$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/19966986-3ace-33e1-a91b-9c6d9b4e2490.roa File: 19966986-3ace-33e1-a91b-9c6d9b4e2490.roa (raw, json) Hash identifier: C6Pl0Y2fA2efDHvKxJwsZadDrXtjJZ6wVLNJP0bp1Po= Subject key identifier: 01:1E:ED:FB:12:3F:39:F0:54:D2:69:83:E6:3A:B6:C9:FC:99:5F:B9 Certificate issuer: /CN=23d0180c-f5ee-4e4e-93f1-dbb120e04d84 Certificate serial: 010D0C9F4328584B838216E441040EDD87471E00 Authority key identifier: 79:2D:93:38:6C:61:41:E3:E4:B8:EA:EB:E0:0E:17:37:62:27:B3:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/19966986-3ace-33e1-a91b-9c6d9b4e2490.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 401686 IP address blocks: 192.104.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:16:e4:41:04:0e:dd:87:47:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d0180c-f5ee-4e4e-93f1-dbb120e04d84 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=aaafe480-89b7-48b1-a81e-0a421c918399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:99:5b:6b:0c:1e:fc:a9:98:22:53:59:6b: 69:eb:ac:c1:ab:a5:ef:ab:7c:32:e6:35:62:e2:a8: a3:f7:07:ee:0f:92:dd:8d:51:a2:d9:9f:cc:a3:eb: 21:1a:d3:c7:e7:7a:a3:4e:cf:67:79:a6:da:5e:6b: a0:a7:7c:d1:82:84:4a:2f:a9:93:cc:98:74:b0:d3: c9:77:52:f8:c6:fb:25:ad:e3:12:9d:b1:85:17:6e: 8a:4f:2f:ae:6f:5f:12:bf:2e:4a:64:bf:55:9e:5e: 04:8a:fa:38:b9:33:cd:ee:d6:fc:a5:b6:d3:e8:09: a8:77:d9:99:80:7d:10:0c:9b:f2:cf:69:1f:95:d5: d7:ea:ed:ec:0c:da:49:af:71:6f:3f:6b:a9:41:bc: c4:2e:59:3a:24:73:e7:36:76:d1:bb:a8:91:69:43: 0e:ab:cc:e5:59:a3:43:8d:13:ad:9b:89:09:81:21: e4:12:d4:1d:ef:2e:92:5e:6b:02:6d:80:a4:75:21: b7:ed:44:3b:fb:d9:70:94:92:4f:bd:43:9a:5f:a4: 2b:69:f2:ee:e5:a4:3b:8a:35:db:3c:c2:9a:41:aa: 1e:a9:53:ae:ad:f5:32:20:4f:f3:e7:d4:a4:2b:0b: 53:1d:a7:9c:a2:9b:4b:98:af:f1:06:6e:59:5d:9a: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1E:ED:FB:12:3F:39:F0:54:D2:69:83:E6:3A:B6:C9:FC:99:5F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/19966986-3ace-33e1-a91b-9c6d9b4e2490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.crl X509v3 Authority Key Identifier: keyid:79:2D:93:38:6C:61:41:E3:E4:B8:EA:EB:E0:0E:17:37:62:27:B3:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer sbgp-ipAddrBlock: critical IPv4: 192.104.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:06:79:e3:13:2a:7a:bc:7c:f9:7b:bd:b9:ee:77:c2:3b:99: cf:45:e1:0c:ab:9b:cf:5a:b0:f7:88:aa:e0:1c:2d:de:77:b9: f9:67:0c:7a:02:af:12:0e:68:b2:b5:a3:98:62:c6:78:b4:5c: 35:be:f2:32:4a:91:a3:25:ee:b1:28:2a:f4:9b:0e:cb:5f:15: eb:45:d1:96:c8:77:d1:c4:d4:4b:be:93:df:9a:97:14:12:50: a6:79:46:f1:f7:fe:2d:25:fa:80:1c:02:19:0e:ac:3d:c3:a6: 99:ad:6a:7c:2a:75:28:a4:e3:ef:f8:2d:3a:f8:1f:42:6d:db: a8:88:ef:95:8d:65:ea:56:ae:d4:38:97:3b:16:bf:2f:06:a8: 5d:f4:18:4e:6e:0d:65:2e:76:08:fd:e9:96:ba:cd:f7:0f:e6: 88:4d:c0:e0:2c:cf:0f:b2:de:5c:5d:62:44:1e:81:75:a7:c9: f1:41:02:99:49:52:7e:3b:53:39:1b:b6:a7:a2:7d:8a:d5:af: b3:c8:e5:01:bb:1e:13:c6:d5:c6:b9:58:07:75:a3:ce:f3:0e: 13:4a:ce:34:cf:76:3d:7c:01:8e:41:69:63:ac:d6:c0:f2:36: 51:b2:53:9d:d1:4f:0c:a8:f5:af:48:f4:29:34:62:5c:7d:25: 3b:e4:1d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDghbkQQQO3YdHHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkMDE4MGMtZjVlZS00ZTRlLTkzZjEtZGJiMTIwZTA0 ZDg0MB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YWFhZmU0ODAtODliNy00OGIxLWE4MWUtMGE0MjFjOTE4Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDeZW2sMHvypmCJTWWtp66zBq6Xvq3wy5jVi 4qij9wfuD5LdjVGi2Z/Mo+shGtPH53qjTs9neabaXmugp3zRgoRKL6mTzJh0sNPJ d1L4xvslreMSnbGFF26KTy+ub18Svy5KZL9Vnl4Eivo4uTPN7tb8pbbT6Amod9mZ gH0QDJvyz2kfldXX6u3sDNpJr3FvP2upQbzELlk6JHPnNnbRu6iRaUMOq8zlWaND jROtm4kJgSHkEtQd7y6SXmsCbYCkdSG37UQ7+9lwlJJPvUOaX6QrafLu5aQ7ijXb PMKaQaoeqVOurfUyIE/z59SkKwtTHaecoptLmK/xBm5ZXZrXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEe7fsSPznwVNJpg+Y6tsn8mV+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yM2Qw MTgwYy1mNWVlLTRlNGUtOTNmMS1kYmIxMjBlMDRkODQvMTk5NjY5ODYtM2FjZS0z M2UxLWE5MWItOWM2ZDliNGUyNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjNkMDE4MGMtZjVlZS00ZTRlLTkz ZjEtZGJiMTIwZTA0ZDg0LzIzZDAxODBjLWY1ZWUtNGU0ZS05M2YxLWRiYjEyMGUw NGQ4NC5jcmwwHwYDVR0jBBgwFoAUeS2TOGxhQePkuOrr4A4XN2InswgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yM2QwMTgwYy1mNWVlLTRlNGUtOTNmMS1kYmIx MjBlMDRkODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4GeeMTKnq8fPl7vbnud8I7mc9F4Qyrm89asPeIquAcLd53uflnDHoC rxIOaLK1o5hixni0XDW+8jJKkaMl7rEoKvSbDstfFetF0ZbId9HE1Eu+k9+alxQS UKZ5RvH3/i0l+oAcAhkOrD3DppmtanwqdSik4+/4LTr4H0Jt26iI75WNZepWrtQ4 lzsWvy8GqF30GE5uDWUudgj96Za6zfcP5ohNwOAszw+y3lxdYkQegXWnyfFBAplJ Un47UzkbtqeifYrVr7PI5QG7HhPG1ca5WAd1o87zDhNKzjTPdj18AY5BaWOs1sDy NlGyU53RTwyo9a9I9Ck0Ylx9JTvkHXc= -----END CERTIFICATE-----Generated at Sat Oct 25 22:07:55 2025 by rpki-client