$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/74dbfa44-be5b-3c46-98c1-de59c3f7b697.roa File: 74dbfa44-be5b-3c46-98c1-de59c3f7b697.roa (raw, json) Hash identifier: 0DFOy5Xk2z3f3DRittjYdpDb++uUfVO9wteRBqgPCtM= Subject key identifier: 98:07:6E:2C:D5:57:AE:42:9B:75:C2:F6:2E:15:07:EB:01:DD:24:6F Certificate issuer: /CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc Certificate serial: 010D0C9F4328584B3D46F0FCAF918B527D30FF80 Authority key identifier: E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/74dbfa44-be5b-3c46-98c1-de59c3f7b697.roa Signing time: Thu 18 Sep 2025 21:14:57 +0000 ROA not before: Thu 18 Sep 2025 21:14:57 +0000 ROA not after: Wed 17 Dec 2025 22:14:57 +0000 asID: 46592 IP address blocks: 192.228.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:46:f0:fc:af:91:8b:52:7d:30:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc Validity Not Before: Sep 18 21:14:57 2025 GMT Not After : Dec 17 22:14:57 2025 GMT Subject: CN=012aa08a-d56d-441f-935c-667a7dc39114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7f:49:ee:c9:76:88:77:2e:06:ec:7e:e9:73: 67:81:d7:d1:2f:75:ed:e1:4f:20:71:b3:df:81:b6: 87:83:dd:2f:ed:e0:c0:98:a6:5c:37:18:af:12:96: f0:82:30:06:03:60:b4:fb:d1:e1:04:ea:f8:e3:d3: 52:86:f7:ee:62:92:bb:2d:7a:ef:e8:b6:72:12:79: e6:4f:cf:59:4a:98:89:78:5d:71:c6:33:12:f9:8a: 24:e8:a6:a4:67:13:f5:2f:9f:6a:08:45:bf:88:fa: a9:58:49:72:4b:98:de:ae:98:3c:0c:d5:65:97:43: a4:42:5d:95:cc:c2:b6:d8:ef:92:ed:33:56:77:71: d0:a2:cb:19:e8:4d:6f:15:4b:a5:86:04:ec:03:64: 8d:57:bc:32:05:8e:78:8a:7d:0c:e0:21:7d:5a:97: fc:08:74:97:1a:44:37:92:9c:79:5e:c1:7e:47:c4: 0b:47:ae:94:95:dc:30:38:47:e6:52:5d:8f:5a:8a: d8:01:3c:17:28:52:ce:dd:69:9f:35:f4:fb:6b:32: f9:12:9e:3c:3c:02:aa:1e:f1:68:98:3a:69:df:ee: 1e:61:79:b0:22:a5:ea:d6:4d:9a:d7:18:ee:21:84: 19:37:06:d2:23:61:3b:ca:ba:9d:e3:b5:90:e9:67: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:6E:2C:D5:57:AE:42:9B:75:C2:F6:2E:15:07:EB:01:DD:24:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/74dbfa44-be5b-3c46-98c1-de59c3f7b697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl X509v3 Authority Key Identifier: keyid:E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer sbgp-ipAddrBlock: critical IPv4: 192.228.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:0e:7f:5e:dc:a2:92:3d:b9:30:a7:8c:ef:bd:88:83:f5:d3: 3f:9f:7c:58:31:1d:07:77:fd:22:fa:7e:60:65:af:c2:01:ea: 9a:98:0b:17:dd:e0:f7:59:0d:ca:1f:54:23:cc:23:93:e6:56: 44:11:ad:c4:a0:a2:e2:dc:1b:26:31:bf:df:1b:60:f7:c5:7c: 4d:32:7a:91:78:c4:a1:ed:ee:53:a8:f2:07:ca:bc:e4:93:b2: 3a:fc:18:5c:88:30:28:0a:f2:32:6d:e5:80:be:5d:04:18:04: 9c:6d:e4:88:79:54:d1:30:a2:dc:dc:e9:0f:a0:8e:1f:8e:a4: 1e:43:df:bd:61:b4:4a:83:6f:ea:a1:7f:01:ca:37:45:d3:98: b9:dd:9a:4f:ae:a8:9e:ae:fb:f2:0b:e2:35:e6:38:bd:68:f0: ba:36:15:3a:cc:05:a1:72:0b:74:10:2d:53:6e:b4:ca:13:2f: f6:ca:4c:8f:27:87:75:e5:f2:c5:9f:60:f9:ba:c0:e0:18:e0: 42:f0:b5:f7:87:c8:91:29:b7:58:d7:88:9b:7c:56:94:e1:ba: a5:6f:b2:35:75:10:eb:dc:be:c1:db:c3:6f:ef:a3:ba:59:12: 83:7d:3c:f3:c9:3a:f7:a9:48:b2:f7:62:84:cc:aa:fa:40:f1: d9:a8:06:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9RvD8r5GLUn0w/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZkY2U0ZGQtYWE0YS00MDc3LWFhNTAtOGU5MzVkNjYw ZWRjMB4XDTI1MDkxODIxMTQ1N1oXDTI1MTIxNzIyMTQ1N1owLzEtMCsGA1UEAxMk MDEyYWEwOGEtZDU2ZC00NDFmLTkzNWMtNjY3YTdkYzM5MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi39J7sl2iHcuBux+6XNngdfRL3Xt4U8gcbPf gbaHg90v7eDAmKZcNxivEpbwgjAGA2C0+9HhBOr449NShvfuYpK7LXrv6LZyEnnm T89ZSpiJeF1xxjMS+Yok6KakZxP1L59qCEW/iPqpWElyS5jerpg8DNVll0OkQl2V zMK22O+S7TNWd3HQossZ6E1vFUulhgTsA2SNV7wyBY54in0M4CF9Wpf8CHSXGkQ3 kpx5XsF+R8QLR66UldwwOEfmUl2PWorYATwXKFLO3WmfNfT7azL5Ep48PAKqHvFo mDpp3+4eYXmwIqXq1k2a1xjuIYQZNwbSI2E7yrqd47WQ6WfrZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgHbizVV65Cm3XC9i4VB+sB3SRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNmRj ZTRkZC1hYTRhLTQwNzctYWE1MC04ZTkzNWQ2NjBlZGMvNzRkYmZhNDQtYmU1Yi0z YzQ2LTk4YzEtZGU1OWMzZjdiNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzZkY2U0ZGQtYWE0YS00MDc3LWFh NTAtOGU5MzVkNjYwZWRjL2M2ZGNlNGRkLWFhNGEtNDA3Ny1hYTUwLThlOTM1ZDY2 MGVkYy5jcmwwHwYDVR0jBBgwFoAU4EenHIvvO/Nwa21Aa+0DAelf01gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNmRjZTRkZC1hYTRhLTQwNzctYWE1MC04ZTkz NWQ2NjBlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwOQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQOf17copI9uTCnjO+9iIP10z+ffFgxHQd3/SL6fmBlr8IB6pqYCxfd 4PdZDcofVCPMI5PmVkQRrcSgouLcGyYxv98bYPfFfE0yepF4xKHt7lOo8gfKvOST sjr8GFyIMCgK8jJt5YC+XQQYBJxt5Ih5VNEwotzc6Q+gjh+OpB5D371htEqDb+qh fwHKN0XTmLndmk+uqJ6u+/IL4jXmOL1o8Lo2FTrMBaFyC3QQLVNutMoTL/bKTI8n h3Xl8sWfYPm6wOAY4ELwtfeHyJEpt1jXiJt8VpThuqVvsjV1EOvcvsHbw2/vo7pZ EoN9PPPJOvepSLL3YoTMqvpA8dmoBjE= -----END CERTIFICATE-----Generated at Wed Oct 8 20:59:53 2025 by rpki-client