$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa File: 0e07f313-ba74-3140-a996-a0639aa53e0b.roa (raw, json) Hash identifier: lFZuAwzt0Tk91DsihhngAUGaBwi1Fs9MovIQXEIP/B8= Subject key identifier: C7:66:64:3D:95:F5:1F:BD:4E:45:65:9E:81:D7:92:69:E8:2C:43:18 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B4D11D673AFB7EAB16D637700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 3360 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d6:73:af:b7:ea:b1:6d:63:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=006ad5cb-4505-4482-b110-23b542ab567a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2e:97:5c:f4:6a:3c:93:10:3d:58:fa:5b:f2: 0f:c4:65:ae:fa:e8:55:2b:78:07:fd:bf:fb:9d:bc: 38:af:e8:a9:b7:86:96:63:b6:9a:52:83:ee:38:15: 03:61:d5:d1:ef:9a:ab:d4:82:5a:fa:f1:74:86:a7: 0f:0a:e1:2f:d8:c3:c8:4a:7a:a1:73:9a:56:ad:67: da:aa:c2:22:77:19:bc:f6:68:46:7f:4c:ff:9e:a0: 66:2e:12:40:65:eb:60:1a:4b:95:9c:63:43:d2:50: a7:72:ea:cf:de:01:14:21:3d:d8:82:53:ce:75:09: ba:9a:8c:a7:e1:9d:3e:f3:d2:cf:ac:c7:fd:c1:9c: ac:60:cc:5b:d5:bd:fe:d2:90:a2:1a:d5:a7:f5:64: 02:1e:eb:59:98:a0:72:32:4f:a0:c3:40:86:cc:b5: 33:84:1b:7e:5f:30:fe:82:1f:25:43:ba:b2:87:2b: 2b:ff:fd:91:d4:7a:74:53:b9:76:2a:f6:cd:15:05: ca:e6:6b:28:f4:d4:e7:cf:f0:a5:db:cc:22:12:d0: ff:46:53:02:21:34:b4:92:7d:5a:31:c2:dc:1b:f5: 9e:f8:1c:f7:53:d9:5d:b9:2e:db:c5:ee:a0:81:39: b3:ca:28:2d:0e:7c:9c:9f:2d:1a:4a:c8:72:64:a5: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:66:64:3D:95:F5:1F:BD:4E:45:65:9E:81:D7:92:69:E8:2C:43:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:67:51:c4:a2:07:b1:dc:c2:12:57:10:98:0e:23:a3:6b:8a: 2c:0b:d7:65:74:77:56:de:09:90:6e:55:70:9d:cd:79:38:8a: 18:9a:94:f0:90:0b:35:da:cb:14:bd:2d:6b:62:35:da:3b:0f: 5e:2a:73:b8:de:e8:83:7e:8a:a0:1b:58:cf:77:62:c0:9d:45: 74:00:5b:ad:88:3a:93:a3:2f:f8:52:d0:46:82:4c:03:75:25: 6c:f3:9f:75:3d:f7:21:f5:07:7a:62:20:5d:9a:b6:8d:96:b4: f6:d7:41:e8:d3:4e:9d:b1:21:3b:43:18:ee:a4:d7:ff:4e:d2: 4f:5f:08:f1:34:5b:37:22:40:66:6e:49:bb:47:94:fe:7c:a1: 01:ea:37:6f:79:3e:c7:69:a7:51:00:b0:2a:01:d1:c6:b2:05: bf:93:9b:c0:22:86:1f:73:3d:72:34:d5:44:8c:94:e2:6c:b8: ea:f4:7f:f8:43:e2:94:41:81:35:79:28:cb:9a:27:d9:18:47: a3:1d:cd:a4:24:56:94:78:ab:1a:6a:7b:0d:c6:4b:52:3e:0c: 00:69:39:e7:08:af:93:2b:a0:cb:24:13:5c:27:47:39:f7:96: 0c:54:6f:e7:36:86:56:ec:b0:a1:51:79:3d:66:d0:51:56:34: 44:e4:9b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdZzr7fqsW1jdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MDA2YWQ1Y2ItNDUwNS00NDgyLWIxMTAtMjNiNTQyYWI1NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi6XXPRqPJMQPVj6W/IPxGWu+uhVK3gH/b/7 nbw4r+ipt4aWY7aaUoPuOBUDYdXR75qr1IJa+vF0hqcPCuEv2MPISnqhc5pWrWfa qsIidxm89mhGf0z/nqBmLhJAZetgGkuVnGND0lCncurP3gEUIT3YglPOdQm6moyn 4Z0+89LPrMf9wZysYMxb1b3+0pCiGtWn9WQCHutZmKByMk+gw0CGzLUzhBt+XzD+ gh8lQ7qyhysr//2R1Hp0U7l2KvbNFQXK5mso9NTnz/Cl28wiEtD/RlMCITS0kn1a McLcG/We+Bz3U9lduS7bxe6ggTmzyigtDnycny0aSshyZKUGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdmZD2V9R+9TkVlnoHXkmnoLEMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGUwN2YzMTMtYmE3NC0z MTQwLWE5OTYtYTA2MzlhYTUzZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlnUcSiB7HcwhJXEJgOI6NriiwL12V0d1beCZBuVXCdzXk4ihialPCQ CzXayxS9LWtiNdo7D14qc7je6IN+iqAbWM93YsCdRXQAW62IOpOjL/hS0EaCTAN1 JWzzn3U99yH1B3piIF2ato2WtPbXQejTTp2xITtDGO6k1/9O0k9fCPE0WzciQGZu SbtHlP58oQHqN295Psdpp1EAsCoB0cayBb+Tm8Aihh9zPXI01USMlOJsuOr0f/hD 4pRBgTV5KMuaJ9kYR6MdzaQkVpR4qxpqew3GS1I+DABpOecIr5MroMskE1wnRzn3 lgxUb+c2hlbssKFReT1m0FFWNETkm0s= -----END CERTIFICATE-----Generated at Tue Oct 28 17:52:05 2025 by rpki-client