$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa File: b25afc6e-65f8-30df-b098-3a2395986d3e.roa (raw, json) Hash identifier: CAuijfrez8hGn2XiDjSqv67AG4BFYUA8S0DQtAuHlz0= Subject key identifier: 97:32:DC:6F:5D:CE:89:13:38:6B:03:96:B0:FC:4D:31:6B:41:2D:CA Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584BB2F7A9ECE1664BC760B3FAC0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 27281 IP address blocks: 192.184.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:ec:e1:66:4b:c7:60:b3:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=159b30a2-6ac6-48b3-a2c4-1c20dc34a176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:ef:c0:ae:77:62:27:18:f6:98:47:41:fc: 96:34:9c:9d:a9:c9:b1:97:18:69:dc:99:bb:2d:b2: a5:9f:f2:3a:3d:a6:82:6b:0d:c3:7c:7f:ad:45:a4: b0:1d:cd:ed:49:45:5e:4d:99:f9:51:60:7d:f4:a4: 0e:3a:4c:cb:f8:8c:82:52:4a:e5:4e:f3:6b:bb:86: 80:c5:ba:c6:63:76:cc:63:36:fa:b9:c9:45:d8:7b: 2d:37:f8:1f:43:07:7c:6c:f0:6a:ba:f7:3a:f7:8b: e7:33:d5:3a:a7:b8:42:e3:b6:6a:95:11:01:47:0e: ce:99:08:cf:db:95:23:43:12:5f:bd:b1:33:71:9c: b0:70:99:75:61:9e:66:af:9a:82:15:89:83:06:c5: 14:b5:ee:b2:19:72:4c:05:5b:7f:ce:fc:01:3b:18: 1d:ce:fc:5f:fb:83:01:7c:f9:1d:83:0c:47:86:e4: 5b:a3:fd:ed:bd:7c:9d:ff:79:a0:93:ee:1e:98:c8: e7:42:db:ae:94:ce:95:33:e9:cb:9a:03:ba:8c:f8: 18:b5:a4:34:be:36:fd:f2:97:4b:f4:3c:9d:9e:ed: 70:8b:06:98:f1:18:93:29:db:22:4a:08:33:f6:fb: 1f:32:ba:8a:e9:86:99:0b:3b:b8:83:6b:0d:58:4d: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:32:DC:6F:5D:CE:89:13:38:6B:03:96:B0:FC:4D:31:6B:41:2D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f5:ee:b6:9f:8b:eb:9f:9b:3a:51:43:0b:ee:ca:36:d4:4a: 74:de:d6:77:94:e7:71:05:ef:b8:9f:d5:53:ce:7c:ce:95:a3: 84:8c:84:3b:fb:2a:99:04:a9:76:d6:f0:a2:6b:c8:5e:11:3c: a6:4a:42:b5:1c:b2:f1:df:82:3f:10:9c:b5:17:9b:46:ef:53: 3d:36:e3:f0:7f:02:6f:24:a8:58:6b:f1:95:59:63:42:17:f0: a7:d0:ce:8b:82:a3:0e:24:59:4b:fb:32:6c:5f:8f:fe:bc:98: c6:ba:5e:a1:8d:91:71:8e:e1:08:df:ec:9e:a5:5c:03:24:3e: 1e:cf:4f:1c:89:06:dc:8b:1e:58:32:46:82:6a:34:d5:ed:75: 89:eb:09:9b:52:e7:c2:7e:9d:a0:04:37:2c:21:82:c6:05:03: 4d:6e:6b:86:5f:64:11:d2:0e:f1:f3:c8:44:04:0c:63:53:26: 20:e3:11:db:ae:13:a3:ee:df:85:0c:37:5b:e6:5a:d9:60:37: fe:e4:61:b5:4a:4a:33:8e:fa:bb:f4:be:98:f9:9d:38:5e:f6: 05:a0:dc:fe:73:c5:6d:4f:d0:fd:75:6c:1a:75:8d:a1:96:b5: a3:07:d0:e5:76:aa:84:7c:f7:ad:8c:c3:bc:a4:94:3b:f3:e3: 18:08:5f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96ns4WZLx2Cz+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTU5YjMwYTItNmFjNi00OGIzLWEyYzQtMWMyMGRjMzRhMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEzvwK53YicY9phHQfyWNJydqcmxlxhp3Jm7 LbKln/I6PaaCaw3DfH+tRaSwHc3tSUVeTZn5UWB99KQOOkzL+IyCUkrlTvNru4aA xbrGY3bMYzb6uclF2HstN/gfQwd8bPBquvc694vnM9U6p7hC47ZqlREBRw7OmQjP 25UjQxJfvbEzcZywcJl1YZ5mr5qCFYmDBsUUte6yGXJMBVt/zvwBOxgdzvxf+4MB fPkdgwxHhuRbo/3tvXyd/3mgk+4emMjnQtuulM6VM+nLmgO6jPgYtaQ0vjb98pdL 9Dydnu1wiwaY8RiTKdsiSggz9vsfMrqK6YaZCzu4g2sNWE10rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcy3G9dzokTOGsDlrD8TTFrQS3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYjI1YWZjNmUtNjVmOC0z MGRmLWIwOTgtM2EyMzk1OTg2ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn17rafi+ufmzpRQwvuyjbUSnTe1neU53EF77if1VPOfM6Vo4SMhDv7 KpkEqXbW8KJryF4RPKZKQrUcsvHfgj8QnLUXm0bvUz024/B/Am8kqFhr8ZVZY0IX 8KfQzouCow4kWUv7Mmxfj/68mMa6XqGNkXGO4Qjf7J6lXAMkPh7PTxyJBtyLHlgy RoJqNNXtdYnrCZtS58J+naAENywhgsYFA01ua4ZfZBHSDvHzyEQEDGNTJiDjEduu E6Pu34UMN1vmWtlgN/7kYbVKSjOO+rv0vpj5nThe9gWg3P5zxW1P0P11bBp1jaGW taMH0OV2qoR8962Mw7yklDvz4xgIX6I= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:26 2025 by rpki-client