$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa File: 57a291ec-9029-3bb0-b770-6419cd621358.roa (raw, json) Hash identifier: QHNliIQEo1pdtCWWBT18dd8wDECBvfHOhrGjF4f03l8= Subject key identifier: 42:4E:27:30:AE:C1:06:5E:8F:4F:31:AC:5B:ED:14:3B:01:E1:9A:22 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B99D790B97310D4824EBC9380 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 5050 IP address blocks: 192.231.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:90:b9:73:10:d4:82:4e:bc:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=67caf488-7eb3-41ba-b57e-749f4f49d82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:c8:a1:26:6d:5e:d7:5f:ee:bc:45:b4:3c: 8a:1e:f7:33:7e:cd:87:76:ea:94:2f:69:49:1b:80: e2:8f:b3:df:0c:c3:76:c1:64:f8:30:06:ba:91:c0: 47:08:2c:f9:a3:ef:90:86:8b:56:fd:c0:e9:60:81: f9:51:23:2d:3d:9f:9c:0c:33:8a:7c:3a:ec:0f:e7: 9c:c9:3f:26:dd:30:5c:bd:5f:37:1b:f4:6c:72:0e: 3d:d4:6d:3c:d1:4c:47:b1:8d:02:00:71:cf:53:11: 85:6b:d4:b6:fc:18:48:9a:45:3e:0c:fe:a5:e8:8b: 6a:7d:92:2c:87:e5:80:eb:0c:c2:d0:0c:22:4b:9f: 16:20:70:25:09:06:7c:50:6a:9d:ac:bb:ca:b7:2d: bc:6c:c5:28:66:2e:fb:97:ea:bc:74:78:b8:ae:cf: df:2a:34:22:2c:83:1c:3f:e5:7b:7d:0a:a9:0f:89: 38:a4:2f:0c:87:8d:ac:a3:b1:ea:d6:8a:dd:e0:cc: f1:f9:3d:ff:c2:b9:88:98:44:aa:d1:76:34:1a:4e: fe:20:73:47:0d:f7:42:1f:70:c8:09:67:3f:b9:ef: d9:10:77:39:70:2f:b3:87:59:fc:9f:8b:3f:20:53: bf:95:7b:ac:4d:6d:f1:b5:e6:71:c6:da:35:d0:0a: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:27:30:AE:C1:06:5E:8F:4F:31:AC:5B:ED:14:3B:01:E1:9A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.231.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:27:aa:17:e1:16:e0:b1:fb:7d:c8:cc:93:f1:60:a9:74:11: 1e:67:d0:ce:2e:54:62:97:ee:5d:7b:8b:35:12:aa:fa:fb:3d: c1:f1:05:21:51:48:67:f0:9d:b5:55:73:2e:e4:f5:7f:20:a9: d0:f5:a6:ff:ab:c2:fc:a6:8f:7c:14:5c:0a:f4:7d:39:b8:d7: 14:90:53:23:e7:5c:c1:a5:6f:a7:eb:d7:7d:fc:c3:1b:c3:7c: ce:9d:1c:cf:50:76:58:fc:1d:15:7f:cc:eb:48:46:4a:5e:17: 48:79:bf:20:bc:a9:ac:2e:75:9a:3f:4e:53:1a:8d:3e:d5:ec: f9:4b:e2:17:03:80:86:98:f6:42:4b:68:44:74:e8:7b:86:8f: c9:6f:29:9d:05:43:76:e3:55:26:20:1a:4c:48:7b:9c:54:4b: 69:04:c9:c8:42:8b:d4:b3:f4:1a:05:03:f5:17:e3:52:ee:96: ad:7f:5c:d1:8e:ea:dc:c5:c7:5b:6a:cd:7d:a9:de:ac:a0:9a: af:5b:64:52:d5:44:44:a4:c9:6e:a3:33:02:e1:22:32:63:4a: 87:c5:db:1c:38:22:00:d1:8d:12:2a:5a:47:44:15:4a:e8:d3: 40:83:e9:dd:21:2a:6f:8b:84:c5:e0:02:a1:df:ee:e3:6d:60: 5a:73:2b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15C5cxDUgk68k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjdjYWY0ODgtN2ViMy00MWJhLWI1N2UtNzQ5ZjRmNDlkODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswfIoSZtXtdf7rxFtDyKHvczfs2HduqUL2lJ G4Dij7PfDMN2wWT4MAa6kcBHCCz5o++QhotW/cDpYIH5USMtPZ+cDDOKfDrsD+ec yT8m3TBcvV83G/Rscg491G080UxHsY0CAHHPUxGFa9S2/BhImkU+DP6l6ItqfZIs h+WA6wzC0AwiS58WIHAlCQZ8UGqdrLvKty28bMUoZi77l+q8dHi4rs/fKjQiLIMc P+V7fQqpD4k4pC8Mh42so7Hq1ord4Mzx+T3/wrmImESq0XY0Gk7+IHNHDfdCH3DI CWc/ue/ZEHc5cC+zh1n8n4s/IFO/lXusTW3xteZxxto10AqzCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJOJzCuwQZej08xrFvtFDsB4ZoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNTdhMjkxZWMtOTAyOS0z YmIwLWI3NzAtNjQxOWNkNjIxMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQnqhfhFuCx+33IzJPxYKl0ER5n0M4uVGKX7l17izUSqvr7PcHxBSFR SGfwnbVVcy7k9X8gqdD1pv+rwvymj3wUXAr0fTm41xSQUyPnXMGlb6fr1338wxvD fM6dHM9Qdlj8HRV/zOtIRkpeF0h5vyC8qawudZo/TlMajT7V7PlL4hcDgIaY9kJL aER06HuGj8lvKZ0FQ3bjVSYgGkxIe5xUS2kEychCi9Sz9BoFA/UX41Lulq1/XNGO 6tzFx1tqzX2p3qygmq9bZFLVRESkyW6jMwLhIjJjSofF2xw4IgDRjRIqWkdEFUro 00CD6d0hKm+LhMXgAqHf7uNtYFpzK6E= -----END CERTIFICATE-----Generated at Mon Oct 27 18:02:58 2025 by rpki-client