$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/a6ba7173-946a-3626-8e31-3b2887cdac95.roa File: a6ba7173-946a-3626-8e31-3b2887cdac95.roa (raw, json) Hash identifier: lKXLa3Tl6VRL7oD2dHPdVMlYIGBMHAEKZ+hvrKWwfUw= Subject key identifier: 3F:30:13:BD:04:B4:5F:96:00:38:31:D3:09:44:69:CA:36:E8:24:1E Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584AFC1C103101CA4AC52D3C6D00 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/a6ba7173-946a-3626-8e31-3b2887cdac95.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 168.203.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:10:31:01:ca:4a:c5:2d:3c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=44c5fb23-25a6-4285-8fb2-212e035bdb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:be:3b:a0:cb:db:02:65:af:51:a9:6b:f0: f4:79:7c:f6:d5:9f:14:ae:e9:33:31:54:4a:d5:e6: f7:57:b7:70:ec:1a:2b:68:75:82:08:e5:07:04:22: a2:72:b4:16:10:c1:18:e3:88:98:06:4f:d2:f6:b2: 15:96:d9:5f:38:d3:52:84:ac:67:ad:67:88:e0:ee: 10:9b:c5:ad:76:9e:50:a0:e8:3d:de:be:d7:49:9d: 47:f6:17:80:06:1e:31:1f:97:b4:c5:8f:d1:31:8e: 3b:f2:7a:b4:58:0f:c6:7e:54:f3:92:72:6b:37:60: 84:05:9c:24:eb:35:95:20:c1:c4:63:d7:22:74:59: 30:60:70:a5:9c:43:49:d5:83:38:fe:4e:60:d1:5e: a3:2e:51:29:c2:b5:30:8b:eb:11:a8:0e:b7:27:9a: 10:94:ee:d0:05:1b:0f:13:b9:a2:f7:81:88:f6:14: a9:9b:58:da:41:eb:7b:50:a4:95:2a:38:3d:a6:4b: c2:36:1b:2e:ff:da:d7:f1:56:a1:6c:2f:d0:19:e8: d5:b7:9c:07:63:ec:c9:55:94:3c:15:50:54:65:c6: 6f:10:71:40:ac:86:7c:2c:5d:ed:8a:ab:30:0a:be: e9:a5:f4:7f:a7:6a:b9:ce:99:f2:de:4b:ee:65:54: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:30:13:BD:04:B4:5F:96:00:38:31:D3:09:44:69:CA:36:E8:24:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/a6ba7173-946a-3626-8e31-3b2887cdac95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9e:01:bb:79:44:a2:47:ac:b8:2c:e1:b1:04:ab:6c:b2:29: be:89:8a:8b:2d:7c:67:be:9c:a2:e3:e7:55:4f:80:d8:df:e0: 22:e0:aa:06:61:cc:a8:3a:86:eb:dc:18:d4:e3:3e:da:5f:f6: ae:5e:9a:8a:4e:34:cc:d3:1b:b5:cf:24:4a:d9:3f:ef:fd:72: 2d:c9:63:f4:f0:11:19:64:d0:f1:92:e3:b0:29:fe:f8:25:50: 64:79:f1:41:88:fb:d4:6b:67:42:ed:0c:e1:df:2f:29:21:5e: 32:c3:84:4a:44:d8:05:0d:f5:d7:16:8d:4c:b4:48:f8:74:9a: de:8b:99:6d:ec:bb:1d:9c:6e:2e:ed:a3:23:84:7d:1c:c2:db: 98:a8:08:28:da:a1:93:fc:3b:72:71:af:08:8d:2c:e1:84:d5: af:87:2a:34:ef:ed:39:44:e5:66:6b:12:09:41:16:4e:c9:32: 4a:24:ef:d3:ab:24:db:d6:12:ec:3c:fa:5e:b2:fd:1f:30:28: 5b:67:3c:df:62:ae:c4:58:41:1a:97:b2:12:d9:0f:55:cb:65: d3:67:bd:d4:bf:8a:b3:1e:e9:0e:57:da:ab:e3:1e:23:b2:07: e1:eb:0c:a2:a6:26:17:73:60:80:95:8f:c4:ce:c9:c2:e3:e2: b4:83:1e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBAxAcpKxS08bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDRjNWZiMjMtMjVhNi00Mjg1LThmYjItMjEyZTAzNWJkYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOu+O6DL2wJlr1Gpa/D0eXz21Z8UrukzMVRK 1eb3V7dw7BoraHWCCOUHBCKicrQWEMEY44iYBk/S9rIVltlfONNShKxnrWeI4O4Q m8Wtdp5QoOg93r7XSZ1H9heABh4xH5e0xY/RMY478nq0WA/GflTzknJrN2CEBZwk 6zWVIMHEY9cidFkwYHClnENJ1YM4/k5g0V6jLlEpwrUwi+sRqA63J5oQlO7QBRsP E7mi94GI9hSpm1jaQet7UKSVKjg9pkvCNhsu/9rX8VahbC/QGejVt5wHY+zJVZQ8 FVBUZcZvEHFArIZ8LF3tiqswCr7ppfR/p2q5zpny3kvuZVQ6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8wE70EtF+WADgx0wlEaco26CQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvYTZiYTcxNzMtOTQ2YS0z NjI2LThlMzEtM2IyODg3Y2RhYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmeAbt5RKJHrLgs4bEEq2yyKb6JiostfGe+nKLj51VPgNjf4CLgqgZh zKg6huvcGNTjPtpf9q5emopONMzTG7XPJErZP+/9ci3JY/TwERlk0PGS47Ap/vgl UGR58UGI+9RrZ0LtDOHfLykhXjLDhEpE2AUN9dcWjUy0SPh0mt6LmW3sux2cbi7t oyOEfRzC25ioCCjaoZP8O3JxrwiNLOGE1a+HKjTv7TlE5WZrEglBFk7JMkok79Or JNvWEuw8+l6y/R8wKFtnPN9irsRYQRqXshLZD1XLZdNnvdS/irMe6Q5X2qvjHiOy B+HrDKKmJhdzYICVj8TOycLj4rSDHlQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:32 2025 by rpki-client