$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa File: 4a473e58-ddc0-39ea-a012-7daaa18312b1.roa (raw, json) Hash identifier: 5eqPDny2NZivjAfT1kABIK2CMKksYxem/6FUSX/SL5w= Subject key identifier: 85:70:13:64:11:4E:11:08:ED:E4:0C:1D:D0:3B:C3:AD:41:7C:83:3C Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6631F18880DEEFF79DCC1980 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16433 IP address blocks: 192.190.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f1:88:80:de:ef:f7:9d:cc:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=cd64848d-2278-4afe-a03c-52157b0e4140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:05:9d:4b:b8:e0:7f:06:e6:70:1d:27:2e: da:3f:c5:a9:20:ff:4d:29:6e:27:d6:71:e3:63:03: a7:0d:21:c7:b7:84:d7:91:91:65:fe:8e:7d:ae:fe: 1e:22:89:c9:05:ca:67:34:37:7d:60:90:6b:24:be: d9:6b:7b:27:85:cf:8b:9e:aa:eb:c7:0d:ac:03:d0: 4e:95:e3:53:0a:a3:a0:aa:48:5d:57:f9:64:d5:7c: 09:30:2a:7d:95:6b:ec:18:3c:25:36:02:d7:ca:15: 6c:bc:64:21:f9:83:35:a3:3e:90:0d:8b:24:18:54: 5c:d4:dd:78:33:62:33:81:f9:65:6f:ae:e4:01:11: 7c:f5:0a:dc:cb:64:7e:de:64:17:90:c9:58:c0:1a: 6f:ee:55:19:f3:4a:ba:e3:18:40:e4:79:18:5e:49: a1:4f:93:37:02:bc:cf:78:00:26:c3:36:a4:ae:0d: 63:66:ef:d6:a0:cb:46:75:11:71:94:49:1e:ad:48: 74:9d:ce:67:f1:d8:3d:ad:c6:d5:d9:b5:b1:9a:1e: 9f:75:d6:69:fb:cc:f4:a4:24:7d:10:ba:78:e4:8f: 19:8f:e5:0d:95:b4:4a:64:17:2a:bf:47:b6:5e:ee: ee:e1:62:86:a9:55:f3:ba:91:e8:29:72:4f:e4:cd: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:13:64:11:4E:11:08:ED:E4:0C:1D:D0:3B:C3:AD:41:7C:83:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 192.190.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:08:3f:8e:fa:90:63:e9:fd:a6:1d:08:7d:9b:10:dd:b9:35: 0a:1c:fd:61:6f:33:19:ac:71:b8:d1:3d:5b:a6:c2:99:95:05: 17:f0:85:21:18:e1:74:d8:08:75:ad:3a:1a:9d:a5:81:7e:51: 18:58:6f:01:7b:04:4f:33:e6:3f:2d:27:a9:98:85:30:14:82: 95:88:21:cb:97:03:6a:45:92:58:b6:d9:dd:a9:56:9a:f1:99: 06:bd:ee:4c:e6:1e:95:8f:82:7c:86:2e:80:81:29:29:90:01: d3:83:53:32:15:18:f5:f1:7c:73:0b:f6:f6:c1:09:43:0b:ab: 36:df:e3:70:15:f4:31:65:e2:e0:4f:41:87:d8:09:b8:79:b1: 68:c9:75:a2:27:3b:dd:cc:5d:b2:47:b1:3a:74:ab:23:6e:00: 41:e9:cc:2b:c6:5d:52:84:6c:84:c8:30:d1:37:22:fe:19:9d: 42:bb:99:52:9c:7b:51:72:f5:d9:0b:a6:46:6a:ce:5c:df:60: 0b:47:c0:37:3b:9e:f5:63:f9:a4:9b:08:90:ee:3f:3c:df:98: d0:13:c7:c8:7d:22:41:fd:ee:c6:af:1f:36:ee:27:d7:53:04: f4:a2:f4:7a:8b:c2:36:3a:c9:7e:ab:0a:e5:bf:aa:59:52:48: a7:60:1b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfGIgN7v953MGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk Y2Q2NDg0OGQtMjI3OC00YWZlLWEwM2MtNTIxNTdiMGU0MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcEFnUu44H8G5nAdJy7aP8WpIP9NKW4n1nHj YwOnDSHHt4TXkZFl/o59rv4eIonJBcpnNDd9YJBrJL7Za3snhc+Lnqrrxw2sA9BO leNTCqOgqkhdV/lk1XwJMCp9lWvsGDwlNgLXyhVsvGQh+YM1oz6QDYskGFRc1N14 M2Izgfllb67kARF89Qrcy2R+3mQXkMlYwBpv7lUZ80q64xhA5HkYXkmhT5M3ArzP eAAmwzakrg1jZu/WoMtGdRFxlEkerUh0nc5n8dg9rcbV2bWxmh6fddZp+8z0pCR9 ELp45I8Zj+UNlbRKZBcqv0e2Xu7u4WKGqVXzupHoKXJP5M2GewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVwE2QRThEI7eQMHdA7w61BfIM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNGE0NzNlNTgtZGRjMC0z OWVhLWEwMTItN2RhYWExODMxMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwL7iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUIP476kGPp/aYdCH2bEN25NQoc/WFvMxmscbjRPVumwpmVBRfwhSEY 4XTYCHWtOhqdpYF+URhYbwF7BE8z5j8tJ6mYhTAUgpWIIcuXA2pFkli22d2pVprx mQa97kzmHpWPgnyGLoCBKSmQAdODUzIVGPXxfHML9vbBCUMLqzbf43AV9DFl4uBP QYfYCbh5sWjJdaInO93MXbJHsTp0qyNuAEHpzCvGXVKEbITIMNE3Iv4ZnUK7mVKc e1Fy9dkLpkZqzlzfYAtHwDc7nvVj+aSbCJDuPzzfmNATx8h9IkH97savHzbuJ9dT BPSi9HqLwjY6yX6rCuW/qllSSKdgGwE= -----END CERTIFICATE-----Generated at Sun Oct 19 01:01:01 2025 by rpki-client