$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa File: 4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa (raw, json) Hash identifier: pMo39zJFcIUosUzd0ypV9fk6BhpotJjlrq3qL0m9VhA= Subject key identifier: E6:A5:12:E8:95:05:1D:FF:0E:5E:94:12:E4:28:D1:5E:0E:88:E6:B4 Certificate issuer: /CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1 Certificate serial: 010D0C9F4328584B01B14AF8470EB61086DC1610 Authority key identifier: 41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 33360 IP address blocks: 192.112.255.0/24 maxlen: 24 204.89.22.0/24 maxlen: 24 204.145.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:4a:f8:47:0e:b6:10:86:dc:16:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1 Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=48bd4377-0942-479d-9c6d-664a68a26720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:c8:20:53:1d:5d:ba:4f:64:53:b0:cd:24: c7:6a:57:aa:36:02:bf:70:5f:88:88:51:96:c1:eb: d2:f3:a1:14:8c:8f:12:13:28:df:0c:1b:15:96:ca: 0d:41:8e:56:4a:6d:21:d9:af:42:ae:82:92:bd:6c: 7f:3d:d6:8f:7f:8a:98:ee:ac:c7:ab:99:a5:57:60: 90:57:af:fc:1c:c2:67:6c:d4:c7:1e:4f:00:12:1c: db:4e:da:c3:d4:bc:49:eb:17:49:1b:b2:39:53:77: c2:32:67:26:48:1a:2e:29:9d:d3:ad:50:09:69:3c: 49:15:68:ed:38:42:f1:0b:65:2e:dd:25:15:cc:cc: 0c:20:c6:1a:66:6f:cd:e6:64:33:cc:11:23:5b:6f: eb:fc:3b:8f:a6:0c:ae:d6:a2:16:da:db:d0:e3:76: b6:98:a0:4c:ca:f6:22:1e:ba:98:e0:10:07:13:2c: c6:e1:c5:6b:18:2b:b8:88:d4:4f:2b:f0:85:be:2e: a0:bb:eb:98:25:fb:ff:57:88:68:52:dd:51:ef:00: 0b:9b:ce:92:36:56:22:1b:03:b3:88:53:0d:45:49: 78:00:10:b0:e3:a2:ca:40:79:e0:55:f5:ec:16:af: 1e:16:64:15:59:d8:65:c5:75:34:7e:8e:9c:c8:0a: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A5:12:E8:95:05:1D:FF:0E:5E:94:12:E4:28:D1:5E:0E:88:E6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl X509v3 Authority Key Identifier: keyid:41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer sbgp-ipAddrBlock: critical IPv4: 192.112.255.0/24 204.89.22.0/24 204.145.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:40:f9:f0:72:ae:94:e6:9d:b6:f2:fb:41:46:cb:8c:b3:6a: d0:af:aa:4a:94:53:a9:3d:bb:88:dd:3b:5d:39:be:53:58:ab: 08:a6:c9:74:f1:87:bd:e3:80:4d:e3:f5:a1:a4:36:b8:19:6c: df:02:38:d5:61:6a:9a:ed:f5:43:ec:a4:f6:4e:b9:f1:9d:2a: 5f:97:47:00:ca:68:34:a4:a1:0f:60:8c:eb:16:4e:dc:40:f2: f1:f9:54:0b:a0:90:95:02:4d:69:71:a3:95:13:77:62:26:ee: 7c:fe:4c:d1:85:c8:c7:a9:ea:da:eb:8a:36:9e:98:95:1e:b4: 48:ef:d2:9b:65:22:68:c8:a9:48:2d:8f:a9:fa:9b:0b:47:6d: 70:28:91:f0:98:a8:60:05:56:94:80:ad:b9:5d:b4:b7:e7:6c: de:02:0a:f3:9c:80:fc:51:27:00:7e:1e:b4:31:c6:2a:7c:0f: 71:fe:5b:66:fc:48:c0:c1:dc:fa:03:20:ad:2e:a4:e1:08:d5: a2:1c:c8:e6:21:81:66:e1:cb:4d:6c:7e:98:4b:bc:fe:36:f0: 83:16:4a:4f:86:9f:d4:ec:8b:d0:a3:41:5c:83:22:e9:a4:57: 61:1d:be:6a:bd:15:d6:4f:65:aa:fc:8e:f5:69:25:9a:24:68: 88:a6:fc:0a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsBsUr4Rw62EIbcFhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MjlkNzktYjZlMi00Njc3LWE2ZDEtZTM4YzkwNDVl YmIxMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk NDhiZDQzNzctMDk0Mi00NzlkLTljNmQtNjY0YTY4YTI2NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXbIIFMdXbpPZFOwzSTHaleqNgK/cF+IiFGW wevS86EUjI8SEyjfDBsVlsoNQY5WSm0h2a9CroKSvWx/PdaPf4qY7qzHq5mlV2CQ V6/8HMJnbNTHHk8AEhzbTtrD1LxJ6xdJG7I5U3fCMmcmSBouKZ3TrVAJaTxJFWjt OELxC2Uu3SUVzMwMIMYaZm/N5mQzzBEjW2/r/DuPpgyu1qIW2tvQ43a2mKBMyvYi HrqY4BAHEyzG4cVrGCu4iNRPK/CFvi6gu+uYJfv/V4hoUt1R7wALm86SNlYiGwOz iFMNRUl4ABCw46LKQHngVfXsFq8eFmQVWdhlxXU0fo6cyAqlCwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOalEuiVBR3/Dl6UEuQo0V4OiOa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZTQy OWQ3OS1iNmUyLTQ2NzctYTZkMS1lMzhjOTA0NWViYjEvNGVhMzc3YzEtMGRmNS0z ZWE0LTg1MDgtYmMyNzNiYTdlODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmU0MjlkNzktYjZlMi00Njc3LWE2 ZDEtZTM4YzkwNDVlYmIxL2JlNDI5ZDc5LWI2ZTItNDY3Ny1hNmQxLWUzOGM5MDQ1 ZWJiMS5jcmwwHwYDVR0jBBgwFoAUQX+GdlkkEqCMIPrEfpgv/bg/4H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZTQyOWQ3OS1iNmUyLTQ2NzctYTZkMS1lMzhj OTA0NWViYjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHD/AwQA zFkWAwQAzJFgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGZA+fByrpTmnbby+0FGy4yzatCvqkqUU6k9u4jd O105vlNYqwimyXTxh73jgE3j9aGkNrgZbN8CONVhaprt9UPspPZOufGdKl+XRwDK aDSkoQ9gjOsWTtxA8vH5VAugkJUCTWlxo5UTd2Im7nz+TNGFyMep6trrijaemJUe tEjv0ptlImjIqUgtj6n6mwtHbXAokfCYqGAFVpSArbldtLfnbN4CCvOcgPxRJwB+ HrQxxip8D3H+W2b8SMDB3PoDIK0upOEI1aIcyOYhgWbhy01sfphLvP428IMWSk+G n9Tsi9CjQVyDIumkV2Edvmq9FdZPZar8jvVpJZokaIim/Ao= -----END CERTIFICATE-----Generated at Fri Oct 10 16:17:40 2025 by rpki-client