37:49: e6:f6:d1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wtgU43fRKI2GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGNiMjU4MzQtZWM5OC00OTJhLWIzZjItODhkMDY4MmYzM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0FAaF9ZAS8lDknhN1Bx7k7bN2kvWg3UYQKl 4i9WE1opgQSqXssknp9OOQdJpjajPxXzMOKTJKKsC9pzWuncDWxsVuEQq7KVl8Au CIOzZ7bxqWNSHfhyEVnojwP2qSkbDZGhbi7HzT5MR9+imT+iPvAJnK1JrS5OSTOZ Kinm43wRxBolYf790vbrKPJ0hFm7ogUEN2KQTASUvM3YJJrmDqu0ItkZADAj/Teh HHTTMYe+XKGcIA2FqmwVyWvUgWEPDPU8OdOoZ2PuW4eN61+DQLaJJUYS5uPT7DhO cO1Me6Fajn8eMoCZu5vFNdqA5oeGilSQL3x9h63FsHjsRX+OIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtG1fPPACFX1ozKogpPzoh+AzSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvYTgwODg2YTQtNGM3My0z OWI3LTllYWEtMmQ5ZTQ2ZDZjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWKwb9N+zXi8N/MY5fdJDMpxSqfco0ouDu1TGfegU8lnjSzkL1HP/Ah yF8VL/RMqgzrc/v5qyMK99MryR7gcclnvIIpFMUCqUSGyMSzXRNZXP5Alr3vgZTG MYdoVS7BXXtPWXf3R/wEluuOwWKJTRo4a1ihQuLi9ehHtaHNOaAkNrfk7+bMoQOi +5sMDMRYAaMB0pzaZokRxSieJKRKLpAqiABbNnCm1AGppelcW52jTIVncqkMTTn4 GFouSf69DrKbIFslurcpI8g6OjfrRcOwgJSbRQnps8z6AtIJXBMzlBZgLsr6/aN2 AhGC1vxEtpoPtDcuzQ4niD03Seb20Yw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:23:34 2025 by rpki-client