$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa File: 3f9d2fae-fd49-33bf-8645-afba9150e12c.roa (raw, json) Hash identifier: klibTA8A98OPOKNpBatb6k2kpqQEnQV4khGF9T8BZRs= Subject key identifier: B6:C5:64:A4:77:A7:D0:73:94:57:BF:45:E6:A7:5E:52:F6:7C:4F:40 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B99D791C1F75F47CEF6F83B20 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 5050 IP address blocks: 192.88.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:91:c1:f7:5f:47:ce:f6:f8:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c59a75c7-8034-452a-950d-c52d7f901051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:79:75:3b:cc:de:24:62:28:17:66:78:02: 27:c2:32:28:25:8c:22:27:a0:e7:20:be:5d:52:08: bc:f6:e2:26:9c:6f:83:2f:48:0e:7e:18:30:47:c4: 0f:2e:61:f0:cd:43:34:7b:e6:39:c8:90:5b:48:41: 30:6d:d9:19:80:5b:17:52:d8:db:7a:86:ef:56:58: 93:a3:27:40:7e:af:09:94:85:78:d3:11:74:fd:bd: cd:97:1b:95:bb:f6:fa:cd:58:3e:f0:70:9a:8f:a6: eb:c3:80:1b:4c:b0:fb:bc:98:83:9f:2f:3c:14:c8: cb:5a:d7:03:99:2f:0d:fd:37:35:79:ea:1a:00:f0: f3:fe:df:db:b6:c3:8b:f6:6a:a8:3a:46:e1:e8:19: e9:4e:ea:72:7f:b9:b9:d0:92:71:5a:50:a9:b3:61: 59:4f:13:94:1a:d0:a5:b5:b1:0f:02:42:a3:96:e3: 67:b7:ef:70:b5:f7:a9:47:29:da:40:5f:04:2e:54: c8:33:32:57:f8:74:d8:88:3b:b4:b9:64:3b:db:b4: 33:f4:fc:24:a9:d7:5b:2b:dd:f4:62:2c:84:13:64: 89:d8:b8:d3:56:2f:52:e2:16:6c:a5:9f:c0:e7:53: a7:7d:8d:76:75:d6:3f:9b:a7:de:ff:48:74:3a:ac: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C5:64:A4:77:A7:D0:73:94:57:BF:45:E6:A7:5E:52:F6:7C:4F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.88.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f0:ca:6a:c7:81:64:a3:12:0a:38:3e:e6:44:17:43:6b:ce: 5a:70:65:f2:ec:68:cc:5b:89:83:9b:2a:77:8b:7a:bd:0c:a9: f6:df:40:1c:5e:d5:62:5a:28:65:af:8f:79:1e:83:f4:b8:39: 69:12:f7:a9:f8:54:d9:9e:34:8f:0f:87:ff:cf:08:1a:32:9a: df:bd:94:52:6f:45:5f:d0:0a:ac:4e:83:99:55:4c:c2:df:9c: ac:b8:b4:ae:ba:cf:49:b6:b7:78:45:c8:c9:6f:dc:18:ad:ff: d2:cf:c7:3e:34:78:46:02:96:96:84:dd:cd:bd:a8:61:19:5c: ca:49:37:1a:b7:25:88:95:3e:8c:4d:15:13:92:6d:39:f1:f0: b8:9b:cc:87:bb:c9:88:d9:1f:4b:3b:f2:f4:70:75:22:1d:1a: 5c:ad:c4:c9:3e:c4:84:88:79:f7:5e:a8:4e:e1:1d:04:04:0c: 2e:27:d9:8c:77:10:d2:bd:14:6a:b9:be:b9:69:07:62:90:d2: b0:1c:8b:e3:37:ab:80:ed:33:fa:c3:79:a4:c8:02:2a:fe:73: c9:ad:33:af:2e:de:8d:79:cf:f5:99:35:3b:8a:d9:60:07:d9: 2a:6f:b5:9c:08:00:e8:9c:54:bc:60:7c:d3:c0:ba:0f:82:cc: da:3c:9c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15HB919Hzvb4OyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzU5YTc1YzctODAzNC00NTJhLTk1MGQtYzUyZDdmOTAxMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU55dTvM3iRiKBdmeAInwjIoJYwiJ6DnIL5d Ugi89uImnG+DL0gOfhgwR8QPLmHwzUM0e+Y5yJBbSEEwbdkZgFsXUtjbeobvVliT oydAfq8JlIV40xF0/b3NlxuVu/b6zVg+8HCaj6brw4AbTLD7vJiDny88FMjLWtcD mS8N/Tc1eeoaAPDz/t/btsOL9mqoOkbh6BnpTupyf7m50JJxWlCps2FZTxOUGtCl tbEPAkKjluNnt+9wtfepRynaQF8ELlTIMzJX+HTYiDu0uWQ727Qz9PwkqddbK930 YiyEE2SJ2LjTVi9S4hZspZ/A51OnfY12ddY/m6fe/0h0OqzwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbFZKR3p9BzlFe/ReanXlL2fE9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvM2Y5ZDJmYWUtZmQ0OS0z M2JmLTg2NDUtYWZiYTkxNTBlMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvwymrHgWSjEgo4PuZEF0NrzlpwZfLsaMxbiYObKneLer0MqfbfQBxe 1WJaKGWvj3keg/S4OWkS96n4VNmeNI8Ph//PCBoymt+9lFJvRV/QCqxOg5lVTMLf nKy4tK66z0m2t3hFyMlv3Bit/9LPxz40eEYClpaE3c29qGEZXMpJNxq3JYiVPoxN FROSbTnx8LibzIe7yYjZH0s78vRwdSIdGlytxMk+xISIefdeqE7hHQQEDC4n2Yx3 ENK9FGq5vrlpB2KQ0rAci+M3q4DtM/rDeaTIAir+c8mtM68u3o15z/WZNTuK2WAH 2SpvtZwIAOicVLxgfNPAug+CzNo8nNE= -----END CERTIFICATE-----Generated at Mon Oct 27 18:11:20 2025 by rpki-client