$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8be96771-df15-311d-8ece-9185088a8043.roa File: 8be96771-df15-311d-8ece-9185088a8043.roa (raw, json) Hash identifier: NJPGH2pAqCGKr6iJiNqvcRJnfM8/wi3tIz6dLX7Mtn4= Subject key identifier: D8:06:84:79:21:1D:95:18:C8:79:D2:96:A0:4B:BE:90:9F:98:A8:A4 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584B9B3CE277BDB5ED7BCD8E5C40 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8be96771-df15-311d-8ece-9185088a8043.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 855 IP address blocks: 159.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e2:77:bd:b5:ed:7b:cd:8e:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=73bfaef3-5a2a-4967-a0c4-b0d63ee72d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:88:57:4f:94:da:f5:73:2e:05:0b:80:bb: ef:c8:57:99:b1:35:72:d8:ca:d5:b9:1e:e2:43:ed: df:81:1e:0a:d9:0c:dc:a3:47:70:0a:bc:b5:c5:c1: f1:c2:3b:74:84:73:13:f0:48:ec:10:14:36:84:61: 75:3d:96:9d:0a:fc:30:42:0d:63:5e:48:12:81:02: 85:a2:b0:e7:bf:04:51:e0:c1:1e:0c:1f:99:36:d4: a1:24:ad:a4:ad:07:77:65:73:48:bd:cb:6d:9c:5c: 22:da:77:aa:f1:f7:9a:ec:12:cc:1d:68:dd:d0:db: e5:75:74:76:53:b8:47:8e:3b:f1:7f:18:7a:06:a9: 17:5f:10:54:87:3a:48:f4:5b:fc:bc:69:8f:2f:94: a7:d3:16:8f:ac:16:63:ba:c2:b2:3b:0b:27:ee:ad: 1c:8f:83:c3:f4:6f:59:e9:b6:6c:bb:ef:a2:c8:ad: 7e:50:63:d5:10:ea:57:4c:4c:60:14:d4:5d:55:77: 05:3a:63:94:ec:ac:93:eb:07:3d:d3:9f:5b:2e:c2: 22:2e:d9:9a:11:e1:c8:cc:87:da:7e:7e:ca:ea:f5: d0:6a:21:a1:af:74:b1:16:05:06:fb:9a:a8:ba:04: 77:da:68:2e:ba:2f:a4:21:e3:c3:eb:68:ec:7c:a1: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:84:79:21:1D:95:18:C8:79:D2:96:A0:4B:BE:90:9F:98:A8:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8be96771-df15-311d-8ece-9185088a8043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 159.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c7:f6:49:be:27:25:33:0a:11:32:90:31:96:fc:2c:7f:09: e0:da:0a:25:52:a6:56:a4:d2:ad:14:1f:14:8e:15:59:d3:26: a3:94:b8:e9:0f:e1:8c:17:e1:b4:df:d8:f1:67:53:da:66:b3: b3:c7:2f:f1:36:a0:76:5b:a0:6c:e0:50:3d:99:1e:df:81:15: 79:d9:4e:db:dd:27:0a:75:ea:f2:4f:07:f7:a2:42:14:50:d7: cb:61:41:63:6d:e4:56:2c:13:1f:ae:cd:37:3b:d4:64:5d:4c: e3:b5:08:06:43:82:bf:e1:1f:f3:25:9f:bd:1a:1f:77:20:d5: 17:fd:29:db:2e:33:86:bc:80:e1:7a:c7:6d:6e:72:7a:3c:63: 03:a6:a0:f7:4d:e2:b8:0d:d7:ed:d0:7e:75:bb:d8:0c:54:a6: b9:3f:b1:e4:60:4a:10:b2:da:2d:79:c7:ea:b9:fa:91:73:6f: 7c:61:51:27:75:6f:06:1d:73:61:d7:e6:2e:10:2a:69:c4:fe: 81:80:5d:3d:4f:56:cd:bf:53:49:4b:43:3f:4f:a0:40:0c:cf: a9:32:b8:af:f8:cd:ee:ad:76:c4:86:a3:60:cd:1b:e8:e3:c5: ff:61:ba:df:fc:08:ab:f8:3b:07:ed:b2:c3:cf:5d:ae:57:cc: 99:fc:f9:d5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEubPOJ3vbXte82OXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NzNiZmFlZjMtNWEyYS00OTY3LWEwYzQtYjBkNjNlZTcyZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ+IV0+U2vVzLgULgLvvyFeZsTVy2MrVuR7i Q+3fgR4K2Qzco0dwCry1xcHxwjt0hHMT8EjsEBQ2hGF1PZadCvwwQg1jXkgSgQKF orDnvwRR4MEeDB+ZNtShJK2krQd3ZXNIvcttnFwi2neq8fea7BLMHWjd0NvldXR2 U7hHjjvxfxh6BqkXXxBUhzpI9Fv8vGmPL5Sn0xaPrBZjusKyOwsn7q0cj4PD9G9Z 6bZsu++iyK1+UGPVEOpXTExgFNRdVXcFOmOU7KyT6wc9059bLsIiLtmaEeHIzIfa fn7K6vXQaiGhr3SxFgUG+5qougR32mguui+kIePD62jsfKETwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNgGhHkhHZUYyHnSlqBLvpCfmKikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGJlOTY3NzEtZGYxNS0z MTFkLThlY2UtOTE4NTA4OGE4MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnwIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALMf2Sb4nJTMKETKQMZb8LH8J4NoKJVKmVqTSrRQfFI4VWdMmo5S46Q/h jBfhtN/Y8WdT2mazs8cv8TagdlugbOBQPZke34EVedlO290nCnXq8k8H96JCFFDX y2FBY23kViwTH67NNzvUZF1M47UIBkOCv+Ef8yWfvRofdyDVF/0p2y4zhryA4XrH bW5yejxjA6ag903iuA3X7dB+dbvYDFSmuT+x5GBKELLaLXnH6rn6kXNvfGFRJ3Vv Bh1zYdfmLhAqacT+gYBdPU9Wzb9TSUtDP0+gQAzPqTK4r/jN7q12xIajYM0b6OPF /2G63/wIq/g7B+2yw89drlfMmfz51Q== -----END CERTIFICATE-----Generated at Wed Nov 5 01:22:15 2025 by rpki-client