$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa File: d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json) Hash identifier: nJYJqo4KN/Pl2HYlf83kOwKUQYsXkHRLafKYdaDUtdM= Subject key identifier: 69:FB:B0:A7:F5:C1:55:FD:E0:00:65:4A:DE:89:97:7B:30:E1:73:0E Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584BCD9B0831F0A486DAFA1B1B00 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 397373 IP address blocks: 192.158.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:08:31:f0:a4:86:da:fa:1b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=a383e667-959a-443a-8510-7fccb92d76e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:3c:3a:56:c0:31:00:fc:df:b2:22:b4:5a: e1:38:86:db:66:6d:af:41:6a:b3:09:f9:f6:ed:ef: 47:7b:89:6b:de:14:e5:42:ee:ed:6b:a7:92:ff:bb: 32:c1:cb:eb:26:8d:b0:6e:41:77:1e:b9:d5:d6:cf: 4d:09:4b:52:e0:a6:bb:98:57:aa:9c:b1:b3:10:3b: 4e:df:98:73:e6:d2:f5:7f:65:10:d4:b9:bc:fd:71: d1:db:f8:37:8c:06:fe:0f:6a:aa:12:47:0b:a0:44: 63:9d:17:2e:c0:b7:75:99:cf:05:48:90:49:a3:98: 60:27:ca:53:9e:18:e2:e2:f8:c7:02:e9:81:e3:13: 0d:a9:02:c8:99:9a:d0:df:d1:f6:e4:b7:7c:e4:95: a4:7c:ed:79:43:9b:f3:b6:e3:bd:40:38:ac:7b:b2: 04:90:e4:87:e1:4c:8c:cb:8e:f5:3c:2a:16:ce:69: 97:27:eb:bd:6b:1c:9e:52:97:ca:48:fe:4d:4d:fc: 69:4b:ce:1d:c2:16:16:60:e9:a4:97:78:d5:78:b5: 27:48:29:03:15:93:a5:76:07:22:9b:57:b7:c0:fc: cd:db:23:f7:4a:2f:62:1e:16:9c:f9:e1:35:4e:fe: 46:0a:8a:e0:b7:c5:73:98:3e:e6:42:af:a3:39:5b: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:B0:A7:F5:C1:55:FD:E0:00:65:4A:DE:89:97:7B:30:E1:73:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:18:a1:7a:31:4b:ea:25:f3:b5:b0:28:8a:40:9b:ca:19:18: f5:0f:3d:de:ad:c1:07:7d:64:91:58:b9:37:95:bc:66:4c:37: 9e:78:52:66:56:98:e3:41:a9:c1:d8:5e:00:82:83:79:d8:3d: 99:e2:34:05:ed:08:87:fc:9c:f2:e2:4c:d6:6a:23:2d:10:dc: 4d:f2:c7:93:a7:f7:5c:16:b4:75:3c:59:48:30:25:56:e9:b6: bd:31:c2:3c:65:5a:92:a2:ae:7f:09:9c:84:06:54:16:81:2d: 74:88:51:84:97:b5:ea:2d:90:38:17:ef:34:33:4a:c5:03:d2: 4b:65:b6:9a:3b:7b:6c:35:48:59:e8:1c:16:9a:44:6a:19:5a: 13:f2:3b:4f:a9:a8:b3:94:0b:c8:74:20:a5:98:46:fd:1a:f9: 27:19:de:a6:ce:c3:39:d5:3b:d7:2d:8b:a7:13:2a:01:1a:10: 98:1f:aa:49:00:eb:13:41:bf:84:1c:a1:79:6d:d1:e5:20:83: be:c5:47:c9:4a:0a:4d:d2:d4:3d:20:c4:00:fc:4d:25:2b:b5: 2e:58:03:4a:74:aa:03:fa:c8:24:d4:bb:76:35:18:f2:b7:c0: 75:44:92:dc:79:56:4c:d8:d9:af:a9:62:13:ea:2e:c1:98:c3: e9:49:b1:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmwgx8KSG2vobGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTM4M2U2NjctOTU5YS00NDNhLTg1MTAtN2ZjY2I5MmQ3NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgao8OlbAMQD837IitFrhOIbbZm2vQWqzCfn2 7e9He4lr3hTlQu7ta6eS/7sywcvrJo2wbkF3HrnV1s9NCUtS4Ka7mFeqnLGzEDtO 35hz5tL1f2UQ1Lm8/XHR2/g3jAb+D2qqEkcLoERjnRcuwLd1mc8FSJBJo5hgJ8pT nhji4vjHAumB4xMNqQLImZrQ39H25Ld85JWkfO15Q5vztuO9QDise7IEkOSH4UyM y471PCoWzmmXJ+u9axyeUpfKSP5NTfxpS84dwhYWYOmkl3jVeLUnSCkDFZOldgci m1e3wPzN2yP3Si9iHhac+eE1Tv5GCorgt8VzmD7mQq+jOVuDKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn7sKf1wVX94ABlSt6Jl3sw4XMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZDc4NGIwZTUtYzc1Zi0z NmExLWIyMWUtZWFkZTM3ODhjZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkYoXoxS+ol87WwKIpAm8oZGPUPPd6twQd9ZJFYuTeVvGZMN554UmZW mONBqcHYXgCCg3nYPZniNAXtCIf8nPLiTNZqIy0Q3E3yx5On91wWtHU8WUgwJVbp tr0xwjxlWpKirn8JnIQGVBaBLXSIUYSXteotkDgX7zQzSsUD0ktltpo7e2w1SFno HBaaRGoZWhPyO0+pqLOUC8h0IKWYRv0a+ScZ3qbOwznVO9cti6cTKgEaEJgfqkkA 6xNBv4QcoXlt0eUgg77FR8lKCk3S1D0gxAD8TSUrtS5YA0p0qgP6yCTUu3Y1GPK3 wHVEktx5VkzY2a+pYhPqLsGYw+lJsVo= -----END CERTIFICATE-----Generated at Tue Nov 11 04:38:41 2025 by rpki-client