$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa File: 499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa (raw, json) Hash identifier: P4NRjLMPdCdcIArAKLduKBkQ7yiECbs3hQI6PpYntwM= Subject key identifier: 8B:CA:B0:10:1D:93:6E:A1:34:CE:CE:E5:8C:08:2B:2C:7B:2F:EA:22 Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584AFC1BFB60A9E41E3BB152EFE0 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 192.64.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fb:60:a9:e4:1e:3b:b1:52:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=90ffba67-8d5e-408b-870d-d7085c3bebdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:44:94:09:6e:98:f1:e8:7b:33:00:98:43: fd:e1:3d:c9:5b:ac:d2:c8:c4:2b:c6:3f:f0:ff:31: 2b:4c:28:1e:bb:6c:7f:ca:d6:d2:ef:23:6c:eb:6e: 38:ce:cb:4f:2e:82:0e:98:09:ac:01:34:dc:e1:5c: 1d:93:77:cd:11:b7:15:06:e7:85:9f:8d:b9:0b:0b: 77:18:2d:68:12:39:aa:26:9d:ae:8d:79:7e:f2:62: ea:f6:14:e5:05:9d:b8:60:89:83:ab:d6:f7:bb:c6: eb:92:e2:a0:f3:e6:16:fd:f9:c6:fe:ed:2e:ac:94: ff:02:46:16:26:89:9c:5f:5d:25:e7:19:8f:44:7b: f5:2e:06:a9:6e:ac:99:a0:30:6f:82:b9:17:80:b1: 42:e2:91:a8:e2:b9:ea:f8:55:1d:60:f3:a4:ff:01: dc:94:f6:14:0b:94:ed:fb:59:61:c5:02:41:9e:90: 7e:40:c5:bd:9b:36:a6:5e:06:8a:ff:a9:c3:0c:e0: 6a:00:a2:04:d6:ae:1e:b2:f1:06:51:b4:28:cb:0c: 98:a6:d0:d0:45:3f:fa:03:b2:e4:8e:c1:0f:f8:c3: 38:45:7d:4a:05:bd:e8:6f:92:a5:9b:4c:9e:32:50: 72:2f:67:47:17:f3:63:fa:10:a5:89:c1:88:0f:79: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CA:B0:10:1D:93:6E:A1:34:CE:CE:E5:8C:08:2B:2C:7B:2F:EA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e6:63:e2:77:f5:7a:30:ac:6e:8e:6a:72:1a:2b:2e:f6:a6: ab:da:62:1c:fc:70:14:3e:6c:e3:b6:67:89:cc:20:49:1a:3e: 59:d7:d8:38:d9:e4:2a:5e:c3:b1:08:5e:69:ce:d7:04:1c:9e: 27:18:9e:f6:45:18:81:6b:47:7e:0f:93:31:7f:f2:b9:fb:db: 77:e7:fe:8a:14:96:74:20:3c:d9:c5:ac:04:60:9d:b4:c0:cb: fb:0b:11:81:87:18:01:a9:d6:3c:b4:5a:37:62:7d:46:46:1c: 88:85:a8:52:ad:03:a2:88:00:cf:2a:9c:04:30:96:49:83:83: 5c:bd:fc:82:8e:70:02:46:0c:fa:32:28:16:ee:69:aa:78:e8: fc:1b:af:75:cf:90:64:aa:f9:2f:42:65:22:d0:7a:27:6e:4c: c2:60:5e:bf:6a:5a:0b:85:9c:c2:23:a0:b5:c9:f5:84:d3:69: 41:63:89:d2:88:78:9e:5a:f7:03:ab:d0:6f:74:0d:e0:c1:ff: c3:7d:48:f6:b3:bc:80:bd:77:c4:3e:d5:e4:9b:2b:c4:2a:42: e2:e2:ce:5b:ca:ef:44:50:e6:2f:26:ab:0b:d8:bb:9b:c7:bb: 8c:32:54:53:a7:3c:38:ce:b8:35:e3:d5:55:99:f6:41:9c:a2: 4f:87:6a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/tgqeQeO7FS7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTBmZmJhNjctOGQ1ZS00MDhiLTg3MGQtZDcwODVjM2JlYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbFElAlumPHoezMAmEP94T3JW6zSyMQrxj/w /zErTCgeu2x/ytbS7yNs6244zstPLoIOmAmsATTc4Vwdk3fNEbcVBueFn425Cwt3 GC1oEjmqJp2ujXl+8mLq9hTlBZ24YImDq9b3u8brkuKg8+YW/fnG/u0urJT/AkYW JomcX10l5xmPRHv1LgapbqyZoDBvgrkXgLFC4pGo4rnq+FUdYPOk/wHclPYUC5Tt +1lhxQJBnpB+QMW9mzamXgaK/6nDDOBqAKIE1q4esvEGUbQoywyYptDQRT/6A7Lk jsEP+MM4RX1KBb3ob5Klm0yeMlByL2dHF/Nj+hClicGID3lHLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvKsBAdk26hNM7O5YwIKyx7L+oiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvNDk5ZjcwOGMtYTNmZC0z YjUzLTlhZTEtOTU4NTVhN2ViZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvmY+J39XowrG6OanIaKy72pqvaYhz8cBQ+bOO2Z4nMIEkaPlnX2DjZ 5Cpew7EIXmnO1wQcnicYnvZFGIFrR34PkzF/8rn723fn/ooUlnQgPNnFrARgnbTA y/sLEYGHGAGp1jy0WjdifUZGHIiFqFKtA6KIAM8qnAQwlkmDg1y9/IKOcAJGDPoy KBbuaap46Pwbr3XPkGSq+S9CZSLQeiduTMJgXr9qWguFnMIjoLXJ9YTTaUFjidKI eJ5a9wOr0G90DeDB/8N9SPazvIC9d8Q+1eSbK8QqQuLizlvK70RQ5i8mqwvYu5vH u4wyVFOnPDjOuDXj1VWZ9kGcok+Havk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:49 2025 by rpki-client