$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa File: 472f9308-f055-3dcd-b095-07eae00b6a13.roa (raw, json) Hash identifier: HwFeHMMu41rL3rEYwXJ/b0DL9nl0rdwYd+IzK+r6gRg= Subject key identifier: 1B:61:F7:5A:7F:85:8C:95:6C:85:3B:35:FA:45:3C:5F:DF:00:C2:53 Certificate issuer: /CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Certificate serial: 010D0C9F4328584B21CC21AB1839F64B89E0B500 Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 192.149.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:21:ab:18:39:f6:4b:89:e0:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=3e41a114-f029-49fa-95be-e3b0d362d99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:f2:a0:a7:2e:75:37:3c:4c:ab:db:d6:ca: 0d:b1:dc:4b:85:43:34:6b:44:2c:50:c1:c4:43:5d: e6:f1:f2:f0:6e:68:f2:0e:23:bd:f2:f8:84:56:42: 03:53:70:23:e7:2c:cf:9c:dc:f4:71:0c:82:01:26: 90:ac:09:a2:9c:d6:fb:f3:08:6b:bd:3c:d8:6e:8b: f8:93:a9:65:7d:42:91:9b:92:d6:e4:be:4d:3a:76: de:61:5f:24:46:ff:90:de:e4:44:ca:a7:91:4e:b7: 29:9e:fb:88:5a:34:0f:ef:0b:aa:97:3f:6b:d6:5b: 06:8a:8c:64:59:30:cc:0e:e9:7c:71:c7:64:c1:e3: 02:20:cc:3d:b8:4e:02:a3:ac:9c:f4:48:fe:a6:ea: 16:6e:15:36:33:d9:71:1b:ec:2f:dc:88:d5:a8:2c: 80:82:f4:49:21:42:b5:f9:13:33:fc:7d:4d:cb:f1: cf:50:06:71:08:38:87:d0:a2:43:36:09:75:ef:20: d9:f3:22:39:0d:ac:fd:a4:2c:de:b7:48:05:f3:52: 82:c7:2c:06:6b:4d:75:99:45:f3:fc:17:cd:ea:88: f7:22:47:ca:96:19:8b:87:4b:8e:26:3a:12:20:56: bf:6f:9b:67:0e:af:97:eb:a5:97:59:89:0f:6a:03: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:61:F7:5A:7F:85:8C:95:6C:85:3B:35:FA:45:3C:5F:DF:00:C2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/472f9308-f055-3dcd-b095-07eae00b6a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl X509v3 Authority Key Identifier: keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer sbgp-ipAddrBlock: critical IPv4: 192.149.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b3:22:8b:75:81:88:d4:b4:19:71:54:ef:83:67:88:ef:43: 5a:6a:bf:e4:16:3b:80:a7:e8:75:44:3d:7b:e1:1a:07:eb:7d: f8:34:5d:c7:1e:69:3f:07:90:29:7c:e0:bb:86:dc:6f:07:42: b1:19:06:9d:57:7a:d1:c5:2b:ea:3f:ae:e5:7d:4d:d1:7f:0b: 9e:74:41:f0:8a:7d:7d:22:a0:ae:bc:95:0c:2f:a7:d3:16:6e: 3c:af:2d:36:3e:81:2b:ff:8a:a2:7b:9b:05:64:83:f8:32:64: f1:3b:9c:63:75:54:16:6c:4b:4c:57:cb:f9:e0:d5:4f:ee:8a: 45:08:66:4e:39:7f:e8:31:9d:d8:3a:77:ce:ee:42:f0:74:2a: fa:a7:87:91:46:96:f2:da:99:b2:c6:44:0b:ff:06:26:9e:51: c7:85:c5:88:32:af:ae:0c:e1:0c:4c:9a:1c:4e:f5:6e:0e:f4: a1:64:31:36:3c:4a:3b:51:d1:96:00:72:48:31:5a:77:6c:58: 1a:3d:7b:bc:53:3f:55:42:45:1c:19:98:3b:1c:0e:e6:7f:df: b3:bc:a7:ca:ae:44:95:f1:88:77:b4:cc:94:8c:e9:cc:5c:70: 80:77:5e:39:71:e5:ee:ea:18:e2:ce:6a:e9:3d:ce:c3:45:45: b2:bb:2d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCGrGDn2S4ngtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUxNjVmNmYtZmNmMy00YzA2LWI4ODQtMzZlNjA1MjFj MjE2MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk M2U0MWExMTQtZjAyOS00OWZhLTk1YmUtZTNiMGQzNjJkOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3jyoKcudTc8TKvb1soNsdxLhUM0a0QsUMHE Q13m8fLwbmjyDiO98viEVkIDU3Aj5yzPnNz0cQyCASaQrAminNb78whrvTzYbov4 k6llfUKRm5LW5L5NOnbeYV8kRv+Q3uREyqeRTrcpnvuIWjQP7wuqlz9r1lsGioxk WTDMDul8ccdkweMCIMw9uE4Co6yc9Ej+puoWbhU2M9lxG+wv3IjVqCyAgvRJIUK1 +RMz/H1Ny/HPUAZxCDiH0KJDNgl17yDZ8yI5Daz9pCzet0gF81KCxywGa011mUXz /BfN6oj3IkfKlhmLh0uOJjoSIFa/b5tnDq+X66WXWYkPagPzXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBth91p/hYyVbIU7NfpFPF/fAMJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2 NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2MDUyMWMyMTYvNDcyZjkzMDgtZjA1NS0z ZGNkLWIwOTUtMDdlYWUwMGI2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmUxNjVmNmYtZmNmMy00YzA2LWI4 ODQtMzZlNjA1MjFjMjE2L2ZlMTY1ZjZmLWZjZjMtNGMwNi1iODg0LTM2ZTYwNTIx YzIxNi5jcmwwHwYDVR0jBBgwFoAUJcA6kzKP5erlOLBtS7jvwrD3PVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2 MDUyMWMyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2zIot1gYjUtBlxVO+DZ4jvQ1pqv+QWO4Cn6HVEPXvhGgfrffg0Xcce aT8HkCl84LuG3G8HQrEZBp1XetHFK+o/ruV9TdF/C550QfCKfX0ioK68lQwvp9MW bjyvLTY+gSv/iqJ7mwVkg/gyZPE7nGN1VBZsS0xXy/ng1U/uikUIZk45f+gxndg6 d87uQvB0Kvqnh5FGlvLambLGRAv/BiaeUceFxYgyr64M4QxMmhxO9W4O9KFkMTY8 SjtR0ZYAckgxWndsWBo9e7xTP1VCRRwZmDscDuZ/37O8p8quRJXxiHe0zJSM6cxc cIB3Xjlx5e7qGOLOauk9zsNFRbK7LQ0= -----END CERTIFICATE-----Generated at Mon Nov 3 21:52:09 2025 by rpki-client