$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/07697771-7db7-302a-a9e4-1ff02fdc45cd.roa File: 07697771-7db7-302a-a9e4-1ff02fdc45cd.roa (raw, json) Hash identifier: 20cPd25dRlS9ImvIy0H2KnJ8UK6Na4g3KEvhLU3GqWA= Subject key identifier: AA:5E:A5:A0:FE:60:5C:24:76:E1:FF:5F:74:6A:67:86:D5:14:63:58 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584BA39D047BA967EFC4999686C0 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/07697771-7db7-302a-a9e4-1ff02fdc45cd.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 192.161.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:04:7b:a9:67:ef:c4:99:96:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=68e70592-5001-4b0d-9e63-0e947c85377c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:9f:2e:c5:02:a2:97:08:90:48:0f:9d:73: db:eb:bb:e7:87:82:55:57:2d:1a:77:2f:51:d4:a5: b5:96:49:a9:b8:40:cd:20:7b:2f:38:32:af:52:57: 84:a1:20:2c:db:ba:18:10:86:98:a7:ab:7d:43:0a: dc:10:ed:53:74:db:8a:6a:54:06:fa:58:a3:72:0d: 97:5e:db:19:33:7c:33:9e:31:20:f7:67:10:b3:24: d3:a7:fa:1c:9f:d3:71:e4:8d:a4:eb:0a:30:74:14: fa:04:e4:87:57:fb:60:42:9f:cc:94:ce:bf:f5:81: f5:17:b9:58:f8:88:8e:53:5d:76:82:7a:25:28:87: d7:be:2c:b9:97:ff:7e:f7:d7:03:27:49:3b:5b:48: 66:f0:91:d6:7a:eb:ea:31:9d:e3:f1:2f:cf:b3:44: 66:54:8b:1c:47:94:a1:2a:d8:95:82:d9:df:9f:00: b6:18:76:ce:49:5f:d3:8f:c5:ec:fe:69:40:bc:de: c2:97:ae:ea:1e:5b:54:71:68:04:81:39:ef:e0:7b: 26:ee:86:d5:0d:d7:15:c5:ca:4f:89:55:09:c3:d3: ee:78:eb:82:7c:2e:23:20:28:a0:d9:5b:ad:78:4e: 84:4d:1a:a6:ca:6a:32:31:12:09:97:e3:a6:75:bd: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5E:A5:A0:FE:60:5C:24:76:E1:FF:5F:74:6A:67:86:D5:14:63:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/07697771-7db7-302a-a9e4-1ff02fdc45cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:09:8a:6b:24:2e:10:f7:84:13:6e:30:7a:e0:23:bb:18:de: a1:5d:78:7e:d8:e4:d0:e2:6f:e9:a6:68:5c:f3:6f:58:30:43: f6:28:77:d2:d0:c8:42:b7:25:f0:6f:c5:c2:5d:38:02:62:7f: bb:c4:5c:67:16:b1:02:4c:36:3a:c6:0f:a3:f6:e1:04:b3:8e: 39:d0:e1:c3:bb:d5:d1:b3:ae:fd:0d:e5:e1:68:69:1a:e7:17: cf:68:1c:27:d2:17:00:12:bc:62:29:5d:75:1b:55:14:be:5f: 6b:35:45:5d:0c:e1:ed:25:b4:e1:08:4c:52:9a:97:51:84:ab: 4f:d5:da:c7:35:4b:a8:f7:9e:1f:d8:e1:28:c7:25:eb:f4:6a: 90:c6:e4:24:5f:ae:7b:b0:c8:0f:19:e9:52:ab:9c:6f:37:ee: 82:dc:ca:ac:19:96:e6:3d:e7:14:8e:e8:91:e4:f0:7b:19:80: d4:97:2a:43:e7:13:d4:64:50:b5:9c:98:68:b3:cf:e3:16:c1: e6:92:c0:c5:2f:bf:0c:39:94:6b:06:95:b4:7d:5b:7c:4f:b2: a9:67:62:7d:12:a1:25:e8:7f:99:62:a5:c9:4a:2d:18:ad:43: 69:58:ec:48:9e:aa:8e:58:23:06:22:90:bc:1f:3a:8f:53:e8: cc:eb:f1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQR7qWfvxJmWhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjhlNzA1OTItNTAwMS00YjBkLTllNjMtMGU5NDdjODUzNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIyfLsUCopcIkEgPnXPb67vnh4JVVy0ady9R 1KW1lkmpuEDNIHsvODKvUleEoSAs27oYEIaYp6t9QwrcEO1TdNuKalQG+lijcg2X XtsZM3wznjEg92cQsyTTp/ocn9Nx5I2k6wowdBT6BOSHV/tgQp/MlM6/9YH1F7lY +IiOU112gnolKIfXviy5l/9+99cDJ0k7W0hm8JHWeuvqMZ3j8S/Ps0RmVIscR5Sh KtiVgtnfnwC2GHbOSV/Tj8Xs/mlAvN7Cl67qHltUcWgEgTnv4Hsm7obVDdcVxcpP iVUJw9PueOuCfC4jICig2VuteE6ETRqmymoyMRIJl+Omdb0EwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpepaD+YFwkduH/X3RqZ4bVFGNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvMDc2OTc3NzEtN2RiNy0z MDJhLWE5ZTQtMWZmMDJmZGM0NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkJimskLhD3hBNuMHrgI7sY3qFdeH7Y5NDib+mmaFzzb1gwQ/Yod9LQ yEK3JfBvxcJdOAJif7vEXGcWsQJMNjrGD6P24QSzjjnQ4cO71dGzrv0N5eFoaRrn F89oHCfSFwASvGIpXXUbVRS+X2s1RV0M4e0ltOEITFKal1GEq0/V2sc1S6j3nh/Y 4SjHJev0apDG5CRfrnuwyA8Z6VKrnG837oLcyqwZluY95xSO6JHk8HsZgNSXKkPn E9RkULWcmGizz+MWweaSwMUvvww5lGsGlbR9W3xPsqlnYn0SoSXof5lipclKLRit Q2lY7Eieqo5YIwYikLwfOo9T6Mzr8bk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:34 2025 by rpki-client