$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa File: a8472b68-cb56-34fd-b329-455d887033e9.roa (raw, json) Hash identifier: Yd8hCdTq9XwDCXcxsdUGeDLwA0pS/HH1Bf3/DXEj21c= Subject key identifier: 41:3F:52:B6:CF:D5:40:33:1B:11:81:7B:2B:91:17:1B:FD:47:AD:2A Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F4328584B5DD1EF72648FF1B093D44C00 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 1100 IP address blocks: 185.216.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ef:72:64:8f:f1:b0:93:d4:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=8f53401a-5e36-4e93-83ff-928ceda2b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:eb:04:e8:ad:a2:db:83:91:fd:27:7e:ca: ed:6b:19:2e:9e:b2:43:81:93:eb:bc:7f:9a:8e:dc: a5:3a:a2:9b:29:c5:83:b8:c7:24:ea:d7:f6:a6:3d: 90:1f:e4:91:f2:4a:a3:85:41:fb:25:c9:a1:42:cf: 87:5f:57:dd:07:1c:b0:46:e7:96:d9:99:ae:1a:f0: 0b:af:cf:b0:3b:2b:bc:22:65:6e:85:a2:ec:d3:2c: 2c:df:d0:0e:06:08:25:52:8a:1a:55:df:fa:7d:88: 5d:fd:dc:47:a4:2d:dc:15:2e:bc:39:a7:f9:ed:92: 82:b7:94:96:fd:77:53:b6:1a:08:4b:69:52:af:c4: fe:72:74:eb:91:a3:f8:d7:a6:a2:05:7e:24:a9:51: 9a:60:4d:ea:50:43:29:82:3d:61:56:d5:75:0f:4c: c3:c0:09:9a:ea:42:f6:bd:bd:b2:de:04:af:c1:67: 9d:14:e4:92:bc:f4:b2:aa:03:65:76:32:13:85:af: b3:9f:7b:9a:25:4e:85:af:17:83:31:13:09:bd:38: 82:0e:7e:a2:8d:0c:90:94:4b:14:c8:72:5e:7b:e8: b4:ea:1f:d8:b8:03:a5:3b:68:b6:6a:31:0b:25:63: 4a:64:f5:79:63:84:35:8a:b7:ec:0f:8e:d2:6e:ec: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3F:52:B6:CF:D5:40:33:1B:11:81:7B:2B:91:17:1B:FD:47:AD:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a5:fa:7c:05:11:ff:10:9d:46:83:4c:61:ec:b1:4c:29:7c: fb:6a:52:71:ef:55:0f:0b:34:91:0d:85:bf:ef:00:69:41:35: 16:46:47:ae:c7:ed:cc:38:ad:eb:a7:db:da:d2:3c:ad:88:d0: 56:25:3c:67:16:f6:b0:ff:b0:5c:d5:03:ef:c5:b8:f7:72:42: da:15:1c:a8:11:f5:ba:45:3f:a4:eb:ce:a5:c2:3a:3c:b3:75: 4b:43:4f:20:43:83:e6:d9:f7:15:b3:04:26:25:bb:de:1e:bb: 03:8e:11:d3:0b:1d:5a:fc:b8:57:d1:4b:d9:7a:06:8e:ca:9b: 76:78:d5:9a:b7:ae:80:27:37:72:c0:53:9f:7b:cb:35:ad:54: 25:f5:a5:5f:b5:82:e4:8c:38:db:23:de:6a:1d:8d:2b:1c:a6: b1:5d:02:2a:66:4d:57:93:70:3b:36:46:d0:ef:09:28:97:93: 03:00:5b:2c:c6:84:d9:2b:07:fe:42:96:6a:40:3d:5b:0b:90: f5:76:3c:eb:87:d0:1e:4f:a7:1b:d4:08:94:6f:f0:17:b5:90: 2a:fc:90:5f:53:98:ee:5d:49:ab:d4:3c:c3:c3:ac:c2:fb:26: ab:47:b1:42:e5:dd:8f:c5:b2:8b:1b:5c:53:37:11:08:41:15: 93:e9:c5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0e9yZI/xsJPUTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OGY1MzQwMWEtNWUzNi00ZTkzLTgzZmYtOTI4Y2VkYTJiOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivfrBOitotuDkf0nfsrtaxkunrJDgZPrvH+a jtylOqKbKcWDuMck6tf2pj2QH+SR8kqjhUH7JcmhQs+HX1fdBxywRueW2ZmuGvAL r8+wOyu8ImVuhaLs0yws39AOBgglUooaVd/6fYhd/dxHpC3cFS68Oaf57ZKCt5SW /XdTthoIS2lSr8T+cnTrkaP416aiBX4kqVGaYE3qUEMpgj1hVtV1D0zDwAma6kL2 vb2y3gSvwWedFOSSvPSyqgNldjITha+zn3uaJU6FrxeDMRMJvTiCDn6ijQyQlEsU yHJee+i06h/YuAOlO2i2ajELJWNKZPV5Y4Q1irfsD47SbuxW4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE/UrbP1UAzGxGBeyuRFxv9R60qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvYTg0NzJiNjgtY2I1Ni0z NGZkLWIzMjktNDU1ZDg4NzAzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSl+nwFEf8QnUaDTGHssUwpfPtqUnHvVQ8LNJENhb/vAGlBNRZGR67H 7cw4reun29rSPK2I0FYlPGcW9rD/sFzVA+/FuPdyQtoVHKgR9bpFP6TrzqXCOjyz dUtDTyBDg+bZ9xWzBCYlu94euwOOEdMLHVr8uFfRS9l6Bo7Km3Z41Zq3roAnN3LA U597yzWtVCX1pV+1guSMONsj3modjSscprFdAipmTVeTcDs2RtDvCSiXkwMAWyzG hNkrB/5ClmpAPVsLkPV2POuH0B5PpxvUCJRv8Be1kCr8kF9TmO5dSavUPMPDrML7 JqtHsULl3Y/FsosbXFM3EQhBFZPpxQ0= -----END CERTIFICATE-----Generated at Mon Oct 27 15:06:02 2025 by rpki-client