$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa File: e1203c47-8cfb-3b72-aafa-43b08573a640.roa (raw, json) Hash identifier: cxcHaGSJqtuWw62RQS8WRZrtkMtAy782HCvlNkQqd6c= Subject key identifier: E8:4C:E7:86:FD:FB:64:4B:9A:E0:08:6F:43:C5:24:D5:6D:1D:A7:13 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584BB45D33778BE39FB5655CEBC0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 33442 IP address blocks: 157.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:33:77:8b:e3:9f:b5:65:5c:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=1e62f143-7c60-45dc-bef3-97b682107f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:42:ba:ba:cc:66:47:ab:38:d4:bf:c4:42: 39:4d:62:c1:fd:76:65:8a:9a:fd:77:98:b4:ed:5a: 48:93:e0:ef:0c:67:13:72:37:52:06:ad:04:8f:64: 2d:09:11:56:0e:0a:ad:d6:53:94:78:31:b0:c4:de: 46:6e:01:6c:ef:dc:3d:90:2b:63:d3:e3:9d:8d:6d: 50:ba:23:73:26:5a:bb:10:99:b2:2e:eb:e1:3b:2c: dd:09:91:f5:35:e4:5e:97:4e:b3:7b:db:f0:9b:92: 3c:0d:25:ee:ac:56:90:96:d7:b7:a1:31:85:f2:cb: 2e:0d:5c:d2:de:5b:4e:31:66:36:de:72:9d:53:fb: 20:2f:99:40:ce:96:45:6c:e6:b1:6c:38:cc:69:96: 71:8f:c0:87:98:6f:b0:68:13:a0:49:ad:a6:8b:7e: d1:20:19:32:a5:af:33:8e:fa:1b:9b:f0:61:57:0d: 62:c4:1f:df:27:07:da:03:6d:aa:2d:41:3e:a7:72: b8:ec:e0:95:d0:29:7d:ed:23:89:0c:aa:b6:25:15: 48:35:fe:db:a2:e6:3c:b4:c5:92:82:c7:d4:ac:b5: 2a:72:5c:84:c4:23:db:6a:5a:3d:98:35:ec:db:08: 99:ec:56:ca:4a:65:3f:1b:52:fe:52:10:63:90:9c: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4C:E7:86:FD:FB:64:4B:9A:E0:08:6F:43:C5:24:D5:6D:1D:A7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8a:63:27:e8:c2:bc:a4:c9:35:30:bf:80:51:2a:61:c8:62: 8a:1f:e7:bf:b8:0b:48:2a:ba:1f:bb:3e:3f:d6:4e:6f:5b:d1: ba:3b:20:40:51:e2:09:37:38:e3:ce:6c:9e:5d:8a:19:de:89: 80:fb:7d:98:8c:df:13:fb:c8:88:98:d1:a1:73:ec:06:f3:e3: eb:8e:e9:35:1f:57:6b:5f:79:42:99:8d:5e:cc:94:4f:dc:cc: b6:e3:bf:17:bf:0b:7a:86:55:ae:3f:57:59:0f:32:5c:a8:0c: 01:61:c1:52:e0:0b:39:19:da:89:9e:72:fb:b6:87:b8:a8:7f: 68:49:c5:a8:97:86:41:7a:c2:0a:56:d2:85:81:bd:70:e2:b0: 60:2c:c2:17:92:b1:53:92:c6:e5:b1:2b:e6:a1:c7:56:b5:2e: 4e:72:8e:01:01:06:e3:be:1d:09:85:38:63:47:21:8b:47:79: 05:6e:6e:92:5f:bc:2a:bb:f7:cd:24:81:3c:1d:a1:87:09:19: 7f:e8:8f:a3:70:8b:85:de:6d:f6:f5:70:30:39:33:78:3e:87: c9:38:65:49:39:d6:31:c3:cd:4c:e1:cf:35:bf:7c:fa:6c:92: 21:a1:d8:80:b1:73:5e:a8:fa:61:0b:20:b4:c6:bb:12:48:c6: e4:f2:88:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTN3i+OftWVc68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MWU2MmYxNDMtN2M2MC00NWRjLWJlZjMtOTdiNjgyMTA3ZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiadCurrMZkerONS/xEI5TWLB/XZlipr9d5i0 7VpIk+DvDGcTcjdSBq0Ej2QtCRFWDgqt1lOUeDGwxN5GbgFs79w9kCtj0+OdjW1Q uiNzJlq7EJmyLuvhOyzdCZH1NeRel06ze9vwm5I8DSXurFaQlte3oTGF8ssuDVzS 3ltOMWY23nKdU/sgL5lAzpZFbOaxbDjMaZZxj8CHmG+waBOgSa2mi37RIBkypa8z jvobm/BhVw1ixB/fJwfaA22qLUE+p3K47OCV0Cl97SOJDKq2JRVINf7bouY8tMWS gsfUrLUqclyExCPbalo9mDXs2wiZ7FbKSmU/G1L+UhBjkJwgzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhM54b9+2RLmuAIb0PFJNVtHacTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZTEyMDNjNDctOGNmYi0z YjcyLWFhZmEtNDNiMDg1NzNhNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAneuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSKYyfowrykyTUwv4BRKmHIYoof57+4C0gquh+7Pj/WTm9b0bo7IEBR 4gk3OOPObJ5dihneiYD7fZiM3xP7yIiY0aFz7Abz4+uO6TUfV2tfeUKZjV7MlE/c zLbjvxe/C3qGVa4/V1kPMlyoDAFhwVLgCzkZ2omecvu2h7iof2hJxaiXhkF6wgpW 0oWBvXDisGAswheSsVOSxuWxK+ahx1a1Lk5yjgEBBuO+HQmFOGNHIYtHeQVubpJf vCq7980kgTwdoYcJGX/oj6Nwi4Xebfb1cDA5M3g+h8k4ZUk51jHDzUzhzzW/fPps kiGh2ICxc16o+mELILTGuxJIxuTyiAQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:25 2025 by rpki-client