$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa File: fbed4876-7519-30f0-92ed-4f017527a1f1.roa (raw, json) Hash identifier: +J0o1bHc+OlR3YX+YFin2JcdZSEHvxr8BLJU+2gscBA= Subject key identifier: B5:12:9E:67:77:79:D9:E1:05:2A:1E:91:DC:6A:BB:AC:3F:DF:62:2D Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584B34B08E23FE19E0D6270602E0 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa Signing time: Mon 15 Sep 2025 19:25:28 +0000 ROA not before: Mon 15 Sep 2025 19:25:28 +0000 ROA not after: Sun 14 Dec 2025 20:25:28 +0000 asID: 399480 IP address blocks: 192.228.64.0/23 maxlen: 23 192.228.64.0/24 maxlen: 24 192.228.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:b0:8e:23:fe:19:e0:d6:27:06:02:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 15 19:25:28 2025 GMT Not After : Dec 14 20:25:28 2025 GMT Subject: CN=6d5141dc-a345-44e7-96f5-be12bf2a7460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:11:1b:19:b5:80:b5:b6:85:4b:f5:53:a0: 03:9f:c6:cd:0e:4c:3f:19:53:ac:87:b2:6b:8b:f4: 05:7a:ff:28:b1:25:48:17:6c:34:65:c3:df:e1:90: 13:85:1b:c6:19:fd:7b:1c:28:56:21:08:0a:74:cb: be:7a:cf:f4:a3:42:b9:76:80:5a:52:bc:07:57:19: 37:a0:55:0c:6f:04:0f:60:22:d0:aa:d2:34:3b:93: 15:98:cb:0e:3d:21:42:31:b3:3c:a8:f9:ce:7d:81: 04:59:df:6c:bd:47:c0:cd:5c:33:36:1a:c2:ea:6e: fe:b3:a2:e1:45:ed:6e:bf:8f:c5:f0:61:32:65:09: 73:10:05:dc:0d:97:c5:79:e3:26:0c:aa:da:4b:13: 73:af:95:58:97:bb:e4:c0:70:7b:ac:66:d7:d0:b3: f8:12:44:97:14:0d:09:15:87:e4:58:af:13:20:12: 4b:59:a2:b5:06:e1:c9:50:62:aa:0e:76:7a:b5:d6: f7:be:e1:2e:7e:53:14:27:a6:5e:8c:df:73:a0:be: 86:ce:b1:27:37:67:b9:96:59:75:9b:fd:34:64:ea: f2:58:19:c5:cf:e5:7d:cf:7d:a5:20:ef:93:6a:b4: 40:45:c7:02:8c:cc:4d:ff:1e:b8:ca:d2:1e:b9:a5: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:12:9E:67:77:79:D9:E1:05:2A:1E:91:DC:6A:BB:AC:3F:DF:62:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.228.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:79:aa:ad:22:a7:48:ca:5c:96:bb:d1:d2:30:cc:10:87:a3: 20:04:93:a3:7c:32:e4:70:13:4d:71:2b:03:1e:37:62:a8:fe: 68:5a:de:72:97:19:05:e9:22:67:f8:c3:3b:7f:fc:93:2b:32: 7f:25:4e:13:f0:71:79:e9:b4:42:ae:8a:11:41:03:00:c7:d8: e1:b1:24:fb:94:dd:b3:c0:f6:a9:04:3f:0c:db:55:18:f9:06: d4:88:17:52:e8:75:b4:cb:13:b4:ac:4d:bd:62:96:fd:30:67: cc:bb:3e:2c:c5:1c:40:b1:02:9b:b5:25:6d:4b:1b:18:40:4b: 5e:66:99:b2:04:77:36:b5:55:31:8f:9e:ea:69:14:f7:c1:62: 21:e3:47:9d:46:03:86:fb:68:5b:4b:ae:3f:29:63:9c:a9:8e: a7:21:57:2b:93:28:69:2b:70:57:fa:b4:d9:b7:2e:e9:e6:39: b8:7d:bc:f3:6b:00:1d:44:77:ee:b8:c3:81:cb:45:3d:0a:2b: 3b:c5:71:b6:3c:ad:e0:73:96:28:ef:f8:54:8a:dc:45:8c:fd: 24:08:46:fe:23:e8:d8:f7:c1:f4:8c:a3:d5:db:49:ff:99:0a: 67:5e:a2:2d:94:da:8b:13:1f:50:01:ef:5a:31:f4:ba:be:f5: 55:1f:0b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0sI4j/hng1icGAuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDkxNTE5MjUyOFoXDTI1MTIxNDIwMjUyOFowLzEtMCsGA1UEAxMk NmQ1MTQxZGMtYTM0NS00NGU3LTk2ZjUtYmUxMmJmMmE3NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7QRGxm1gLW2hUv1U6ADn8bNDkw/GVOsh7Jr i/QFev8osSVIF2w0ZcPf4ZAThRvGGf17HChWIQgKdMu+es/0o0K5doBaUrwHVxk3 oFUMbwQPYCLQqtI0O5MVmMsOPSFCMbM8qPnOfYEEWd9svUfAzVwzNhrC6m7+s6Lh Re1uv4/F8GEyZQlzEAXcDZfFeeMmDKraSxNzr5VYl7vkwHB7rGbX0LP4EkSXFA0J FYfkWK8TIBJLWaK1BuHJUGKqDnZ6tdb3vuEuflMUJ6ZejN9zoL6GzrEnN2e5lll1 m/00ZOryWBnFz+V9z32lIO+TarRARccCjMxN/x64ytIeuaWfWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUSnmd3ednhBSoekdxqu6w/32ItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvZmJlZDQ4NzYtNzUxOS0z MGYwLTkyZWQtNGYwMTc1MjdhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwORAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV5qq0ip0jKXJa70dIwzBCHoyAEk6N8MuRwE01xKwMeN2Ko/mha3nKX GQXpImf4wzt//JMrMn8lThPwcXnptEKuihFBAwDH2OGxJPuU3bPA9qkEPwzbVRj5 BtSIF1LodbTLE7SsTb1ilv0wZ8y7PizFHECxApu1JW1LGxhAS15mmbIEdza1VTGP nuppFPfBYiHjR51GA4b7aFtLrj8pY5ypjqchVyuTKGkrcFf6tNm3LunmObh9vPNr AB1Ed+64w4HLRT0KKzvFcbY8reBzlijv+FSK3EWM/SQIRv4j6Nj3wfSMo9XbSf+Z Cmdeoi2U2osTH1AB71ox9Lq+9VUfC6s= -----END CERTIFICATE-----Generated at Wed Oct 8 17:19:32 2025 by rpki-client