$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa File: 8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa (raw, json) Hash identifier: Oo12clnAoAeHBUReIZku+nWXtXYhyTAnV6WTG5pwCC8= Subject key identifier: C2:45:4C:68:A6:F8:1B:C3:16:20:DC:E8:90:C4:14:DA:F3:40:A7:51 Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Certificate serial: 010D0C9F4328584B7B22015F3C43DFE56C5E8040 Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 10996 IP address blocks: 192.154.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:01:5f:3c:43:df:e5:6c:5e:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=ddf47fe0-0af3-4de9-98a5-ea8ed18310a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:e0:ed:55:a7:7c:3c:df:06:4c:1e:80:90: e4:39:e8:89:90:63:a5:2d:f3:83:ac:69:0f:53:6e: 46:21:39:42:2b:0e:69:25:83:97:4a:4d:dc:51:25: 3a:7d:e0:2f:c0:65:59:aa:92:ef:5a:a0:b4:5f:8d: 49:84:7e:04:26:30:41:a4:75:f4:07:61:5e:d4:8f: a5:dd:20:16:97:64:11:bc:6c:31:3a:47:f8:03:03: e9:66:81:09:d5:ac:2a:d1:7d:54:26:d7:dd:d2:2d: 28:88:13:e4:fb:b4:ef:7d:2c:ea:8f:10:0d:bc:7d: fc:11:41:4c:83:0d:6a:39:4f:ff:72:55:e1:1d:e0: c7:3f:d1:65:89:b7:af:b6:ee:f6:79:1b:22:47:3f: 36:75:2a:3e:8e:d0:32:96:e9:ee:6a:17:06:7b:d7: e5:12:d3:fe:d0:41:70:01:08:27:56:89:fa:f3:b1: 37:3f:13:04:e9:0a:09:b0:f2:e8:30:c2:6f:c6:ba: 9e:8c:02:ea:d2:c7:0f:10:ea:61:85:cb:ab:0a:24: 45:b7:2c:3c:65:2e:2b:9b:ba:7a:9e:d4:0a:31:39: f5:90:63:2b:4f:eb:79:68:d5:d7:7e:25:cc:e4:24: db:d0:5a:98:19:19:6a:91:a9:4e:f1:1f:db:11:78: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:45:4C:68:A6:F8:1B:C3:16:20:DC:E8:90:C4:14:DA:F3:40:A7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl X509v3 Authority Key Identifier: keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer sbgp-ipAddrBlock: critical IPv4: 192.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e6:e9:21:b3:4e:80:9f:d6:4c:27:7b:4f:ba:fd:07:3f:7f: 36:bd:b0:1b:3f:23:4b:cf:d0:d9:f0:9a:3d:6f:7e:92:0c:8b: 0b:2a:1b:66:aa:49:f0:23:aa:11:2b:e9:e9:fd:79:92:18:4b: cb:1d:11:46:53:8c:fc:66:e6:e8:8d:91:37:04:5a:00:6b:cd: bb:55:5a:9d:bd:76:1f:53:db:5e:c4:01:60:ff:b3:fe:04:f5: a2:98:54:cc:c0:ee:80:11:b8:9c:4c:1b:53:e2:95:c9:d0:8f: 06:7a:00:df:8d:9f:97:50:90:61:84:7b:54:8b:00:02:9a:76: e2:fb:41:b1:d3:03:d2:87:71:0c:15:d8:f1:dc:31:b8:85:33: 7f:49:a5:54:4e:5b:cb:26:1c:d9:77:31:ec:73:7b:cc:51:e8: 2c:7d:b5:39:62:36:29:2b:0d:91:85:49:aa:28:5f:f4:d4:4d: 27:0c:5c:2a:4a:9e:9f:34:4c:07:23:2f:7e:3b:98:c6:69:86: 09:54:5f:5a:f7:ea:e3:63:c3:bc:1c:b0:0f:c5:ec:05:d2:74: d8:c5:1a:a5:33:2c:5d:93:36:04:8d:af:59:a9:ec:40:49:e5: 61:ba:34:80:50:74:cd:8b:ae:d1:3e:34:1a:3c:1f:84:28:2f: f3:b5:41:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgFfPEPf5WxegEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy YWQwMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGRmNDdmZTAtMGFmMy00ZGU5LTk4YTUtZWE4ZWQxODMxMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwefg7VWnfDzfBkwegJDkOeiJkGOlLfODrGkP U25GITlCKw5pJYOXSk3cUSU6feAvwGVZqpLvWqC0X41JhH4EJjBBpHX0B2Fe1I+l 3SAWl2QRvGwxOkf4AwPpZoEJ1awq0X1UJtfd0i0oiBPk+7TvfSzqjxANvH38EUFM gw1qOU//clXhHeDHP9Flibevtu72eRsiRz82dSo+jtAylunuahcGe9flEtP+0EFw AQgnVon687E3PxME6QoJsPLoMMJvxrqejALq0scPEOphhcurCiRFtyw8ZS4rm7p6 ntQKMTn1kGMrT+t5aNXXfiXM5CTb0FqYGRlqkalO8R/bEXi87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJFTGim+BvDFiDc6JDEFNrzQKdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvOGVhYjdlYzQtNDI1NC0z Nzg3LTlkMTctMWI0YmNmOWI3MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0 MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3 ZjAyNDJhZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvm6SGzToCf1kwne0+6/Qc/fza9sBs/I0vP0Nnwmj1vfpIMiwsqG2aq SfAjqhEr6en9eZIYS8sdEUZTjPxm5uiNkTcEWgBrzbtVWp29dh9T217EAWD/s/4E 9aKYVMzA7oARuJxMG1PilcnQjwZ6AN+Nn5dQkGGEe1SLAAKaduL7QbHTA9KHcQwV 2PHcMbiFM39JpVROW8smHNl3Mexze8xR6Cx9tTliNikrDZGFSaooX/TUTScMXCpK np80TAcjL347mMZphglUX1r36uNjw7wcsA/F7AXSdNjFGqUzLF2TNgSNr1mp7EBJ 5WG6NIBQdM2LrtE+NBo8H4QoL/O1QQ8= -----END CERTIFICATE-----Generated at Mon Nov 3 14:39:00 2025 by rpki-client