$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/c87759cf-1bc5-3073-9781-94959a15eec3.roa File: c87759cf-1bc5-3073-9781-94959a15eec3.roa (raw, json) Hash identifier: gHmJcz0heiwZ6segDxT8dwM+BDCJ9YCzDzIvWSa0DaY= Subject key identifier: 22:26:33:A6:70:AD:58:3D:46:F6:26:6C:A6:33:15:D5:09:44:EE:32 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D1C3CF134698D8ED46100 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/c87759cf-1bc5-3073-9781-94959a15eec3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 192.158.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1c:3c:f1:34:69:8d:8e:d4:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=4e938868-4da1-4beb-922b-7a77f2d43bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:50:f8:ed:f6:63:c2:c0:d6:1a:49:21:dc: 6d:be:c7:13:26:7f:f7:73:42:f4:f2:59:51:61:22: 0d:3e:03:27:de:4d:5f:e7:1e:9a:de:47:97:6c:8e: a6:ff:32:3f:73:7b:52:01:5f:05:96:59:a1:50:64: f2:26:37:46:e2:88:a7:3c:3c:01:f3:8c:12:f7:bc: b8:3c:b0:ad:a8:4c:be:a9:e6:aa:20:12:8d:f8:38: cf:97:23:3d:6b:ec:d7:a0:26:40:90:79:c1:26:a0: ea:ef:9b:2e:76:bc:e3:50:15:cd:1e:78:ed:6e:3d: 24:0c:e6:94:5e:2f:e1:a6:29:ec:8b:61:c4:dd:11: 48:65:3d:3e:42:70:07:a9:64:43:e5:cc:1a:e4:c5: 86:34:a4:56:8e:62:5c:9a:1e:2d:9f:01:4d:64:73: b9:0e:1a:34:81:7a:64:21:cd:20:83:5c:35:16:2f: ae:d9:2a:4f:98:2b:86:52:76:a5:c8:8c:64:b0:f6: 65:f2:c4:ca:9c:15:21:7d:24:cc:ae:3f:80:e0:1e: 25:a4:44:75:84:15:e1:f0:c6:e4:88:7e:31:1d:f3: d3:93:b7:6c:78:b6:c0:d9:73:46:b5:a7:d8:ab:e0: 86:d1:11:93:90:f5:a3:2a:9b:47:a5:63:8b:34:7d: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:26:33:A6:70:AD:58:3D:46:F6:26:6C:A6:33:15:D5:09:44:EE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/c87759cf-1bc5-3073-9781-94959a15eec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 192.158.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1d:ed:fd:eb:a9:32:31:0d:fa:4a:26:21:f8:4c:2d:c8:b3: 03:f7:60:8b:cb:32:7f:b4:de:54:e4:5a:0e:14:88:cf:cc:38: 74:c7:0c:7f:f4:3b:da:67:05:39:e9:07:6c:d7:e7:10:f1:7f: fd:de:87:57:76:fd:e9:9d:8b:a7:66:f7:4e:4a:e5:4b:7d:40: ac:e3:be:05:0c:75:8a:b1:7c:fa:74:74:f4:96:17:6e:37:8c: 07:f7:d1:34:a0:ae:47:ba:9c:f7:30:8e:21:43:1c:47:c0:9a: b8:24:a5:2a:95:ba:14:44:c8:23:f6:7c:af:c0:35:23:87:bc: 20:fd:78:80:b0:87:3b:67:9f:7f:01:93:03:83:7a:e8:37:d6: 14:a1:82:c7:22:10:a3:b8:fa:61:ea:c6:7e:36:16:6b:36:28: ad:7b:07:b8:1f:30:38:73:98:bd:31:b5:8b:92:b8:df:a0:31: f9:d7:3c:e6:11:7f:b0:2c:e0:15:96:74:0b:16:64:d8:5f:06: 0a:88:8e:c8:8e:6c:82:87:5a:15:33:22:cc:19:06:02:26:cd: be:16:d6:01:1d:1c:33:9b:70:14:ed:40:c4:38:b2:c5:cf:19: cc:84:06:e0:5f:f5:9d:a2:f9:72:c6:eb:c2:37:88:e6:68:b4: 99:be:fa:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRw88TRpjY7UYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NGU5Mzg4NjgtNGRhMS00YmViLTkyMmItN2E3N2YyZDQzYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQNQ+O32Y8LA1hpJIdxtvscTJn/3c0L08llR YSINPgMn3k1f5x6a3keXbI6m/zI/c3tSAV8FllmhUGTyJjdG4oinPDwB84wS97y4 PLCtqEy+qeaqIBKN+DjPlyM9a+zXoCZAkHnBJqDq75sudrzjUBXNHnjtbj0kDOaU Xi/hpinsi2HE3RFIZT0+QnAHqWRD5cwa5MWGNKRWjmJcmh4tnwFNZHO5Dho0gXpk Ic0gg1w1Fi+u2SpPmCuGUnalyIxksPZl8sTKnBUhfSTMrj+A4B4lpER1hBXh8Mbk iH4xHfPTk7dseLbA2XNGtafYq+CG0RGTkPWjKptHpWOLNH3i8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCImM6ZwrVg9RvYmbKYzFdUJRO4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYzg3NzU5Y2YtMWJjNS0z MDczLTk3ODEtOTQ5NTlhMTVlZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcd7f3rqTIxDfpKJiH4TC3IswP3YIvLMn+03lTkWg4UiM/MOHTHDH/0 O9pnBTnpB2zX5xDxf/3eh1d2/emdi6dm905K5Ut9QKzjvgUMdYqxfPp0dPSWF243 jAf30TSgrke6nPcwjiFDHEfAmrgkpSqVuhREyCP2fK/ANSOHvCD9eICwhztnn38B kwODeug31hShgsciEKO4+mHqxn42Fms2KK17B7gfMDhzmL0xtYuSuN+gMfnXPOYR f7As4BWWdAsWZNhfBgqIjsiObIKHWhUzIswZBgImzb4W1gEdHDObcBTtQMQ4ssXP GcyEBuBf9Z2i+XLG68I3iOZotJm++ns= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:50 2025 by rpki-client