$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa File: cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa (raw, json) Hash identifier: 8l2Xxe7sB+SdZ8PA890RCchwn8C0jhKpzDF8Feyl5bM= Subject key identifier: DE:68:D1:BC:AD:A6:91:D8:8F:83:1C:BE:74:3F:84:73:7B:53:50:E9 Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F4328584B7857444B5247D253100417C0 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 25928 IP address blocks: 192.68.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:44:4b:52:47:d2:53:10:04:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=2f8b426c-4029-4514-93cf-06105d179bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:e2:75:99:34:07:98:3c:85:75:2b:93:96: f1:ef:fe:30:30:b8:1e:f0:61:4d:75:32:55:64:86: ef:2d:a1:ad:ff:21:19:a9:9e:36:13:68:26:39:d9: 1a:2d:c6:9b:44:84:15:f1:97:a6:24:27:f9:bd:9c: 9a:4f:a0:20:2b:14:4f:78:7e:23:c3:10:bd:a7:22: 01:d6:28:d9:0a:d1:3d:40:37:18:a7:b8:9d:e7:7c: 5b:40:09:30:30:f0:c2:9f:b6:ba:10:78:0e:0f:c4: 28:b6:e0:6f:47:aa:e9:52:49:db:ca:e0:2f:23:d4: a7:7d:a5:73:f4:63:4c:af:36:c1:fe:76:38:80:f4: d9:c0:96:51:84:1c:91:bd:e5:ea:78:f7:75:dc:56: f4:ea:c2:53:85:49:59:64:b2:14:77:36:53:bc:12: ac:4a:9d:a6:ce:80:23:b3:b8:99:71:3f:08:65:a9: 40:a0:05:79:e3:8d:07:25:98:38:2f:ce:d5:d5:14: 47:b0:95:5d:fd:27:be:2b:28:1c:17:3b:be:db:23: 39:ec:cb:a0:6d:36:93:45:26:f9:33:97:b6:0f:7a: 0b:69:f4:be:be:9e:30:01:30:9c:ba:aa:cd:b0:9b: 9e:82:17:b7:58:0c:59:9b:e4:72:0b:ca:a2:e8:83: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:D1:BC:AD:A6:91:D8:8F:83:1C:BE:74:3F:84:73:7B:53:50:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv4: 192.68.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:29:b0:0c:d3:86:8a:ec:50:72:d6:30:47:08:72:1c:0e:89: 95:c6:57:a0:e8:09:66:77:40:90:3a:ee:56:0c:b7:74:12:9d: a7:8e:e2:e2:9e:1c:f0:f3:70:89:b5:b1:40:70:a3:66:f6:98: 74:7b:1e:46:bf:b1:5d:89:a2:ac:df:0e:a1:c8:9a:e8:85:57: 63:ea:54:1a:96:de:42:b7:bb:8d:f7:2b:53:93:a5:61:de:ba: 93:f7:f9:32:d9:61:cc:01:07:dd:46:3d:6b:ba:29:2a:9f:d3: 97:d3:86:2a:68:16:a6:c3:7d:33:43:9e:07:7f:2b:31:7a:41: bc:9e:76:71:71:ba:44:58:c5:ec:33:a5:de:39:d4:d3:99:ed: 43:7d:aa:64:e0:2c:f4:45:f1:1f:21:93:31:dd:19:eb:e7:bc: f1:ee:e8:45:1e:86:6a:dd:48:be:40:90:a6:4a:ee:97:46:e9: 9c:8f:27:97:bd:05:0f:94:21:e0:e8:33:94:c8:b8:84:93:bc: da:4e:c4:73:a6:c7:41:0e:14:24:82:bb:5c:8e:11:e2:86:c8: de:cf:71:9f:f3:13:1b:9a:86:55:66:3d:97:a1:c5:34:d7:81: 58:b7:3e:8f:46:29:ca:2d:4f:e0:9e:f4:73:80:d1:2f:68:8c: 3d:2c:37:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0RLUkfSUxAEF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk MmY4YjQyNmMtNDAyOS00NTE0LTkzY2YtMDYxMDVkMTc5YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirPidZk0B5g8hXUrk5bx7/4wMLge8GFNdTJV ZIbvLaGt/yEZqZ42E2gmOdkaLcabRIQV8ZemJCf5vZyaT6AgKxRPeH4jwxC9pyIB 1ijZCtE9QDcYp7id53xbQAkwMPDCn7a6EHgOD8QotuBvR6rpUknbyuAvI9SnfaVz 9GNMrzbB/nY4gPTZwJZRhByRveXqePd13Fb06sJThUlZZLIUdzZTvBKsSp2mzoAj s7iZcT8IZalAoAV5440HJZg4L87V1RRHsJVd/Se+KygcFzu+2yM57MugbTaTRSb5 M5e2D3oLafS+vp4wATCcuqrNsJueghe3WAxZm+RyC8qi6INvLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5o0bytppHYj4McvnQ/hHN7U1DpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvY2ZlNDE3Y2QtYTVhOC0z OGJiLThiNGYtYWQxZTUzZmJiNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwET/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGopsAzThorsUHLWMEcIchwOiZXGV6DoCWZ3QJA67lYMt3QSnaeO4uKe HPDzcIm1sUBwo2b2mHR7Hka/sV2JoqzfDqHImuiFV2PqVBqW3kK3u433K1OTpWHe upP3+TLZYcwBB91GPWu6KSqf05fThipoFqbDfTNDngd/KzF6QbyednFxukRYxewz pd451NOZ7UN9qmTgLPRF8R8hkzHdGevnvPHu6EUehmrdSL5AkKZK7pdG6ZyPJ5e9 BQ+UIeDoM5TIuISTvNpOxHOmx0EOFCSCu1yOEeKGyN7PcZ/zExuahlVmPZehxTTX gVi3Po9GKcotT+Ce9HOA0S9ojD0sN7Y= -----END CERTIFICATE-----Generated at Tue Oct 14 19:23:49 2025 by rpki-client