$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/0c28ae96-0557-3ac4-846a-be5ea680846d.roa File: 0c28ae96-0557-3ac4-846a-be5ea680846d.roa (raw, json) Hash identifier: NFr2uBoVxCpEtfRkc8xkXy1WA4PrB9uZxQyDwzcMBBA= Subject key identifier: 43:FB:04:81:39:97:C9:7A:E9:C3:19:D1:F9:FD:9A:CB:0D:77:7B:73 Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F4328584BA13CCF08F188437DA39C1140 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/0c28ae96-0557-3ac4-846a-be5ea680846d.roa Signing time: Fri 24 Oct 2025 16:35:22 +0000 ROA not before: Fri 24 Oct 2025 16:35:22 +0000 ROA not after: Thu 22 Jan 2026 17:35:22 +0000 asID: 213257 IP address blocks: 192.101.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:3c:cf:08:f1:88:43:7d:a3:9c:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: Oct 24 16:35:22 2025 GMT Not After : Jan 22 17:35:22 2026 GMT Subject: CN=b4d535cd-1c70-4385-94b9-99b590f8effb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:9c:e9:04:d9:ee:9e:4a:f1:08:4a:cb:be: 06:40:c5:76:76:e3:0b:52:02:1c:f7:02:0f:bf:1c: d9:b2:0d:bf:5c:a6:68:db:3e:84:7d:4e:1c:5e:0f: 0f:b0:99:d0:e1:fd:dd:aa:26:a7:98:19:2e:28:d4: 57:99:74:f5:6f:6b:07:18:53:48:98:a0:a4:ef:be: 41:b4:23:4f:c0:a6:d0:97:7a:1b:af:fc:6a:54:21: 9f:44:47:f3:68:0b:9f:8e:06:65:c4:50:9e:09:b7: dd:07:11:e6:17:ff:5a:12:25:15:75:99:a4:26:67: 52:81:50:b0:6e:69:bd:9f:0d:9f:ea:f0:a9:fc:63: 21:b7:a3:58:35:89:c8:99:92:15:d7:c5:6c:74:0c: 5e:d2:16:d5:2f:0b:2b:c0:27:6a:8c:f1:b7:49:fe: e8:63:88:40:c0:c2:46:70:3d:91:80:3c:4b:1b:fc: 9d:35:86:36:f9:18:c6:bb:8e:d1:1a:66:04:70:f0: b0:b8:0d:6b:06:f4:18:f1:e0:af:e7:14:4d:8f:0c: 20:10:7a:ed:91:01:33:97:9a:5d:2d:84:97:2a:48: 19:f3:3b:39:ec:e2:f4:5f:28:e6:49:39:d5:f3:64: 9e:91:5f:86:23:b1:05:3e:28:3c:6a:b2:f7:b6:fa: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:04:81:39:97:C9:7A:E9:C3:19:D1:F9:FD:9A:CB:0D:77:7B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/0c28ae96-0557-3ac4-846a-be5ea680846d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:87:7b:40:e8:9a:7a:e6:cb:9b:7b:ea:cc:0a:ee:ba:d3:8d: 7f:f7:5a:ff:70:17:31:cb:a2:5b:69:0d:b6:00:b1:47:29:2f: ca:4b:56:71:c7:3a:b6:82:db:b2:14:08:a1:02:d5:c9:7e:86: e9:5b:74:54:0c:76:d2:dd:e7:6c:61:51:05:9d:8b:0b:17:7d: 43:dc:5e:5a:93:b9:12:c8:0b:ff:db:c0:5a:98:ed:dd:96:bd: 53:1d:71:56:64:d6:d4:17:c1:8f:42:d6:b7:c9:e7:0e:af:9b: 22:81:54:e5:3e:6e:9f:da:c2:67:38:3f:2b:c3:9f:d5:51:a0: d1:cf:19:3f:77:38:9b:51:57:da:0d:a3:dd:cc:e7:55:61:59: 8d:46:0a:a9:64:53:a7:20:7a:51:58:f5:b7:fd:bb:4d:10:ea: d3:aa:76:35:53:bd:76:38:d1:d5:0b:d6:8d:4f:9f:1c:33:25: a6:a0:5d:b7:6e:7b:ff:d9:0f:18:b0:a9:3e:eb:4e:32:e3:47: 84:2c:cd:68:dc:d7:68:d9:8b:7e:68:c7:d8:c9:e9:25:9e:63: 83:e8:60:68:2e:8d:39:48:5c:0b:6e:1b:db:76:bc:cc:3d:26: f3:fd:69:02:7c:8d:3f:92:8a:12:d7:59:57:c0:aa:6d:34:ce: 64:f5:57:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhPM8I8YhDfaOcEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI1MTAyNDE2MzUyMloXDTI2MDEyMjE3MzUyMlowLzEtMCsGA1UEAxMk YjRkNTM1Y2QtMWM3MC00Mzg1LTk0YjktOTliNTkwZjhlZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGac6QTZ7p5K8QhKy74GQMV2duMLUgIc9wIP vxzZsg2/XKZo2z6EfU4cXg8PsJnQ4f3dqianmBkuKNRXmXT1b2sHGFNImKCk775B tCNPwKbQl3obr/xqVCGfREfzaAufjgZlxFCeCbfdBxHmF/9aEiUVdZmkJmdSgVCw bmm9nw2f6vCp/GMht6NYNYnImZIV18VsdAxe0hbVLwsrwCdqjPG3Sf7oY4hAwMJG cD2RgDxLG/ydNYY2+RjGu47RGmYEcPCwuA1rBvQY8eCv5xRNjwwgEHrtkQEzl5pd LYSXKkgZ8zs57OL0XyjmSTnV82SekV+GI7EFPig8arL3tvpisQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP7BIE5l8l66cMZ0fn9mssNd3tzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvMGMyOGFlOTYtMDU1Ny0z YWM0LTg0NmEtYmU1ZWE2ODA4NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwGVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2He0Domnrmy5t76swK7rrTjX/3Wv9wFzHLoltpDbYAsUcpL8pLVnHH OraC27IUCKEC1cl+hulbdFQMdtLd52xhUQWdiwsXfUPcXlqTuRLIC//bwFqY7d2W vVMdcVZk1tQXwY9C1rfJ5w6vmyKBVOU+bp/awmc4PyvDn9VRoNHPGT93OJtRV9oN o93M51VhWY1GCqlkU6cgelFY9bf9u00Q6tOqdjVTvXY40dUL1o1PnxwzJaagXbdu e//ZDxiwqT7rTjLjR4QszWjc12jZi35ox9jJ6SWeY4PoYGgujTlIXAtuG9t2vMw9 JvP9aQJ8jT+SihLXWVfAqm00zmT1VwM= -----END CERTIFICATE-----Generated at Mon Oct 27 05:24:47 2025 by rpki-client