$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa File: 5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa (raw, json) Hash identifier: 6iv71xRMwSIIXKA0lfQ+HieZjA/JezMZgLbz0DAqcxs= Subject key identifier: 4D:E1:EC:60:A4:34:D2:33:3C:4C:07:F5:C9:FE:F6:52:0C:AB:14:4E Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584B970CE83B4B0B376E1B4BD580 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 6360 IP address blocks: 192.48.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e8:3b:4b:0b:37:6e:1b:4b:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=3ffd6bb3-24bb-48a9-8b9b-3554cc08dffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:43:18:8e:ea:9b:52:1f:6d:ba:99:ab:00: f8:b3:ef:2e:34:e2:17:81:2e:af:a1:90:1a:38:95: 94:06:9b:52:5d:c0:8f:40:93:1c:fe:05:95:cd:78: 71:1b:f8:77:6e:97:8a:e4:67:8a:72:00:7d:03:f8: 68:ab:e0:e2:60:81:ed:12:c3:6a:09:f1:61:23:74: 06:17:d1:99:2c:7f:37:72:db:eb:cd:1d:9e:67:39: bd:e4:fb:3a:ad:d6:d5:e7:ee:59:89:a0:de:bc:97: 8a:e0:c9:ba:05:20:a8:c3:e0:30:13:25:2a:ed:a3: 28:d5:a8:d4:61:54:3a:fa:c2:5b:20:d7:0f:a4:9d: 3b:eb:13:6f:22:25:b5:f5:24:09:ba:ec:e7:2a:92: ea:58:57:c9:d4:0c:b7:e3:56:af:40:62:72:3f:04: 49:2e:b8:f8:f3:ba:24:c3:ae:e6:16:76:d6:ee:51: 68:f7:ee:68:fb:6a:57:26:29:12:98:63:19:23:92: a5:ee:fa:34:a9:04:b3:a9:6c:a3:5e:77:5d:12:2c: 38:df:c4:4d:75:a6:5f:06:2e:1c:d0:5a:1a:34:d6: 24:38:97:15:2b:64:d5:6f:a5:d2:c2:fe:52:68:90: 1b:77:c0:ef:b0:d3:b2:23:cf:76:7c:0a:57:39:fe: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E1:EC:60:A4:34:D2:33:3C:4C:07:F5:C9:FE:F6:52:0C:AB:14:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.48.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:79:e6:4c:f7:9f:02:91:c7:f3:c1:02:d5:6e:3d:a0:e1:56: 87:da:1b:96:d8:46:9d:82:97:64:69:a5:19:a2:26:74:8c:3e: dc:90:19:6d:89:95:60:9e:8b:d8:4a:9d:a7:85:2b:d8:c9:ac: 44:33:89:59:f2:d6:cb:34:f0:3c:76:56:47:37:3f:23:04:16: 0e:04:c4:02:47:6b:c5:91:10:10:95:84:d5:6c:01:14:e6:69: c0:17:31:be:56:c9:aa:86:3e:14:4a:c0:ab:b5:7e:d4:76:6e: 46:4b:3a:6f:03:20:3e:99:96:d0:b9:90:e2:5f:0f:71:cf:08: db:b8:63:a3:bb:fd:3f:8b:a0:44:20:8b:1b:a3:ec:54:32:b0: d5:52:de:8c:44:69:5e:07:53:9c:35:0f:e8:b9:56:ea:67:5a: 85:04:8f:94:4a:ef:63:0c:b9:69:9f:22:a0:90:3e:f1:20:87: 93:92:2e:4d:d7:bc:9f:2f:12:c5:a7:26:a3:5d:d4:1d:24:82: d2:fe:00:ff:c5:7d:84:26:90:32:fb:34:86:26:a9:75:b1:78: a6:da:9c:c9:56:dc:09:ed:51:2a:14:e9:a4:b1:10:2e:2e:d3: ef:18:de:52:a2:06:ba:04:f4:06:87:d9:df:42:13:c6:71:fe: 70:04:f4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOg7Sws3bhtL1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk M2ZmZDZiYjMtMjRiYi00OGE5LThiOWItMzU1NGNjMDhkZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK9DGI7qm1IfbbqZqwD4s+8uNOIXgS6voZAa OJWUBptSXcCPQJMc/gWVzXhxG/h3bpeK5GeKcgB9A/hoq+DiYIHtEsNqCfFhI3QG F9GZLH83ctvrzR2eZzm95Ps6rdbV5+5ZiaDevJeK4Mm6BSCow+AwEyUq7aMo1ajU YVQ6+sJbINcPpJ076xNvIiW19SQJuuznKpLqWFfJ1Ay341avQGJyPwRJLrj487ok w67mFnbW7lFo9+5o+2pXJikSmGMZI5Kl7vo0qQSzqWyjXnddEiw438RNdaZfBi4c 0FoaNNYkOJcVK2TVb6XSwv5SaJAbd8DvsNOyI892fApXOf5d/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3h7GCkNNIzPEwH9cn+9lIMqxROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNWZmOTFhNTAtNzhkNy0z OTE5LWI5YTgtMTRkZWRkNmNmMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD955kz3nwKRx/PBAtVuPaDhVofaG5bYRp2Cl2RppRmiJnSMPtyQGW2J lWCei9hKnaeFK9jJrEQziVny1ss08Dx2Vkc3PyMEFg4ExAJHa8WREBCVhNVsARTm acAXMb5WyaqGPhRKwKu1ftR2bkZLOm8DID6ZltC5kOJfD3HPCNu4Y6O7/T+LoEQg ixuj7FQysNVS3oxEaV4HU5w1D+i5VupnWoUEj5RK72MMuWmfIqCQPvEgh5OSLk3X vJ8vEsWnJqNd1B0kgtL+AP/FfYQmkDL7NIYmqXWxeKbanMlW3AntUSoU6aSxEC4u 0+8Y3lKiBroE9AaH2d9CE8Zx/nAE9FA= -----END CERTIFICATE-----Generated at Tue Nov 4 09:49:26 2025 by rpki-client