$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa File: cea6a4db-b45f-38c8-ba93-dab3703d562c.roa (raw, json) Hash identifier: qAsVZi4/dAq0SIH2006XCaz8z1AJ060cuxlRtMhbSro= Subject key identifier: D4:67:74:77:C6:79:9B:A0:F3:2D:DA:CA:A2:A8:EE:3F:CD:2B:11:D4 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584BBB758AE32FBEDB1E2D85EFB0 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 23158 IP address blocks: 192.16.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8a:e3:2f:be:db:1e:2d:85:ef:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=c2089e66-94e0-4932-9c68-2df4b483f785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:20:86:75:d7:69:ec:04:e1:87:50:4b:a1: 8a:c6:56:b8:fb:2f:d9:2b:d3:97:fc:b0:2e:35:d4: 83:0a:00:f6:f6:8a:da:d8:b3:24:4c:b4:e3:cb:7f: f4:76:bb:1f:bb:f2:79:b8:35:a4:f7:cd:e1:36:a5: f9:4d:f9:47:e4:42:d2:6a:e1:d7:4d:23:d0:96:8c: 1f:70:9f:03:d3:9a:6f:88:77:49:0e:89:fd:24:4a: 95:ae:36:94:07:00:f0:77:9d:ff:21:9a:94:25:17: 25:a9:ad:ca:8a:a4:33:fc:d7:2a:48:09:cf:4a:a1: 07:2d:c0:cb:7b:0a:16:8d:b5:54:58:80:6b:21:95: 95:0e:29:f8:8b:39:fe:58:ee:d2:1e:2e:d1:54:6b: e6:43:77:73:33:0f:be:bc:7b:c3:4e:d2:ca:02:e9: 71:f2:2d:c9:ba:3a:8e:2c:b3:41:47:68:72:77:1c: 77:95:27:12:44:9e:a1:fb:da:d4:17:d6:85:4b:42: 0f:1c:84:71:2b:bd:52:5d:99:16:e5:4e:4f:4f:27: 89:be:c5:a1:ac:03:d2:21:18:99:1e:6e:90:fc:96: 36:f0:e6:a9:58:2a:2b:59:f6:18:72:b2:26:f0:e3: 0c:85:9e:f4:61:8c:40:d3:72:f5:be:5e:61:46:fb: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:74:77:C6:79:9B:A0:F3:2D:DA:CA:A2:A8:EE:3F:CD:2B:11:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 192.16.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fd:1a:59:58:36:64:d9:16:72:de:ba:19:f8:9c:c9:75:79: f5:80:31:8d:a7:ee:58:13:fb:79:e2:c8:6a:aa:be:99:d8:0a: 5c:cb:26:b0:49:58:02:e1:71:b5:cc:ec:90:a6:f2:ad:8c:0f: 57:51:fb:95:0d:4d:88:4d:62:74:0c:7d:32:1e:40:b7:97:01: 8c:13:c3:a3:2b:0f:49:56:0b:7b:24:fb:29:89:3b:b8:8d:e5: be:88:3b:91:ad:1e:54:7a:1d:b2:66:56:17:1c:4a:93:ad:2d: 0a:2f:e8:bc:b9:17:9b:56:c6:f3:fa:43:f1:84:1a:3e:96:9e: e2:62:de:1f:f3:58:be:ab:24:77:06:34:47:f3:37:1e:20:fd: bb:2a:ef:0a:07:e7:b9:e2:78:a1:bb:1e:70:4b:48:e5:25:c0: 35:a7:cc:ed:7b:82:3b:d6:f8:0e:62:8e:45:97:d7:08:d7:4c: 09:7b:60:7e:68:dd:d1:11:49:de:7f:5b:ad:16:a2:ad:37:f7: 2b:73:a2:18:d2:03:84:12:4a:3c:5f:f6:12:62:a2:31:09:ed: cc:da:05:26:fd:83:82:82:49:fe:bb:0a:c1:81:42:71:17:23: 82:9a:69:e2:bb:a0:69:84:d1:98:18:a3:af:5d:07:ac:72:31: 28:17:bd:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYrjL77bHi2F77AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk YzIwODllNjYtOTRlMC00OTMyLTljNjgtMmRmNGI0ODNmNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYIghnXXaewE4YdQS6GKxla4+y/ZK9OX/LAu NdSDCgD29ora2LMkTLTjy3/0drsfu/J5uDWk983hNqX5TflH5ELSauHXTSPQlowf cJ8D05pviHdJDon9JEqVrjaUBwDwd53/IZqUJRclqa3KiqQz/NcqSAnPSqEHLcDL ewoWjbVUWIBrIZWVDin4izn+WO7SHi7RVGvmQ3dzMw++vHvDTtLKAulx8i3JujqO LLNBR2hydxx3lScSRJ6h+9rUF9aFS0IPHIRxK71SXZkW5U5PTyeJvsWhrAPSIRiZ Hm6Q/JY28OapWCorWfYYcrIm8OMMhZ70YYxA03L1vl5hRvvL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRndHfGeZug8y3ayqKo7j/NKxHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvY2VhNmE0ZGItYjQ1Zi0z OGM4LWJhOTMtZGFiMzcwM2Q1NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL9GllYNmTZFnLeuhn4nMl1efWAMY2n7lgT+3niyGqqvpnYClzLJrBJ WALhcbXM7JCm8q2MD1dR+5UNTYhNYnQMfTIeQLeXAYwTw6MrD0lWC3sk+ymJO7iN 5b6IO5GtHlR6HbJmVhccSpOtLQov6Ly5F5tWxvP6Q/GEGj6WnuJi3h/zWL6rJHcG NEfzNx4g/bsq7woH57nieKG7HnBLSOUlwDWnzO17gjvW+A5ijkWX1wjXTAl7YH5o 3dERSd5/W60Woq039ytzohjSA4QSSjxf9hJiojEJ7czaBSb9g4KCSf67CsGBQnEX I4KaaeK7oGmE0ZgYo69dB6xyMSgXvZA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:11 2025 by rpki-client