$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa File: 43db4554-4f92-301e-95ab-48747f15d838.roa (raw, json) Hash identifier: ZVdOR5E47YNuY1jbXfYkbNa+6LxWgANx+3pJQZy73VQ= Subject key identifier: 5A:0F:63:7D:81:DF:F9:58:68:DB:CB:E7:1B:E0:67:B7:C6:EE:07:CF Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584BA9325AD7497A97BD5749EF80 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 192.184.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5a:d7:49:7a:97:bd:57:49:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=25a2a370-b774-494c-bf56-f4ffcda715a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:e8:2b:93:a5:4e:35:71:da:fe:a5:67:2c: 3f:47:b7:1f:1b:c3:46:73:0d:c8:68:ac:e9:cb:af: ac:3e:58:e6:80:02:d1:67:ae:4f:70:53:7e:31:50: ef:1e:58:da:ff:14:06:2b:bf:0e:89:08:5a:59:1b: b8:e5:34:4e:ba:45:e5:54:37:7a:5a:5a:a9:2e:79: db:37:f9:1e:8d:7f:64:90:1e:14:d0:2d:47:02:72: bf:1e:97:f6:d0:13:51:16:5d:dc:dd:0c:56:df:31: a9:5f:e9:39:24:4b:24:9f:34:4a:8f:62:01:dd:1a: f6:da:10:43:57:b1:9c:53:06:67:cc:3e:39:ff:80: 83:83:26:fc:67:e2:3e:9a:e9:39:78:ca:ea:ea:80: d5:27:fc:70:9d:1a:5c:1f:6d:42:0f:b1:38:df:1d: 0d:7d:fb:42:94:20:09:ee:e0:9a:a3:80:d3:10:73: a5:9f:81:06:09:a7:52:91:72:16:92:37:9d:a3:86: d9:f3:32:89:96:2d:81:99:3e:f2:d1:7c:8f:ff:25: 00:8b:2a:2e:ee:a1:21:7d:5d:c9:ed:de:00:b8:cd: 54:27:3b:7c:41:ac:7c:f0:c1:ec:8a:ce:83:e2:b5: f6:ee:d7:a8:ad:6d:a3:8d:fe:00:9d:0b:58:43:e9: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:63:7D:81:DF:F9:58:68:DB:CB:E7:1B:E0:67:B7:C6:EE:07:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/43db4554-4f92-301e-95ab-48747f15d838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:20:7f:e9:6e:42:65:30:9a:49:ff:21:ae:0e:49:33:3e:b3: 24:21:b1:c7:88:f3:a0:aa:ae:6c:df:f4:07:e7:a7:83:bb:d1: 8f:e7:32:0e:21:4e:13:97:a5:d3:37:80:0d:50:65:7d:94:ba: b0:f0:64:e3:3b:99:c0:cc:51:d2:a9:cb:5e:c5:d4:01:b1:94: 4d:a9:b8:80:9a:23:3b:d8:82:1d:b7:3c:40:fc:77:fa:fb:e4: c2:d2:0c:3d:f5:ab:11:43:fb:e0:7e:c3:64:b9:64:ec:ec:60: 0e:5e:e9:aa:d7:9a:b2:f4:4b:05:c1:c7:91:0c:74:7c:62:c2: 45:1d:c2:61:f4:4e:ae:de:02:9e:6e:b0:80:09:18:bb:56:25: a6:e1:59:70:2d:bd:3d:26:7b:22:40:bf:f4:52:c8:e9:69:a3: ac:00:e2:91:81:fe:c5:d5:3a:d4:6d:f1:d0:6a:cc:1a:b3:e6: 9f:f8:0d:d4:d5:84:00:62:a2:40:fe:d5:6a:a8:45:df:e8:21: f7:7b:db:63:5c:92:18:47:c5:21:e0:4b:43:7d:26:64:74:18: 13:7a:bc:9a:f8:0e:be:6c:d9:be:ed:99:57:5d:0d:de:4e:e5: f7:07:4d:0f:94:ce:66:8d:6f:36:57:6a:49:07:ad:77:72:54: 26:bc:f2:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlrXSXqXvVdJ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MjVhMmEzNzAtYjc3NC00OTRjLWJmNTYtZjRmZmNkYTcxNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhPoK5OlTjVx2v6lZyw/R7cfG8NGcw3IaKzp y6+sPljmgALRZ65PcFN+MVDvHlja/xQGK78OiQhaWRu45TROukXlVDd6WlqpLnnb N/kejX9kkB4U0C1HAnK/Hpf20BNRFl3c3QxW3zGpX+k5JEsknzRKj2IB3Rr22hBD V7GcUwZnzD45/4CDgyb8Z+I+muk5eMrq6oDVJ/xwnRpcH21CD7E43x0NfftClCAJ 7uCao4DTEHOln4EGCadSkXIWkjedo4bZ8zKJli2BmT7y0XyP/yUAiyou7qEhfV3J 7d4AuM1UJzt8Qax88MHsis6D4rX27teorW2jjf4AnQtYQ+nkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoPY32B3/lYaNvL5xvgZ7fG7gfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvNDNkYjQ1NTQtNGY5Mi0z MDFlLTk1YWItNDg3NDdmMTVkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAgf+luQmUwmkn/Ia4OSTM+syQhsceI86Cqrmzf9Afnp4O70Y/nMg4h ThOXpdM3gA1QZX2UurDwZOM7mcDMUdKpy17F1AGxlE2puICaIzvYgh23PED8d/r7 5MLSDD31qxFD++B+w2S5ZOzsYA5e6arXmrL0SwXBx5EMdHxiwkUdwmH0Tq7eAp5u sIAJGLtWJabhWXAtvT0meyJAv/RSyOlpo6wA4pGB/sXVOtRt8dBqzBqz5p/4DdTV hABiokD+1WqoRd/oIfd722NckhhHxSHgS0N9JmR0GBN6vJr4Dr5s2b7tmVddDd5O 5fcHTQ+UzmaNbzZXakkHrXdyVCa88i8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:09 2025 by rpki-client