$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa File: c23a7526-f08d-3cf8-92df-a220fcbaffac.roa (raw, json) Hash identifier: d1jdHflLQpY57j0/STgTGLrjirOhxb56XwJIO+ZLr+0= Subject key identifier: C4:1E:42:40:21:47:64:BB:F1:23:E1:04:2D:E1:92:CD:22:7E:B2:52 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584BA9325AC4D8F0F9ED5996C500 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 192.184.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5a:c4:d8:f0:f9:ed:59:96:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=af41d299-232a-44e3-be07-f4c9b1035600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:06:c0:1d:96:02:d2:a0:da:42:69:da:b2: 59:53:fd:1a:e3:61:b8:16:1c:e5:ea:4f:ab:b8:c5: 20:b7:f5:6b:55:0e:63:16:6b:52:3c:85:57:c4:5a: 02:7d:91:50:4e:e1:de:dd:80:bf:29:30:0a:30:ec: bd:cb:a0:47:2f:aa:b3:fd:e4:7a:6f:a6:26:29:e7: 0b:34:7c:0f:7b:4b:1b:4a:e3:33:d9:9c:12:69:b4: e4:24:88:43:f2:3f:5b:b2:b2:b7:c9:89:57:2e:57: b0:e9:81:5b:87:98:df:5f:64:5b:75:b5:81:f6:31: bc:a9:32:ee:9e:f5:a4:73:7e:9b:e4:b3:8b:54:9d: 01:59:9d:fa:42:13:56:49:56:4b:cf:d2:9a:06:5b: 27:e0:83:74:19:c2:9b:95:95:21:8c:92:33:30:dc: 40:06:24:a9:98:3b:77:a2:d4:0d:6a:07:12:9d:de: 3a:80:65:d3:1d:1e:50:b2:07:d7:b4:11:31:cf:09: 48:9d:29:46:3f:af:e1:37:da:44:a6:0c:11:65:25: c2:bf:c1:04:f6:4f:72:ac:da:96:99:bd:4a:9d:cf: 76:3f:d6:70:7a:b2:2e:05:7b:4a:c7:14:df:24:ce: 67:3e:ec:8f:f8:a7:d7:2d:50:e5:23:4d:3c:11:bc: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:42:40:21:47:64:BB:F1:23:E1:04:2D:E1:92:CD:22:7E:B2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f6:e2:3d:1d:04:ee:5a:38:a4:43:af:b6:f6:78:4d:e1:f1: ae:cc:21:1f:b2:33:51:4b:a6:48:52:cd:73:ac:c7:39:31:1d: c4:4a:47:96:0d:1c:67:ff:a5:91:42:b5:39:80:72:d0:d1:ca: 5b:1c:71:28:1a:51:e8:8c:2d:04:49:37:be:c6:ba:05:57:94: 09:0e:f3:80:bf:15:f1:96:ab:b8:ec:49:76:32:9a:bf:e1:58: 63:5b:b1:0a:23:60:13:75:ca:f5:9b:79:9c:3d:99:34:83:0f: 64:b5:68:2d:85:43:52:ef:d5:44:18:42:d5:a0:83:c8:58:f3: 1c:6d:59:78:25:c3:3d:bb:a6:a2:8a:f9:fa:90:fe:1d:36:1f: 9d:f9:70:70:72:36:58:8a:f5:75:fa:f3:fa:03:03:b8:16:f4: bb:5f:ba:14:07:86:e0:52:9e:95:0c:94:39:ae:d6:d5:8b:53: 33:c7:16:7f:64:09:fc:42:24:f3:36:c5:26:e6:39:c3:15:62: 54:b1:3e:89:4f:f8:b7:13:c1:7a:3d:f3:23:65:77:44:f1:8d: 96:f3:3c:f5:79:78:bb:70:c9:44:5f:5b:1e:97:7c:76:bc:a5: 0f:70:53:a5:de:29:2e:cc:5c:14:1e:d5:9d:87:7d:fb:5e:95: 91:ec:fe:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlrE2PD57VmWxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWY0MWQyOTktMjMyYS00NGUzLWJlMDctZjRjOWIxMDM1NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlYGwB2WAtKg2kJp2rJZU/0a42G4Fhzl6k+r uMUgt/VrVQ5jFmtSPIVXxFoCfZFQTuHe3YC/KTAKMOy9y6BHL6qz/eR6b6YmKecL NHwPe0sbSuMz2ZwSabTkJIhD8j9bsrK3yYlXLlew6YFbh5jfX2RbdbWB9jG8qTLu nvWkc36b5LOLVJ0BWZ36QhNWSVZLz9KaBlsn4IN0GcKblZUhjJIzMNxABiSpmDt3 otQNagcSnd46gGXTHR5QsgfXtBExzwlInSlGP6/hN9pEpgwRZSXCv8EE9k9yrNqW mb1Knc92P9ZwerIuBXtKxxTfJM5nPuyP+KfXLVDlI008EbwUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQeQkAhR2S78SPhBC3hks0ifrJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYzIzYTc1MjYtZjA4ZC0z Y2Y4LTkyZGYtYTIyMGZjYmFmZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn24j0dBO5aOKRDr7b2eE3h8a7MIR+yM1FLpkhSzXOsxzkxHcRKR5YN HGf/pZFCtTmActDRylsccSgaUeiMLQRJN77GugVXlAkO84C/FfGWq7jsSXYymr/h WGNbsQojYBN1yvWbeZw9mTSDD2S1aC2FQ1Lv1UQYQtWgg8hY8xxtWXglwz27pqKK +fqQ/h02H535cHByNliK9XX68/oDA7gW9LtfuhQHhuBSnpUMlDmu1tWLUzPHFn9k CfxCJPM2xSbmOcMVYlSxPolP+LcTwXo98yNld0TxjZbzPPV5eLtwyURfWx6XfHa8 pQ9wU6XeKS7MXBQe1Z2HfftelZHs/oQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:16:57 2025 by rpki-client