$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa File: 79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa (raw, json) Hash identifier: nvaUWLbrm7EgoYtLWiRhmkId8Og9QCGjzZvQT58f65U= Subject key identifier: 58:2D:77:C9:D7:45:FF:D4:FE:6F:4B:A7:18:97:D6:23:AC:01:90:29 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B99D77A790E6062BFB7821980 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26658 IP address blocks: 172.87.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7a:79:0e:60:62:bf:b7:82:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=64f0a4b9-4804-4f29-95ef-586a1e30086a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:b1:20:5c:34:31:3d:bd:93:8b:2d:8a:57: f5:d3:ee:f0:b0:71:0a:45:ad:4e:fc:8c:6e:5e:7b: 29:03:44:cc:5d:77:09:84:92:bb:69:93:bf:96:54: b3:16:42:f2:b0:1b:32:5f:aa:42:6d:d6:a8:33:a7: da:1c:94:d6:dd:4e:ab:00:2a:fa:64:f8:17:ec:1c: 08:94:9e:0e:c7:82:08:5d:66:fc:29:29:24:32:cc: 4b:61:66:62:ff:20:ac:dd:3b:6e:6b:28:62:41:d6: ab:a9:e5:95:3a:b8:d8:5f:49:da:d6:7e:55:3e:0f: be:d6:f9:8e:95:08:8c:54:79:18:de:63:1a:c8:ae: ed:65:bf:9b:68:92:77:60:9d:99:13:a6:8e:56:b2: 2b:7b:ff:97:55:6b:33:bc:c8:9f:00:7c:22:0c:72: 88:8a:09:82:6c:4b:73:46:aa:dc:f8:4b:46:26:f7: 09:50:bb:2d:55:14:ee:f1:01:dc:4c:23:30:56:88: fd:2f:5a:38:aa:8e:ca:4a:18:12:4a:70:ac:4f:b9: fe:f5:7e:08:1b:60:ba:cf:ea:71:ef:e0:5f:74:10: 21:30:33:61:67:a1:5e:23:f9:82:40:bd:4b:b0:e3: 4e:09:ac:0e:d7:47:2f:81:11:64:5f:4f:1b:7b:f6: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2D:77:C9:D7:45:FF:D4:FE:6F:4B:A7:18:97:D6:23:AC:01:90:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:40:db:47:3e:6f:cc:b9:ec:21:8d:d5:c5:e8:5a:20:b9:4f: 16:79:2a:ca:13:29:5d:f3:af:39:c8:9a:1d:2a:0b:90:59:1a: 21:d4:3c:08:85:31:ea:9f:77:86:08:cb:98:a7:80:71:4c:e2: 0e:8c:64:8d:d9:98:58:0e:ba:97:fe:a0:d7:27:d2:13:07:f4: 0f:e6:f0:74:6e:b7:53:23:62:86:ee:06:85:12:84:90:d2:4b: 78:50:47:f8:37:67:e6:94:98:7d:04:d1:3c:fa:07:f4:99:e9: 7f:cd:e1:3e:ed:78:de:73:33:e1:ec:fa:31:d5:08:83:4a:a6: 9e:ad:fe:16:49:59:09:af:e2:e3:79:b4:34:90:3f:ed:e2:5c: a3:0d:c0:c3:ad:56:1f:dc:7a:48:34:93:8e:76:86:5a:b6:8a: f1:4e:ac:26:ae:f5:05:d1:53:7d:6b:ac:67:d3:c2:20:d0:e0: a8:cc:cf:f7:b0:24:c6:87:5a:93:b4:09:25:84:f7:3a:77:ca: b0:dd:d9:35:64:82:a7:cd:4e:8b:64:23:5b:c7:34:8a:59:3b: b7:2f:38:a8:63:04:0e:b7:e9:cf:1a:93:03:c2:e7:a1:d2:79: b7:cb:66:78:d8:b7:08:33:69:b6:ff:9c:f8:72:08:df:29:4c: cf:df:69:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13p5DmBiv7eCGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjRmMGE0YjktNDgwNC00ZjI5LTk1ZWYtNTg2YTFlMzAwODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXixIFw0MT29k4stilf10+7wsHEKRa1O/Ixu XnspA0TMXXcJhJK7aZO/llSzFkLysBsyX6pCbdaoM6faHJTW3U6rACr6ZPgX7BwI lJ4Ox4IIXWb8KSkkMsxLYWZi/yCs3TtuayhiQdarqeWVOrjYX0na1n5VPg++1vmO lQiMVHkY3mMayK7tZb+baJJ3YJ2ZE6aOVrIre/+XVWszvMifAHwiDHKIigmCbEtz Rqrc+EtGJvcJULstVRTu8QHcTCMwVoj9L1o4qo7KShgSSnCsT7n+9X4IG2C6z+px 7+BfdBAhMDNhZ6FeI/mCQL1LsONOCawO10cvgRFkX08be/b5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgtd8nXRf/U/m9LpxiX1iOsAZApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNzlhYjQxZDItODY3Yi0z YTVmLWE2MWMtNzI2YzJiMWNjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFfBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZA20c+b8y57CGN1cXoWiC5TxZ5KsoTKV3zrznImh0qC5BZGiHUPAiF Meqfd4YIy5ingHFM4g6MZI3ZmFgOupf+oNcn0hMH9A/m8HRut1MjYobuBoUShJDS S3hQR/g3Z+aUmH0E0Tz6B/SZ6X/N4T7teN5zM+Hs+jHVCINKpp6t/hZJWQmv4uN5 tDSQP+3iXKMNwMOtVh/cekg0k452hlq2ivFOrCau9QXRU31rrGfTwiDQ4KjMz/ew JMaHWpO0CSWE9zp3yrDd2TVkgqfNTotkI1vHNIpZO7cvOKhjBA636c8akwPC56HS ebfLZnjYtwgzabb/nPhyCN8pTM/fadY= -----END CERTIFICATE-----Generated at Mon Oct 27 09:57:46 2025 by rpki-client