$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/2d04a8b3-399b-3dfe-a10d-7ca681874369.roa File: 2d04a8b3-399b-3dfe-a10d-7ca681874369.roa (raw, json) Hash identifier: ejQ/SOvFcepNLIlFvOTQDaiByI9D5rAtoULozDa+XP4= Subject key identifier: F9:BD:0D:CE:2C:C3:9B:EB:F1:9F:B9:63:8B:19:BC:62:9B:AB:92:9C Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584B9B4B243CC489D96C98E2FF80 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/2d04a8b3-399b-3dfe-a10d-7ca681874369.roa Signing time: Wed 22 Oct 2025 13:29:24 +0000 ROA not before: Wed 22 Oct 2025 13:29:24 +0000 ROA not after: Tue 20 Jan 2026 14:29:24 +0000 asID: 10753 IP address blocks: 192.228.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:4b:24:3c:c4:89:d9:6c:98:e2:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Oct 22 13:29:24 2025 GMT Not After : Jan 20 14:29:24 2026 GMT Subject: CN=98061799-aea0-446f-8676-254c1547cc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:82:b7:c2:bb:d8:f2:44:3b:d0:cb:6e:72: c1:03:d6:ab:25:93:cb:d0:79:2d:e8:60:75:33:af: d9:97:45:76:85:f7:5c:35:f0:e7:47:62:32:b5:67: eb:e0:48:14:38:57:cd:a0:9b:e7:4c:b4:69:bd:69: e5:2b:a7:c8:d0:9f:a7:3e:d9:b9:ad:49:92:4a:15: aa:80:e0:e6:66:59:5f:5b:04:05:3a:44:45:fd:8c: 82:7e:79:98:9b:b7:51:b4:2e:0a:12:45:08:35:57: 52:56:21:2f:67:4a:5b:85:2d:a1:ac:e6:db:51:55: 6c:16:7a:c8:b6:59:23:cb:c1:ea:81:fa:59:92:0c: 31:c7:7e:82:03:67:2a:7e:81:00:01:ee:dc:9a:c3: 15:44:cf:84:3e:8e:6c:f7:c9:c9:27:1e:5a:1b:2f: 00:6b:88:61:70:48:c1:4c:67:e3:bc:fa:b6:e0:01: 1b:29:65:74:5a:9e:ba:1e:97:60:ea:13:0c:5a:ae: 57:7a:fb:13:7c:30:59:59:f1:7b:32:dc:4e:8e:5a: b4:f7:f7:40:dc:e8:a0:68:e8:24:3f:f1:c8:fd:0b: cd:b4:9d:51:9c:1a:8c:c5:6a:f5:cc:8d:4b:9e:ac: 99:02:ab:60:19:ab:dc:c4:17:c8:ea:93:0a:9f:bd: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:0D:CE:2C:C3:9B:EB:F1:9F:B9:63:8B:19:BC:62:9B:AB:92:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/2d04a8b3-399b-3dfe-a10d-7ca681874369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:58:dc:11:3c:a2:a8:21:4c:0a:e9:1a:1f:ea:e3:02:98:4b: 75:f3:f7:0d:bc:e7:f6:97:97:8a:53:9c:09:44:d3:c9:90:1b: 47:57:0e:92:92:11:18:37:94:77:c4:63:f5:b4:79:93:b4:18: 10:96:b1:05:1e:ad:31:8a:fe:55:7a:c7:18:c2:64:3c:cd:8f: b9:cd:43:37:4f:0d:58:53:a7:5a:58:15:fd:3b:df:4c:91:58: 30:c8:89:bd:b4:86:77:30:60:f9:c6:7c:13:eb:d6:27:49:44: 3f:71:3a:22:21:6a:85:1a:ad:dc:79:b7:82:21:23:fa:d6:77: c1:36:1c:d5:05:9e:38:b8:fb:bf:b5:f4:75:fe:6d:92:ca:cb: f5:3c:e7:23:65:75:aa:0a:91:26:16:6d:3e:8c:2d:fa:bd:b9: b4:4e:77:73:dc:c7:7e:96:80:a9:20:f8:9a:08:83:37:83:65: 3a:10:22:98:ec:1a:1c:d7:fc:e3:28:c4:aa:65:68:10:bb:f6: 07:f4:7a:a4:15:d3:34:5d:2a:17:c8:cf:ba:39:ab:2e:58:a8: cc:a1:f7:3a:dc:de:ed:48:bc:a8:cc:12:13:f7:e0:1f:73:2c: 50:df:d4:74:5f:a6:29:e2:0f:69:2d:52:4b:c4:fd:86:1c:c4: 26:8b:85:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubSyQ8xInZbJji/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI1MTAyMjEzMjkyNFoXDTI2MDEyMDE0MjkyNFowLzEtMCsGA1UEAxMk OTgwNjE3OTktYWVhMC00NDZmLTg2NzYtMjU0YzE1NDdjYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinmCt8K72PJEO9DLbnLBA9arJZPL0Hkt6GB1 M6/Zl0V2hfdcNfDnR2IytWfr4EgUOFfNoJvnTLRpvWnlK6fI0J+nPtm5rUmSShWq gODmZllfWwQFOkRF/YyCfnmYm7dRtC4KEkUINVdSViEvZ0pbhS2hrObbUVVsFnrI tlkjy8HqgfpZkgwxx36CA2cqfoEAAe7cmsMVRM+EPo5s98nJJx5aGy8Aa4hhcEjB TGfjvPq24AEbKWV0Wp66Hpdg6hMMWq5XevsTfDBZWfF7MtxOjlq09/dA3OigaOgk P/HI/QvNtJ1RnBqMxWr1zI1LnqyZAqtgGavcxBfI6pMKn723JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm9Dc4sw5vr8Z+5Y4sZvGKbq5KcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvMmQwNGE4YjMtMzk5Yi0z ZGZlLWExMGQtN2NhNjgxODc0MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1Y3BE8oqghTArpGh/q4wKYS3Xz9w285/aXl4pTnAlE08mQG0dXDpKS ERg3lHfEY/W0eZO0GBCWsQUerTGK/lV6xxjCZDzNj7nNQzdPDVhTp1pYFf0730yR WDDIib20hncwYPnGfBPr1idJRD9xOiIhaoUardx5t4IhI/rWd8E2HNUFnji4+7+1 9HX+bZLKy/U85yNldaoKkSYWbT6MLfq9ubROd3Pcx36WgKkg+JoIgzeDZToQIpjs GhzX/OMoxKplaBC79gf0eqQV0zRdKhfIz7o5qy5YqMyh9zrc3u1IvKjMEhP34B9z LFDf1HRfpiniD2ktUkvE/YYcxCaLhY0= -----END CERTIFICATE-----Generated at Thu Oct 30 05:46:30 2025 by rpki-client