$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa File: 4789457a-e489-338a-acab-d987ad29a7a6.roa (raw, json) Hash identifier: vQ7EjUDfKHDNIewvWthTs2PBYxWcwLg4IQpUK0argWQ= Subject key identifier: 34:99:50:7B:36:E3:03:A2:1A:53:80:82:14:8C:6E:EF:17:4C:89:1D Certificate issuer: /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Certificate serial: 010D0C9F4328584B79BCBC288D98AD553C054300 Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 32146 IP address blocks: 208.94.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bc:28:8d:98:ad:55:3c:05:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=891d0532-19c6-49ef-8b51-7f0d9623f8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:a1:61:cb:a9:fb:5c:26:59:12:87:ee:ae: ba:23:1c:65:b3:c8:f3:95:52:b5:b5:b5:80:f6:74: d2:de:35:c6:10:9e:63:db:7d:48:f6:1a:1d:9e:22: a4:15:96:fb:a3:19:b2:cd:ba:c0:eb:40:1f:01:a2: a4:45:a3:42:0e:f5:cd:52:28:6c:4b:38:d5:50:98: d3:59:20:4d:ca:ad:a9:6e:29:6e:83:51:04:d7:a0: b3:15:15:03:2c:83:17:e3:0b:3d:7d:d7:f6:55:19: bd:33:c0:14:45:96:80:c9:a9:7c:f4:e1:c3:4f:ad: 9d:3e:0d:29:48:60:93:6f:a7:c4:9f:e7:5e:db:af: 61:58:e8:51:45:4e:ab:eb:73:7d:34:0d:5b:1b:71: 59:fe:05:5f:85:9c:91:77:ef:a3:6c:8b:b8:5e:2b: 1c:fe:a0:c7:7b:e3:2c:04:d2:16:d1:f4:5f:47:f8: 4d:9c:44:45:e0:2d:2d:e6:1c:fd:98:14:3c:85:37: a1:ed:04:6e:91:43:cf:2a:c2:03:07:96:45:b5:a7: b1:f8:13:6e:03:81:46:80:a9:6c:20:59:5e:92:9e: 8a:56:5b:c7:28:f3:64:4f:cb:2b:ee:9d:24:e4:93: 95:7c:5e:8d:82:29:3c:e6:2f:d2:f1:a5:e8:94:73: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:99:50:7B:36:E3:03:A2:1A:53:80:82:14:8C:6E:EF:17:4C:89:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl X509v3 Authority Key Identifier: keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer sbgp-ipAddrBlock: critical IPv4: 208.94.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3e:c4:01:a0:8f:db:41:36:6b:e9:dd:d2:84:cb:f0:00:18: b6:ec:8d:d9:db:4e:31:9f:ca:92:68:75:90:9a:e3:48:77:19: ba:ab:9e:fd:4a:bc:47:ac:0f:72:d5:dc:31:ea:45:27:93:c3: 98:e6:53:e4:ca:db:51:57:66:03:43:ca:31:f3:02:b3:63:44: 49:91:2a:4f:68:42:0a:7a:3d:06:a6:5c:63:09:1f:90:23:2c: 51:9e:96:ec:c6:3a:a1:a4:e8:f7:38:26:73:dd:f5:a7:93:36: 46:c7:16:09:2b:e1:89:ff:00:67:28:cb:fc:8e:80:33:e8:23: e5:34:9d:7c:92:ee:a0:72:a7:e5:9e:d5:dd:00:dd:c8:1e:e6: ef:ff:96:9c:82:0f:6a:6b:ce:d4:63:25:2e:eb:65:07:04:19: 51:25:ae:1c:94:27:9a:7d:bb:e0:ba:75:af:08:9a:49:15:45: f3:31:5b:c0:3f:f6:68:86:14:b8:50:a4:d7:d4:7e:99:91:5b: 25:4e:5e:3d:58:e6:84:dd:7c:4c:e6:f6:a9:b7:fa:59:f8:1a: da:8d:f2:7a:76:0c:b2:63:f9:f7:9a:8b:ff:98:f1:f0:7c:a2: 23:46:c9:e7:fc:ea:bd:58:10:a9:61:63:f0:f5:8f:ac:56:12: b2:69:56:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLwojZitVTwFQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNDE1MTMtODY5Yy00MWYyLTkzMTktMTFkMWU4Yjk1 ZTJiMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ODkxZDA1MzItMTljNi00OWVmLThiNTEtN2YwZDk2MjNmOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhauhYcup+1wmWRKH7q66Ixxls8jzlVK1tbWA 9nTS3jXGEJ5j231I9hodniKkFZb7oxmyzbrA60AfAaKkRaNCDvXNUihsSzjVUJjT WSBNyq2pbilug1EE16CzFRUDLIMX4ws9fdf2VRm9M8AURZaAyal89OHDT62dPg0p SGCTb6fEn+de269hWOhRRU6r63N9NA1bG3FZ/gVfhZyRd++jbIu4Xisc/qDHe+Ms BNIW0fRfR/hNnERF4C0t5hz9mBQ8hTeh7QRukUPPKsIDB5ZFtaex+BNuA4FGgKls IFlekp6KVlvHKPNkT8sr7p0k5JOVfF6Ngik85i/S8aXolHPrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSZUHs24wOiGlOAghSMbu8XTIkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0 MTUxMy04NjljLTQxZjItOTMxOS0xMWQxZThiOTVlMmIvNDc4OTQ1N2EtZTQ4OS0z MzhhLWFjYWItZDk4N2FkMjlhN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDZkNDE1MTMtODY5Yy00MWYyLTkz MTktMTFkMWU4Yjk1ZTJiL2Q2ZDQxNTEzLTg2OWMtNDFmMi05MzE5LTExZDFlOGI5 NWUyYi5jcmwwHwYDVR0jBBgwFoAUtCkCM9+TvJn+B+Gn0hP6wrmoQE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0MTUxMy04NjljLTQxZjItOTMxOS0xMWQx ZThiOTVlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg+xAGgj9tBNmvp3dKEy/AAGLbsjdnbTjGfypJodZCa40h3Gbqrnv1K vEesD3LV3DHqRSeTw5jmU+TK21FXZgNDyjHzArNjREmRKk9oQgp6PQamXGMJH5Aj LFGeluzGOqGk6Pc4JnPd9aeTNkbHFgkr4Yn/AGcoy/yOgDPoI+U0nXyS7qByp+We 1d0A3cge5u//lpyCD2prztRjJS7rZQcEGVElrhyUJ5p9u+C6da8ImkkVRfMxW8A/ 9miGFLhQpNfUfpmRWyVOXj1Y5oTdfEzm9qm3+ln4GtqN8np2DLJj+feai/+Y8fB8 oiNGyef86r1YEKlhY/D1j6xWErJpVog= -----END CERTIFICATE-----Generated at Sat Oct 11 09:58:23 2025 by rpki-client