$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/fddc6c19-90c4-3bd0-8396-9396533123ef.roa File: fddc6c19-90c4-3bd0-8396-9396533123ef.roa (raw, json) Hash identifier: R9VZ/gTMgp1zqXo5VI2auyJI+oJGmtWMkIJYS+pkpjo= Subject key identifier: 83:FA:2B:A7:24:A5:93:B4:14:A8:57:E0:D1:A6:19:25:52:A6:3D:47 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584BA9325AA93481AFFE367CFAA0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/fddc6c19-90c4-3bd0-8396-9396533123ef.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 192.184.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5a:a9:34:81:af:fe:36:7c:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=152e5605-5d75-4ea5-a36d-21b500213a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:b3:bd:81:6c:94:e2:54:f8:8e:dc:5c:15: ea:de:06:a1:80:00:4a:00:51:95:9a:93:d0:c4:67: 63:13:6e:a7:c4:b0:c2:91:66:e4:c1:20:3d:b6:54: 43:a6:4e:3d:26:34:96:31:59:60:80:35:b3:19:d6: 92:f4:0e:c6:02:36:d4:e1:d6:fe:fc:43:eb:d8:e2: 23:ef:a4:03:77:a8:89:d9:69:fd:b4:20:fb:f1:46: 13:07:9e:1e:1f:3a:58:c8:78:84:70:0c:3e:31:ea: 41:3b:26:d6:3f:5e:37:7f:70:0f:39:d6:4d:71:37: e9:e9:94:8d:04:83:b1:a2:93:d8:c6:25:88:f1:bf: c5:99:21:f3:90:c2:0e:c8:af:e5:eb:95:7f:6f:8c: 6e:2f:e7:4d:10:5d:3e:e1:eb:27:d2:39:e0:a6:ba: fb:cc:dd:f2:1e:cc:48:31:57:b2:71:31:b3:13:2a: 11:1c:13:42:e3:11:d3:f5:f2:d6:3b:4f:bb:43:9d: 93:c6:d9:60:44:fd:8c:5c:21:b6:e0:5b:e6:b6:2c: 24:f2:36:4f:aa:7b:76:35:4c:91:fa:96:78:2f:f2: aa:6c:4f:8d:91:69:68:f2:b8:65:ae:2b:56:b1:07: 71:8f:f1:f7:95:d1:be:21:c2:3c:5d:10:4d:bf:b5: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:2B:A7:24:A5:93:B4:14:A8:57:E0:D1:A6:19:25:52:A6:3D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/fddc6c19-90c4-3bd0-8396-9396533123ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e7:5f:44:8f:13:07:8a:7a:87:55:07:86:8a:5e:fc:c6:ab: 63:a7:9f:b9:b3:dc:8a:c6:00:db:b8:61:6e:10:96:3e:d4:fd: 1f:19:11:23:71:c8:f5:b0:75:c3:a1:b0:58:4f:d0:b4:1f:f4: 8e:89:dc:fc:e4:69:39:3d:a9:f5:75:40:3c:f4:8e:f3:34:9d: ef:b5:bb:30:42:ed:fe:6a:7c:4e:37:48:50:b6:11:e7:90:29: 1c:66:83:ea:7d:b3:55:63:94:41:8f:dd:f1:56:35:df:9c:66: ce:bc:5e:eb:d3:f4:4f:cd:28:d1:ac:a3:cb:dd:ea:b3:11:74: 62:71:b5:b5:a6:cd:54:08:41:cd:81:05:26:b7:df:4e:80:9b: fd:77:d4:a8:ce:31:8b:70:31:67:5a:d8:9a:ec:c4:bd:eb:d7: 76:1b:66:7a:32:f7:42:1b:61:3a:40:1d:40:a4:46:5b:34:b9: 2a:36:20:0d:1e:a8:3b:ac:89:21:2b:e7:c0:6e:7a:92:82:da: 01:9f:1f:63:9b:f4:b4:72:1a:71:a3:16:45:30:a4:37:47:8a: 74:6c:7a:40:21:66:e2:ad:ee:3a:40:ec:7a:dc:60:9c:d5:a6: 2d:fe:a2:f5:01:6d:7b:6e:c5:60:b9:a5:34:92:a6:53:c1:ec: 87:09:ec:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlqpNIGv/jZ8+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MTUyZTU2MDUtNWQ3NS00ZWE1LWEzNmQtMjFiNTAwMjEzYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwSzvYFslOJU+I7cXBXq3gahgABKAFGVmpPQ xGdjE26nxLDCkWbkwSA9tlRDpk49JjSWMVlggDWzGdaS9A7GAjbU4db+/EPr2OIj 76QDd6iJ2Wn9tCD78UYTB54eHzpYyHiEcAw+MepBOybWP143f3APOdZNcTfp6ZSN BIOxopPYxiWI8b/FmSHzkMIOyK/l65V/b4xuL+dNEF0+4esn0jngprr7zN3yHsxI MVeycTGzEyoRHBNC4xHT9fLWO0+7Q52TxtlgRP2MXCG24Fvmtiwk8jZPqnt2NUyR +pZ4L/KqbE+NkWlo8rhlritWsQdxj/H3ldG+IcI8XRBNv7V/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP6K6ckpZO0FKhX4NGmGSVSpj1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvZmRkYzZjMTktOTBjNC0z YmQwLTgzOTYtOTM5NjUzMzEyM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABznX0SPEweKeodVB4aKXvzGq2Onn7mz3IrGANu4YW4Qlj7U/R8ZESNx yPWwdcOhsFhP0LQf9I6J3PzkaTk9qfV1QDz0jvM0ne+1uzBC7f5qfE43SFC2EeeQ KRxmg+p9s1VjlEGP3fFWNd+cZs68XuvT9E/NKNGso8vd6rMRdGJxtbWmzVQIQc2B BSa3306Am/131KjOMYtwMWda2JrsxL3r13YbZnoy90IbYTpAHUCkRls0uSo2IA0e qDusiSEr58BuepKC2gGfH2Ob9LRyGnGjFkUwpDdHinRsekAhZuKt7jpA7HrcYJzV pi3+ovUBbXtuxWC5pTSSplPB7IcJ7C8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:58:50 2025 by rpki-client