$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa File: a0f559b4-6239-3212-be83-b4c0773d87e3.roa (raw, json) Hash identifier: nkzveAgzTt8GltYAaq7w4i47tH/n8nNDXJ4kmf14GDo= Subject key identifier: A7:EB:9D:F0:E3:AA:9E:36:94:A0:1C:9C:36:87:63:4E:C1:18:E1:C7 Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b Certificate serial: 010D0C9F4328584BB5C2558398671DEF78BE5E40 Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 398875 IP address blocks: 167.153.244.0/24 maxlen: 24 167.153.245.0/24 maxlen: 24 167.153.246.0/23 maxlen: 23 167.153.246.0/24 maxlen: 24 167.153.247.0/24 maxlen: 24 167.153.248.0/23 maxlen: 23 167.153.248.0/24 maxlen: 24 167.153.249.0/24 maxlen: 24 167.153.250.0/23 maxlen: 23 167.153.250.0/24 maxlen: 24 167.153.251.0/24 maxlen: 24 167.153.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:55:83:98:67:1d:ef:78:be:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=f21fc2ca-fb72-4d24-b81f-c4402f662c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:57:92:14:15:61:3c:a5:0c:15:cf:cf:40: a0:55:9f:a6:1a:1a:b9:29:58:98:7e:da:c9:97:dd: 4c:a4:f3:7a:c5:44:89:eb:0f:61:5c:2b:b1:26:ad: 09:c9:87:f3:e4:b5:52:e3:dd:9d:c7:a9:03:af:11: 2f:21:2b:ed:b0:05:31:0c:ba:64:0d:bf:aa:b2:cf: 83:05:c4:5c:d9:0f:c1:08:47:73:69:66:14:17:3f: 39:64:1f:ef:e8:56:1a:f3:e9:fe:d3:0b:23:01:5b: b8:4a:89:09:b5:d1:3c:81:71:87:2c:2c:d6:f2:6c: 3f:f0:12:6c:56:12:91:8a:6a:68:0e:cc:be:29:cf: 8e:8e:0b:8c:34:f9:fd:2a:1a:4a:a5:7d:7a:27:83: 3b:61:4b:ec:39:f9:6b:1a:0c:fd:30:5b:11:3b:19: 66:2c:e0:dc:70:14:19:b6:17:32:57:97:6c:0a:ee: b7:28:be:bc:29:ed:92:00:af:20:d4:1f:a4:e2:55: 89:5d:c0:2a:54:64:fb:5f:ba:16:f2:06:f1:70:6a: 4e:b0:2f:f6:92:fb:f7:e6:2b:ac:78:23:5a:ab:1f: 80:ab:93:57:55:e9:94:ef:e2:dd:ef:ef:45:0f:50: b9:f4:e0:45:1d:27:f3:4b:1e:b3:7f:3b:08:61:eb: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EB:9D:F0:E3:AA:9E:36:94:A0:1C:9C:36:87:63:4E:C1:18:E1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl X509v3 Authority Key Identifier: keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer sbgp-ipAddrBlock: critical IPv4: 167.153.244.0-167.153.252.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:17:d5:84:e5:14:23:6f:f0:2c:37:74:a7:f1:e8:6a:c7:76: e9:6e:f0:60:00:83:c5:19:b1:39:60:25:be:31:0c:6d:0e:6b: ba:eb:d7:fd:3b:27:68:ab:f9:7c:55:32:58:69:42:93:a9:79: 69:de:43:6b:88:4c:7a:86:07:15:76:7a:67:1e:02:5d:09:a6: 74:04:fa:30:9d:5d:d7:c3:6e:a5:f9:32:19:ed:f2:a6:f7:f3: 67:59:c9:96:14:89:4e:fc:da:02:b3:07:47:fa:5c:23:27:26: 19:31:af:69:d1:6e:9c:b5:29:b2:8b:3d:ce:96:97:72:e4:f8: 28:50:2e:7b:6a:7d:20:b0:75:69:9c:50:85:52:d7:95:d4:09: 5b:47:86:6b:51:9e:40:9a:03:c8:f1:cd:db:f4:6c:3f:3c:19: f9:e8:3f:01:44:de:47:2c:ae:2f:24:b4:ef:a5:99:cd:0c:63: ad:a0:c7:1b:83:4f:ff:12:9c:fb:73:3d:0f:e7:7c:80:b3:42: 20:ef:d2:ba:a6:a2:74:01:76:c4:59:ad:1b:cc:58:61:83:be: 8f:2e:0c:67:1c:70:be:60:be:f6:af:7b:13:98:26:53:42:98: b6:8b:55:6f:96:1a:ad:46:fe:70:54:d2:bf:d8:71:65:78:07: 41:8b:07:62 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEu1wlWDmGcd73i+XkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MWE5ZTEtNGM3Zi00MmYxLTkwYmEtOGQyOWMyYzBi MzBiMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjIxZmMyY2EtZmI3Mi00ZDI0LWI4MWYtYzQ0MDJmNjYyYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kBXkhQVYTylDBXPz0CgVZ+mGhq5KViYftrJ l91MpPN6xUSJ6w9hXCuxJq0JyYfz5LVS492dx6kDrxEvISvtsAUxDLpkDb+qss+D BcRc2Q/BCEdzaWYUFz85ZB/v6FYa8+n+0wsjAVu4SokJtdE8gXGHLCzW8mw/8BJs VhKRimpoDsy+Kc+OjguMNPn9KhpKpX16J4M7YUvsOflrGgz9MFsROxlmLODccBQZ thcyV5dsCu63KL68Ke2SAK8g1B+k4lWJXcAqVGT7X7oW8gbxcGpOsC/2kvv35ius eCNaqx+Aq5NXVemU7+Ld7+9FD1C59OBFHSfzSx6zfzsIYetviwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKfrnfDjqp42lKAcnDaHY07BGOHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkx YTllMS00YzdmLTQyZjEtOTBiYS04ZDI5YzJjMGIzMGIvYTBmNTU5YjQtNjIzOS0z MjEyLWJlODMtYjRjMDc3M2Q4N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzM5MWE5ZTEtNGM3Zi00MmYxLTkw YmEtOGQyOWMyYzBiMzBiL2MzOTFhOWUxLTRjN2YtNDJmMS05MGJhLThkMjljMmMw YjMwYi5jcmwwHwYDVR0jBBgwFoAUYIcLrwQs/HX5GruLxJ5MNW/3XzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkxYTllMS00YzdmLTQyZjEtOTBiYS04ZDI5 YzJjMGIzMGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKnmfQD BACnmfwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAOxfVhOUUI2/wLDd0p/Hoasd26W7wYACDxRmxOWAlvjEM bQ5ruuvX/TsnaKv5fFUyWGlCk6l5ad5Da4hMeoYHFXZ6Zx4CXQmmdAT6MJ1d18Nu pfkyGe3ypvfzZ1nJlhSJTvzaArMHR/pcIycmGTGvadFunLUpsos9zpaXcuT4KFAu e2p9ILB1aZxQhVLXldQJW0eGa1GeQJoDyPHN2/RsPzwZ+eg/AUTeRyyuLyS076WZ zQxjraDHG4NP/xKc+3M9D+d8gLNCIO/SuqaidAF2xFmtG8xYYYO+jy4MZxxwvmC+ 9q97E5gmU0KYtotVb5YarUb+cFTSv9hxZXgHQYsHYg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:58 2025 by rpki-client