$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/f48e2900-2fea-3065-b439-004e04a6f200.roa File: f48e2900-2fea-3065-b439-004e04a6f200.roa (raw, json) Hash identifier: WBvwvpYAMw9df0W0w0j9sKtWq6Lq8mJNtDi8q51u6PM= Subject key identifier: 90:A5:BE:F0:97:1F:46:D3:15:17:3A:D7:F4:31:F5:2C:D9:5A:4D:46 Certificate issuer: /CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Certificate serial: 010D0C9F4328584B85184C8CECDB5077C7A51380 Authority key identifier: 23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/f48e2900-2fea-3065-b439-004e04a6f200.roa Signing time: Tue 14 Oct 2025 14:39:10 +0000 ROA not before: Tue 14 Oct 2025 14:39:10 +0000 ROA not after: Mon 12 Jan 2026 15:39:10 +0000 asID: 376 IP address blocks: 192.149.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:18:4c:8c:ec:db:50:77:c7:a5:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Validity Not Before: Oct 14 14:39:10 2025 GMT Not After : Jan 12 15:39:10 2026 GMT Subject: CN=a273fc57-87a6-4210-9bc1-85bee16841f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:0d:2d:4a:09:6b:c5:86:0f:63:d3:df:24: a1:d3:09:21:17:18:7f:00:08:d9:1c:3f:9f:3a:bc: c7:64:d1:ae:37:22:0d:e0:c3:a9:5c:cf:6d:8e:1b: 2a:64:3e:e6:81:82:67:58:0b:ea:99:70:49:79:5f: 3e:98:7a:fb:b9:3d:bf:d3:47:dc:be:5c:f5:07:43: 36:6c:ed:9a:a5:45:26:5b:46:a7:57:42:63:65:40: ac:ca:12:42:c6:9f:c8:be:f1:30:1a:e8:39:23:14: 82:d0:20:d5:20:f8:12:19:f2:c5:12:7c:42:42:5c: 3c:4f:bf:f6:49:23:af:2a:a3:eb:a1:fc:30:12:68: cb:ab:01:54:e3:1f:b2:7b:00:8a:0b:8d:e8:8f:75: b3:11:0d:4c:ab:a1:60:66:ab:eb:35:b4:c0:2c:0e: e7:8b:76:7d:83:fd:c8:ca:94:7c:4f:c8:9a:ab:a7: 11:d0:d0:c2:74:b2:ec:ed:05:89:57:d3:c2:26:91: 82:39:5e:93:23:6e:ad:f3:f9:8f:b5:e1:10:dc:20: 39:fb:69:17:48:de:68:10:59:ae:e7:ef:ad:f6:0b: 03:ea:47:b9:3b:5b:89:1d:09:73:d1:0c:62:5b:f9: 1a:d1:bf:f0:e3:94:2c:b6:ba:36:d3:ef:15:b4:bf: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:BE:F0:97:1F:46:D3:15:17:3A:D7:F4:31:F5:2C:D9:5A:4D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/f48e2900-2fea-3065-b439-004e04a6f200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.crl X509v3 Authority Key Identifier: keyid:23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer sbgp-ipAddrBlock: critical IPv4: 192.149.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fa:55:54:df:8e:8b:e3:46:c4:9a:a7:91:00:f2:f2:dd:df: 66:1b:9c:f5:d2:18:8c:33:6c:c6:91:f1:c6:db:71:ea:75:c4: 0c:3d:5f:80:17:77:8f:ca:11:68:d7:ee:e1:a8:2b:8c:36:c1: 82:db:04:c1:c1:47:3f:3e:e5:6b:07:82:2f:61:32:18:21:f0: 86:1c:99:62:1b:d9:09:05:e4:02:ce:f9:27:cf:34:d5:45:f5: 34:4e:89:45:07:bc:ce:93:30:2c:99:e7:0f:61:98:70:38:8f: 23:e2:39:52:06:f3:90:52:89:1f:6e:cf:a2:a0:fa:ec:0f:49: 93:07:53:27:ca:f1:fa:71:d1:e8:9a:bc:a2:fa:0f:a8:89:8b: cf:8d:de:81:a4:2f:53:54:ec:21:33:f2:96:d1:58:0f:c1:32: 80:73:46:c9:dd:67:e0:bd:45:34:76:a2:c4:92:8b:9f:21:5d: 91:b2:ef:61:60:40:b7:b6:bb:b2:2d:37:0b:bc:2a:be:67:08: 81:02:06:d0:95:7a:1d:8d:47:87:a2:9f:12:d1:07:8f:51:25: 29:a2:68:28:08:2e:3a:97:14:fe:60:73:aa:a9:55:14:c8:0d: 47:46:8d:b0:ed:f5:a9:16:41:0b:67:ce:70:2f:67:2a:12:04: 22:37:1f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFGEyM7NtQd8elE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBkMTcwOWUtMDRmZS00NWJkLWJmMjItNzhlYTYwNDNh ZmUxMB4XDTI1MTAxNDE0MzkxMFoXDTI2MDExMjE1MzkxMFowLzEtMCsGA1UEAxMk YTI3M2ZjNTctODdhNi00MjEwLTliYzEtODViZWUxNjg0MWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZMNLUoJa8WGD2PT3ySh0wkhFxh/AAjZHD+f OrzHZNGuNyIN4MOpXM9tjhsqZD7mgYJnWAvqmXBJeV8+mHr7uT2/00fcvlz1B0M2 bO2apUUmW0anV0JjZUCsyhJCxp/IvvEwGug5IxSC0CDVIPgSGfLFEnxCQlw8T7/2 SSOvKqProfwwEmjLqwFU4x+yewCKC43oj3WzEQ1Mq6FgZqvrNbTALA7ni3Z9g/3I ypR8T8iaq6cR0NDCdLLs7QWJV9PCJpGCOV6TI26t8/mPteEQ3CA5+2kXSN5oEFmu 5++t9gsD6ke5O1uJHQlz0QxiW/ka0b/w45Qstro20+8VtL+vPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJClvvCXH0bTFRc61/Qx9SzZWk1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGQx NzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVhNjA0M2FmZTEvZjQ4ZTI5MDAtMmZlYS0z MDY1LWI0MzktMDA0ZTA0YTZmMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjBkMTcwOWUtMDRmZS00NWJkLWJm MjItNzhlYTYwNDNhZmUxLzYwZDE3MDllLTA0ZmUtNDViZC1iZjIyLTc4ZWE2MDQz YWZlMS5jcmwwHwYDVR0jBBgwFoAUI68rzM9c2qvFPBceFLxJjIBEPyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGQxNzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVh NjA0M2FmZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX6VVTfjovjRsSap5EA8vLd32YbnPXSGIwzbMaR8cbbcep1xAw9X4AX d4/KEWjX7uGoK4w2wYLbBMHBRz8+5WsHgi9hMhgh8IYcmWIb2QkF5ALO+SfPNNVF 9TROiUUHvM6TMCyZ5w9hmHA4jyPiOVIG85BSiR9uz6Kg+uwPSZMHUyfK8fpx0eia vKL6D6iJi8+N3oGkL1NU7CEz8pbRWA/BMoBzRsndZ+C9RTR2osSSi58hXZGy72Fg QLe2u7ItNwu8Kr5nCIECBtCVeh2NR4einxLRB49RJSmiaCgILjqXFP5gc6qpVRTI DUdGjbDt9akWQQtnznAvZyoSBCI3Hzw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:35 2025 by rpki-client