$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa File: 8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa (raw, json) Hash identifier: bE7gipNFNWVJjc+pvHAUsxT0WQcq53cxxYLtO2YExCM= Subject key identifier: B1:35:63:25:41:45:9B:4B:FA:BA:56:B3:6D:27:A4:53:1A:22:3C:2D Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b Certificate serial: 010D0C9F4328584BB5C2523C716935259B2CCE80 Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 22252 IP address blocks: 157.188.0.0/16 maxlen: 16 157.188.0.0/18 maxlen: 18 157.188.12.0/23 maxlen: 23 157.188.128.0/19 maxlen: 19 157.188.192.0/20 maxlen: 20 157.188.208.0/20 maxlen: 20 157.188.252.0/22 maxlen: 22 161.185.0.0/16 maxlen: 16 161.185.0.0/17 maxlen: 17 161.185.4.0/24 maxlen: 24 161.185.7.0/24 maxlen: 24 161.185.30.0/23 maxlen: 23 161.185.32.0/20 maxlen: 20 161.185.150.0/23 maxlen: 23 161.185.151.0/24 maxlen: 24 161.185.152.0/23 maxlen: 23 161.185.160.0/24 maxlen: 24 161.185.161.0/24 maxlen: 24 161.185.182.0/24 maxlen: 24 161.185.208.0/23 maxlen: 23 161.185.224.0/23 maxlen: 23 167.153.0.0/16 maxlen: 16 167.153.0.0/17 maxlen: 17 167.153.128.0/17 maxlen: 17 167.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:52:3c:71:69:35:25:9b:2c:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=a470f644-3ac1-4328-adb5-ccbd6835ea70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:0b:b6:fa:17:20:b1:94:2c:12:6b:fc:5d: f8:7f:1d:6d:18:53:29:0f:01:0a:32:7a:d3:08:f2: 31:3d:37:15:2d:ee:fa:06:49:84:7e:8e:0b:aa:87: de:8f:a6:25:7e:90:ab:74:b6:a1:02:05:19:13:1d: 78:7b:1c:c9:73:64:3f:12:49:76:e3:b0:e6:48:cd: 0b:13:4c:95:ff:e4:2f:08:17:c2:51:dd:e7:e3:88: 51:a6:56:b0:11:ad:a5:23:80:02:fe:06:8a:a9:6e: 51:fb:34:d4:39:1c:2d:9a:ce:b5:df:ed:33:65:f0: 59:64:03:b1:ce:1b:44:69:01:54:54:6e:dc:dc:32: 42:c8:7e:99:bd:0b:a0:fe:02:00:c9:dc:a3:bf:0f: cd:0e:d0:8e:0c:bd:c2:ae:93:e7:3d:1f:7c:f0:80: 65:d5:88:f5:4b:0b:16:36:29:92:4e:f7:e2:79:06: 31:f8:0f:ae:38:67:50:6a:ef:a4:6e:84:03:41:04: e5:b3:87:a6:ec:2e:c2:05:95:85:8b:83:e5:c1:37: 12:f3:9d:fd:92:08:c1:af:26:71:25:8a:29:44:b6: 26:6f:c4:98:43:be:ec:bc:e9:5a:61:b7:7f:4c:25: 99:36:8b:fd:de:1f:4f:49:ff:ce:02:b6:e2:a4:85: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:35:63:25:41:45:9B:4B:FA:BA:56:B3:6D:27:A4:53:1A:22:3C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl X509v3 Authority Key Identifier: keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer sbgp-ipAddrBlock: critical IPv4: 157.188.0.0/16 161.185.0.0/16 167.153.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:66:50:cb:16:7b:44:88:c0:27:02:bd:ed:40:fc:c6:37:d1: 78:20:c8:25:ff:29:03:08:f6:5a:d2:67:a2:bd:0a:55:6d:13: 6b:83:3f:f5:df:d2:54:42:47:7c:03:5f:e8:0a:d2:f3:ee:8b: d0:74:97:cf:72:5a:b3:8b:d2:a0:34:32:d5:82:4e:01:e6:87: 7f:90:9c:9f:4f:06:b7:45:bd:02:51:8a:c8:21:ae:a4:7a:3a: 51:88:30:53:d0:db:26:fc:78:b1:e8:98:d0:6c:f1:3b:a6:28: b3:53:07:96:e1:3d:79:62:e4:ce:1b:09:b8:4e:0e:f5:00:d7: c3:d0:ef:08:9e:ea:e9:bb:46:22:bb:c3:2f:9f:6a:45:da:7b: ff:53:bf:4d:a3:c1:4c:06:5d:a4:91:69:bf:a6:bb:1c:74:c5: 21:c5:9d:ec:55:12:2d:54:c3:bf:9a:31:ac:12:2f:00:6b:73: b4:ee:c8:21:6b:df:0d:e9:1a:8b:78:69:54:72:13:4e:85:f7: b5:5b:a3:90:48:5b:4e:db:fa:10:81:ad:87:c5:0d:c4:b9:64: 17:36:ba:02:08:a9:17:be:cf:ba:f6:71:dd:63:58:2c:8f:16: 9c:db:57:98:12:94:be:67:a8:2c:9b:63:99:db:ab:de:b2:cd: 87:f1:e5:2c -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEu1wlI8cWk1JZsszoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MWE5ZTEtNGM3Zi00MmYxLTkwYmEtOGQyOWMyYzBi MzBiMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YTQ3MGY2NDQtM2FjMS00MzI4LWFkYjUtY2NiZDY4MzVlYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI4LtvoXILGULBJr/F34fx1tGFMpDwEKMnrT CPIxPTcVLe76BkmEfo4Lqofej6YlfpCrdLahAgUZEx14exzJc2Q/Ekl247DmSM0L E0yV/+QvCBfCUd3n44hRplawEa2lI4AC/gaKqW5R+zTUORwtms613+0zZfBZZAOx zhtEaQFUVG7c3DJCyH6ZvQug/gIAydyjvw/NDtCODL3CrpPnPR988IBl1Yj1SwsW NimSTvfieQYx+A+uOGdQau+kboQDQQTls4em7C7CBZWFi4PlwTcS8539kgjBryZx JYopRLYmb8SYQ77svOlaYbd/TCWZNov93h9PSf/OArbipIX6LwIDAQABo4IDXjCC A1owHQYDVR0OBBYEFLE1YyVBRZtL+rpWs20npFMaIjwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkx YTllMS00YzdmLTQyZjEtOTBiYS04ZDI5YzJjMGIzMGIvOGNkYzlhY2UtNTI1NS0z ZjhkLTg5NzktYzQ4NDc3YzU3ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzM5MWE5ZTEtNGM3Zi00MmYxLTkw YmEtOGQyOWMyYzBiMzBiL2MzOTFhOWUxLTRjN2YtNDJmMS05MGJhLThkMjljMmMw YjMwYi5jcmwwHwYDVR0jBBgwFoAUYIcLrwQs/HX5GruLxJ5MNW/3XzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkxYTllMS00YzdmLTQyZjEtOTBiYS04ZDI5 YzJjMGIzMGIuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAnbwDAwCh uQMDAKeZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEpmUMsWe0SIwCcCve1A/MY30XggyCX/KQMI9lrSZ6K9 ClVtE2uDP/Xf0lRCR3wDX+gK0vPui9B0l89yWrOL0qA0MtWCTgHmh3+QnJ9PBrdF vQJRisghrqR6OlGIMFPQ2yb8eLHomNBs8TumKLNTB5bhPXli5M4bCbhODvUA18PQ 7wie6um7RiK7wy+fakXae/9Tv02jwUwGXaSRab+muxx0xSHFnexVEi1Uw7+aMawS LwBrc7TuyCFr3w3pGot4aVRyE06F97Vbo5BIW07b+hCBrYfFDcS5ZBc2ugIIqRe+ z7r2cd1jWCyPFpzbV5gSlL5nqCybY5nbq96yzYfx5Sw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:26 2025 by rpki-client