$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa File: 9ce597f6-b093-3c3d-b115-eebeaf02c756.roa (raw, json) Hash identifier: zws54cO5eINNDahZF/evJRYcsWULzIzSeTjFaZAyY/g= Subject key identifier: 4C:47:32:BC:85:4D:7A:9A:E3:CA:0B:5B:61:E9:6D:D6:AE:53:7D:6F Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584AFC1C077108D3AA87DAF93D00 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 59 IP address blocks: 192.12.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:07:71:08:d3:aa:87:da:f9:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=fc9a7c42-6837-47d0-b934-60ba289d2f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:b0:81:a7:f8:6a:b5:ea:61:4c:78:d8:67: 7e:c6:25:54:f7:e7:54:1f:f9:c6:d8:8b:13:b1:2c: b1:3c:e1:3c:96:cb:8a:59:87:d1:98:53:19:6f:aa: f6:be:bc:ac:82:11:57:24:e2:60:88:14:4d:64:20: d0:78:fd:67:1c:d0:f4:20:74:03:93:c1:4a:a0:ce: 82:67:08:18:4e:c9:00:e8:bb:55:b2:0f:95:00:7b: 90:20:de:c0:08:76:2b:f1:9a:a2:90:bd:cc:eb:b1: 81:a7:f4:96:3c:ed:12:3f:02:88:d0:39:4c:20:cc: 2a:58:61:50:63:22:d2:b2:25:63:d5:6b:1c:a9:e5: b8:1e:9c:a4:5f:4b:e4:18:2e:03:30:17:d1:f4:e8: c6:5c:e8:f6:ca:1d:ad:34:76:83:bb:5a:95:9a:1b: 59:31:9d:0a:28:e1:4c:28:26:17:1b:ac:57:9f:f7: ab:db:80:8b:65:d5:39:ac:7b:52:f0:52:c3:1f:c6: b5:0e:2b:31:c6:92:17:d0:11:58:db:7c:f2:ee:8d: b2:42:3d:d8:08:05:1d:c7:7b:91:8e:d6:9c:85:86: 20:e9:97:55:d4:0a:a6:25:ae:60:69:2a:61:09:57: 29:07:c7:06:51:55:4e:04:8f:00:50:37:7b:b6:9a: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:47:32:BC:85:4D:7A:9A:E3:CA:0B:5B:61:E9:6D:D6:AE:53:7D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 192.12.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:82:51:0e:a7:9a:ef:4b:1c:0d:53:d5:3f:7a:0e:c5:0b:2a: 0d:b5:f4:e9:5e:3e:5e:06:c1:a6:03:b1:c2:71:51:a5:56:78: a5:1c:16:94:fe:12:be:d9:a9:19:a9:9f:61:90:e5:0b:6f:f7: 98:58:73:29:bf:b6:e0:d7:4a:8b:ce:3e:03:82:bc:30:af:12: 24:29:b7:e4:76:fe:1a:60:79:d5:ea:86:a3:63:81:76:e4:04: e4:ab:01:bb:5f:fd:46:84:81:67:da:33:2b:1e:0e:df:d2:67: 29:83:85:c5:1f:24:90:0c:10:77:3a:30:1f:d1:be:b0:d3:2f: 95:7c:02:86:d4:1f:6a:b4:e8:64:a7:be:21:7c:9c:ef:8a:06: 1d:04:ae:40:27:a1:41:be:ac:8d:82:8f:1b:d8:1e:bb:65:84: c4:3f:2e:61:ee:84:84:28:e4:b8:96:7a:f3:f3:67:aa:47:6a: 55:de:be:ca:1c:31:83:42:17:51:4a:76:aa:0b:59:b5:d9:e8: fb:bf:1a:26:25:b2:21:62:97:83:57:ed:fc:2a:97:6f:65:8e: d4:2f:3e:11:88:ef:56:76:cb:5d:d9:6a:83:e3:3f:17:fe:0b: 5e:80:be:45:97:64:3b:ef:58:8a:9a:40:bd:84:81:9b:13:66: 1c:bc:5d:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAdxCNOqh9r5PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmM5YTdjNDItNjgzNy00N2QwLWI5MzQtNjBiYTI4OWQyZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hSwgaf4arXqYUx42Gd+xiVU9+dUH/nG2IsT sSyxPOE8lsuKWYfRmFMZb6r2vrysghFXJOJgiBRNZCDQeP1nHND0IHQDk8FKoM6C ZwgYTskA6LtVsg+VAHuQIN7ACHYr8ZqikL3M67GBp/SWPO0SPwKI0DlMIMwqWGFQ YyLSsiVj1WscqeW4HpykX0vkGC4DMBfR9OjGXOj2yh2tNHaDu1qVmhtZMZ0KKOFM KCYXG6xXn/er24CLZdU5rHtS8FLDH8a1DisxxpIX0BFY23zy7o2yQj3YCAUdx3uR jtachYYg6ZdV1AqmJa5gaSphCVcpB8cGUVVOBI8AUDd7tpq5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExHMryFTXqa48oLW2HpbdauU31vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOWNlNTk3ZjYtYjA5My0z YzNkLWIxMTUtZWViZWFmMDJjNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGCUQ6nmu9LHA1T1T96DsULKg219OlePl4GwaYDscJxUaVWeKUcFpT+ Er7ZqRmpn2GQ5Qtv95hYcym/tuDXSovOPgOCvDCvEiQpt+R2/hpgedXqhqNjgXbk BOSrAbtf/UaEgWfaMyseDt/SZymDhcUfJJAMEHc6MB/RvrDTL5V8AobUH2q06GSn viF8nO+KBh0ErkAnoUG+rI2CjxvYHrtlhMQ/LmHuhIQo5LiWevPzZ6pHalXevsoc MYNCF1FKdqoLWbXZ6Pu/GiYlsiFil4NX7fwql29ljtQvPhGI71Z2y13ZaoPjPxf+ C16AvkWXZDvvWIqaQL2EgZsTZhy8Xdw= -----END CERTIFICATE-----Generated at Fri Oct 10 03:53:09 2025 by rpki-client