$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa File: 8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json) Hash identifier: 6M3NB2CDvPt853JYWk8lPIJ3YoMWy8ECOAfKE02YMfo= Subject key identifier: 07:D2:32:2A:BB:D6:70:F1:24:1B:AE:66:5A:AA:D3:4D:87:26:CE:2F Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584BBA104AB1D508F573F52CF200 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 30158 IP address blocks: 199.189.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4a:b1:d5:08:f5:73:f5:2c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=b1c1fceb-fd5a-4af8-bc54-309aefa563e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:22:bf:2b:e7:a1:b0:85:5b:86:5e:61:f7: cb:0e:fc:9b:5b:1a:1b:b3:fc:0d:9d:0e:37:80:96: 2d:2b:df:0a:b2:f0:f1:c6:f6:b3:13:d2:6e:59:1a: 11:27:1f:52:03:88:b9:f6:1b:9c:6c:a9:fa:4d:27: a6:14:f1:76:b9:ad:15:80:73:55:f0:42:97:93:85: 20:b5:64:de:95:53:cc:60:59:2a:b9:99:71:a1:c5: 55:19:66:4a:92:d2:44:96:38:bf:39:9e:2f:05:62: 0e:6b:57:eb:ca:51:ef:1f:ba:82:79:ee:c9:46:9c: c1:46:82:58:70:c5:48:4b:11:c3:23:24:b7:7d:74: 24:f4:ac:19:11:0d:ae:d8:73:a3:59:9b:bc:fc:2c: 2f:6c:ea:dc:f2:b9:1e:d3:44:dc:36:6c:ba:1f:cb: 0b:be:5c:2a:ed:cb:a3:5f:e7:82:2f:d7:db:da:e0: 59:67:23:ca:72:80:31:68:cb:c8:1f:0a:ce:46:ab: bf:18:78:10:bc:12:f2:0f:e6:77:53:b0:74:1e:ad: 6d:35:f5:74:23:61:28:94:5b:26:42:32:a7:e1:49: 52:68:d4:39:42:5c:4f:71:b4:d6:fc:e8:f8:c8:6a: ed:02:d9:fd:ec:d4:10:97:ba:93:17:73:92:9f:fc: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D2:32:2A:BB:D6:70:F1:24:1B:AE:66:5A:AA:D3:4D:87:26:CE:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f6:e0:db:67:eb:ed:e7:54:4f:d6:dc:36:f0:c0:bc:6c:0d: 90:84:2a:95:b4:89:c1:d4:4e:fa:3c:7b:73:de:2a:f7:9c:5d: fe:f6:be:ef:fb:4a:92:43:2d:71:da:af:f8:97:0a:42:07:c7: 63:0f:e0:93:d6:96:b5:40:ab:e9:bc:22:33:2e:b7:57:a8:3d: c8:c1:21:47:90:2f:54:9a:b6:e5:eb:80:43:96:0c:02:21:45: fa:1a:c0:6b:1d:5c:61:f6:76:c4:a2:df:c6:1e:9f:cf:cc:b3: 3e:84:ed:50:b8:1d:2c:76:68:24:88:9a:d2:23:79:84:35:0c: fd:40:c2:b5:00:0e:dd:33:71:e6:8c:94:5d:da:c4:c2:66:46: 4a:94:38:a3:52:57:3c:cf:87:d2:3e:6e:9c:25:54:38:a0:f6: 3a:3f:eb:1d:c5:cb:04:ee:50:25:8e:90:5b:19:55:fc:e4:f1: 40:83:e0:70:24:f0:a9:29:88:48:fb:71:4f:56:84:5b:13:e7: 5c:a8:57:3b:c6:23:1d:c9:f2:63:49:0b:86:dd:4b:e1:19:5e: b0:6c:59:c3:31:ea:3c:50:6a:bd:69:2f:d7:a9:18:04:6a:b4: 41:d5:5c:31:fa:08:bb:d4:d3:0e:02:1c:65:51:12:4e:91:ec: 19:31:d0:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEqx1Qj1c/Us8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YjFjMWZjZWItZmQ1YS00YWY4LWJjNTQtMzA5YWVmYTU2M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI8ivyvnobCFW4ZeYffLDvybWxobs/wNnQ43 gJYtK98KsvDxxvazE9JuWRoRJx9SA4i59hucbKn6TSemFPF2ua0VgHNV8EKXk4Ug tWTelVPMYFkquZlxocVVGWZKktJElji/OZ4vBWIOa1frylHvH7qCee7JRpzBRoJY cMVISxHDIyS3fXQk9KwZEQ2u2HOjWZu8/CwvbOrc8rke00TcNmy6H8sLvlwq7cuj X+eCL9fb2uBZZyPKcoAxaMvIHwrORqu/GHgQvBLyD+Z3U7B0Hq1tNfV0I2EolFsm QjKn4UlSaNQ5QlxPcbTW/Oj4yGrtAtn97NQQl7qTF3OSn/wWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfSMiq71nDxJBuuZlqq002HJs4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvOGI4YTg1YjAtZTE1Mi0z NDBkLTk1NTItZDU3MWI2MThhMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET24Ntn6+3nVE/W3DbwwLxsDZCEKpW0icHUTvo8e3PeKvecXf72vu/7 SpJDLXHar/iXCkIHx2MP4JPWlrVAq+m8IjMut1eoPcjBIUeQL1SatuXrgEOWDAIh RfoawGsdXGH2dsSi38Yen8/Msz6E7VC4HSx2aCSImtIjeYQ1DP1AwrUADt0zceaM lF3axMJmRkqUOKNSVzzPh9I+bpwlVDig9jo/6x3FywTuUCWOkFsZVfzk8UCD4HAk 8KkpiEj7cU9WhFsT51yoVzvGIx3J8mNJC4bdS+EZXrBsWcMx6jxQar1pL9epGARq tEHVXDH6CLvU0w4CHGVREk6R7Bkx0HQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:28 2025 by rpki-client