$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/06c1e57d-284f-3961-9224-565e4f9bc2e4.roa File: 06c1e57d-284f-3961-9224-565e4f9bc2e4.roa (raw, json) Hash identifier: QaW0f0OGWD3fhx5ToUDunw4LNk+j0olsV7vpt0fvZZk= Subject key identifier: 2C:55:0A:7C:22:1B:84:D6:52:16:F1:EA:F3:E1:1F:D7:F4:54:F4:3A Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EEBF8293663AEA30ED026C0 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/06c1e57d-284f-3961-9224-565e4f9bc2e4.roa Signing time: Mon 06 Oct 2025 16:02:04 +0000 ROA not before: Mon 06 Oct 2025 16:02:04 +0000 ROA not after: Sun 04 Jan 2026 17:02:04 +0000 asID: 12037 IP address blocks: 192.147.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:eb:f8:29:36:63:ae:a3:0e:d0:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:02:04 2025 GMT Not After : Jan 4 17:02:04 2026 GMT Subject: CN=0c1df87c-f2ed-4020-80ea-e1e25f0754c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:b2:48:1e:ee:33:4c:c0:58:e6:46:ce:d6: 32:67:43:86:5f:d6:10:72:fb:a4:22:bb:c0:e6:88: 73:75:e4:f4:ec:c6:d0:a9:82:f3:31:3f:1b:13:e3: 6c:27:e1:9b:78:7c:f5:c4:e6:ce:fc:f2:66:ca:5f: cd:31:d1:87:c0:04:a9:a0:b9:de:e4:6d:51:87:2e: 16:55:01:b1:07:a8:8a:44:8b:01:68:15:2a:bc:db: a1:39:a9:c8:ab:67:3d:d2:19:2a:90:29:b7:b1:ad: 2e:ce:7e:8d:d5:5d:e0:73:7b:ce:6c:6e:c7:98:92: 9b:4d:4b:7b:8a:f6:91:f9:6b:69:c5:8b:c3:d4:69: 1e:c7:8d:06:c2:da:9d:d5:b9:b4:b0:5d:87:1a:1d: 39:77:05:3d:11:ca:91:85:9a:61:c0:b2:b3:b4:a4: 12:0e:1e:53:7e:15:e6:c3:5f:0e:63:cb:79:68:84: cc:90:12:a4:a7:0f:3e:1c:4f:d1:f2:73:33:6b:e8: c3:89:71:57:0d:ba:61:b2:e9:bc:cf:60:9b:40:5e: 29:2f:60:44:93:ac:c2:56:d0:48:b1:54:ba:bb:13: ea:94:2c:47:b5:57:ad:6f:c6:de:1b:53:4b:76:e8: 8f:57:9c:06:81:60:e3:36:dd:01:1b:c8:8d:46:f5: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:55:0A:7C:22:1B:84:D6:52:16:F1:EA:F3:E1:1F:D7:F4:54:F4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/06c1e57d-284f-3961-9224-565e4f9bc2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 192.147.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fd:ca:2a:25:22:5a:75:16:e6:a2:29:ca:f9:23:8f:6b:a8: 72:88:ce:3b:27:82:19:13:a9:14:24:3c:f4:87:ce:ea:9c:bc: fd:21:72:97:61:52:50:ea:20:b6:64:ce:d9:fd:9f:7e:1c:1a: bd:7b:2c:f3:f7:9c:68:3c:3e:b8:20:76:38:eb:d4:8e:64:22: dd:4b:d8:4e:9d:9f:8e:88:af:88:93:d1:49:53:40:69:71:27: 3a:06:9f:27:69:0f:f8:19:d6:19:2c:7e:99:8a:42:bd:83:01: e4:6d:ef:a2:79:61:79:5d:8a:4b:bc:f6:96:98:c9:ff:35:01: 79:eb:27:1a:3b:3c:ac:98:2b:82:db:32:5c:97:cc:2e:11:b4: 79:12:d2:5e:2c:04:63:4c:62:0a:52:c2:86:03:33:35:9c:c6: ae:54:9d:fc:7d:44:f9:11:6d:c6:b1:cb:6c:a4:ef:68:c2:f7: f8:80:19:44:e7:bd:25:b3:1b:09:a3:59:91:00:f5:3b:68:0b: 19:0c:dd:f5:e9:ee:0e:0f:c7:ba:8c:bb:7b:33:e2:ba:09:70: a9:cc:67:95:83:a3:aa:b4:8b:80:af:64:4b:f6:8f:bf:86:4f: e4:59:61:f5:ea:06:36:55:a3:69:d4:db:53:f3:59:e0:a7:05: 50:d0:90:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu6/gpNmOuow7QJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MDIwNFoXDTI2MDEwNDE3MDIwNFowLzEtMCsGA1UEAxMk MGMxZGY4N2MtZjJlZC00MDIwLTgwZWEtZTFlMjVmMDc1NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqSySB7uM0zAWOZGztYyZ0OGX9YQcvukIrvA 5ohzdeT07MbQqYLzMT8bE+NsJ+GbeHz1xObO/PJmyl/NMdGHwASpoLne5G1Rhy4W VQGxB6iKRIsBaBUqvNuhOanIq2c90hkqkCm3sa0uzn6N1V3gc3vObG7HmJKbTUt7 ivaR+WtpxYvD1Gkex40Gwtqd1bm0sF2HGh05dwU9EcqRhZphwLKztKQSDh5TfhXm w18OY8t5aITMkBKkpw8+HE/R8nMza+jDiXFXDbphsum8z2CbQF4pL2BEk6zCVtBI sVS6uxPqlCxHtVetb8beG1NLduiPV5wGgWDjNt0BG8iNRvUY3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxVCnwiG4TWUhbx6vPhH9f0VPQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMDZjMWU1N2QtMjg0Zi0z OTYxLTkyMjQtNTY1ZTRmOWJjMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJNFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX9yiolIlp1FuaiKcr5I49rqHKIzjsnghkTqRQkPPSHzuqcvP0hcpdh UlDqILZkztn9n34cGr17LPP3nGg8Prggdjjr1I5kIt1L2E6dn46Ir4iT0UlTQGlx JzoGnydpD/gZ1hksfpmKQr2DAeRt76J5YXldiku89paYyf81AXnrJxo7PKyYK4Lb MlyXzC4RtHkS0l4sBGNMYgpSwoYDMzWcxq5Unfx9RPkRbcaxy2yk72jC9/iAGUTn vSWzGwmjWZEA9TtoCxkM3fXp7g4Px7qMu3sz4roJcKnMZ5WDo6q0i4CvZEv2j7+G T+RZYfXqBjZVo2nU21PzWeCnBVDQkJY= -----END CERTIFICATE-----Generated at Wed Oct 8 21:11:27 2025 by rpki-client