$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/316878ff-0619-3ec4-baf6-fbd8b099be9f.roa File: 316878ff-0619-3ec4-baf6-fbd8b099be9f.roa (raw, json) Hash identifier: QIYtmUc+j4/MkrjS1Qr8qJ90esiEk/19faRTz1NXpN4= Subject key identifier: 26:56:5E:C1:0A:7C:8E:14:4C:F5:40:34:BD:26:20:A0:6A:C6:5B:C7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D07060B6362C350693700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/316878ff-0619-3ec4-baf6-fbd8b099be9f.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:07:06:0b:63:62:c3:50:69:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=c3ea3e1a-4677-480a-a396-b23bac491fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:d0:bc:12:a4:2e:ab:e7:9b:7d:99:77:60: ce:55:fd:fd:31:03:a6:8d:a0:d3:41:b0:f6:86:94: 3f:2b:79:f4:a9:b9:4a:81:25:b5:20:27:a6:7f:9c: e4:f9:63:4f:7c:e7:9e:71:19:51:b3:d2:8b:a8:08: 65:8b:dd:0c:03:4d:86:8d:b6:e6:83:90:55:8e:73: da:cf:21:f6:dd:d3:d2:84:54:a8:2f:d2:fa:72:43: 72:c5:25:bf:48:33:74:86:9c:94:c6:c5:b0:d3:00: fa:6e:32:85:06:34:98:5b:b6:c6:3f:33:03:d4:c1: 80:7c:d3:ee:50:1b:63:95:25:57:44:f0:75:73:66: ce:0b:bc:a8:e0:23:99:a5:b2:15:ee:f5:fa:f7:2f: cc:55:ac:d0:9d:3b:04:86:ef:3c:c5:5b:97:7a:b3: 79:8f:63:38:86:e8:d3:ae:5c:58:04:d5:0a:e0:6d: 09:33:1c:8b:58:43:c2:25:56:31:fe:07:95:1d:4c: d4:47:b2:3b:27:33:70:7c:50:d1:10:b7:da:13:68: 2a:41:ec:02:92:dd:9c:42:8c:34:a4:da:45:8e:10: 49:58:3b:36:32:25:8c:49:8e:a9:60:76:9c:62:b8: dd:a3:21:25:69:46:48:80:b0:0a:66:1d:30:6b:54: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:56:5E:C1:0A:7C:8E:14:4C:F5:40:34:BD:26:20:A0:6A:C6:5B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/316878ff-0619-3ec4-baf6-fbd8b099be9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1d:35:7b:6a:e2:3d:1e:30:20:cc:ba:cb:ed:11:98:58:d8: 7f:6e:74:88:1f:2a:a0:3a:fc:2d:f4:92:4e:9a:06:4d:75:85: 75:80:ac:e3:eb:2d:29:b5:c3:78:ce:c6:f0:c1:bc:d2:8e:15: d8:42:93:d6:c8:10:e0:39:a6:ca:84:5b:d6:2a:57:00:a9:2a: 56:7e:45:2d:af:af:4d:2f:cb:25:d7:88:3f:bb:3e:f7:17:32: fa:65:d6:81:97:a7:d6:e3:68:4b:d8:e5:2d:8c:46:8e:e4:95: 0c:e3:8f:1f:38:ac:f8:77:40:87:82:64:7c:47:4b:31:6e:71: ac:e1:28:f8:03:07:fe:09:aa:42:60:9c:11:03:33:47:15:da: b0:65:0a:1a:06:a2:2d:65:38:6a:7c:9b:27:9e:79:44:b3:c9: fe:8f:c9:b0:19:36:57:0b:9b:e3:61:99:e2:90:20:48:12:68: 91:db:98:af:91:cb:bd:3f:31:b4:11:07:95:b3:7f:51:1d:51: d0:7d:73:74:b1:c2:28:4e:31:19:c3:34:e9:44:87:d4:27:1b: de:a2:43:a1:8b:0f:7f:92:f0:99:90:bf:a3:ed:31:ec:ab:40: de:33:ca:07:1c:13:eb:53:88:da:31:76:c7:ff:12:f6:f9:4b: d2:2e:7c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQcGC2Niw1BpNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YzNlYTNlMWEtNDY3Ny00ODBhLWEzOTYtYjIzYmFjNDkxZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsybQvBKkLqvnm32Zd2DOVf39MQOmjaDTQbD2 hpQ/K3n0qblKgSW1ICemf5zk+WNPfOeecRlRs9KLqAhli90MA02Gjbbmg5BVjnPa zyH23dPShFSoL9L6ckNyxSW/SDN0hpyUxsWw0wD6bjKFBjSYW7bGPzMD1MGAfNPu UBtjlSVXRPB1c2bOC7yo4COZpbIV7vX69y/MVazQnTsEhu88xVuXerN5j2M4hujT rlxYBNUK4G0JMxyLWEPCJVYx/geVHUzUR7I7JzNwfFDRELfaE2gqQewCkt2cQow0 pNpFjhBJWDs2MiWMSY6pYHacYrjdoyElaUZIgLAKZh0wa1TMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZWXsEKfI4UTPVANL0mIKBqxlvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzE2ODc4ZmYtMDYxOS0z ZWM0LWJhZjYtZmJkOGIwOTliZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4dNXtq4j0eMCDMusvtEZhY2H9udIgfKqA6/C30kk6aBk11hXWArOPr LSm1w3jOxvDBvNKOFdhCk9bIEOA5psqEW9YqVwCpKlZ+RS2vr00vyyXXiD+7PvcX Mvpl1oGXp9bjaEvY5S2MRo7klQzjjx84rPh3QIeCZHxHSzFucazhKPgDB/4JqkJg nBEDM0cV2rBlChoGoi1lOGp8myeeeUSzyf6PybAZNlcLm+NhmeKQIEgSaJHbmK+R y70/MbQRB5Wzf1EdUdB9c3SxwihOMRnDNOlEh9QnG96iQ6GLD3+S8JmQv6PtMeyr QN4zygccE+tTiNoxdsf/Evb5S9IufLE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:40 2025 by rpki-client