$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa File: 8772e1e2-8469-31f4-ba7a-299142b35b0c.roa (raw, json) Hash identifier: txN8QBZl7Natq9O4sS7F7sxZ0AG2Sb7qJEgCHxOUA/o= Subject key identifier: 82:3A:D3:86:F5:56:E2:99:BD:30:AA:71:2A:05:5D:0D:F1:BA:64:84 Certificate issuer: /CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Certificate serial: 010D0C9F4328584B821CC36E470902D82747F200 Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22188 IP address blocks: 168.151.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c3:6e:47:09:02:d8:27:47:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=33aa26e9-73a6-4b55-a8c3-ddd9ec04eb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:d6:0f:8a:86:70:4f:56:c5:76:b6:f5:57: 96:17:92:aa:9d:97:dc:5a:92:ec:d0:b4:b9:df:c0: be:db:74:3b:c4:d2:94:c8:27:87:40:e3:7d:ad:94: 07:7e:d8:00:98:d0:47:59:e1:44:9e:4e:78:21:12: a5:fa:67:64:05:cd:15:9e:2d:0a:87:34:50:fa:92: c8:fd:5b:89:4c:67:07:41:57:a5:df:f2:38:4b:de: a4:0d:2b:38:7d:95:ae:72:50:20:72:a8:d7:74:8e: 88:37:39:3e:da:19:41:80:7c:33:c7:69:5e:b2:53: 5e:4d:1c:4b:a2:78:41:ee:b1:87:93:66:61:a3:a8: c4:81:d5:f6:07:48:89:99:96:39:20:14:1a:c3:f5: e9:af:a4:f9:b9:5f:c5:b3:5b:72:57:6e:e3:99:f1: 99:01:16:f8:13:45:e6:89:f7:f4:01:18:cc:59:a6: d4:da:64:46:ae:ba:9a:56:3d:d4:4f:77:f1:24:a5: ef:69:b3:88:02:5d:27:69:d7:3b:75:c5:68:b8:59: 73:d5:86:79:6e:fa:70:dc:46:9c:75:2a:2b:53:ae: fa:8b:68:53:4e:eb:6c:b6:fb:d2:fe:d9:85:39:96: 0f:3f:0e:94:80:47:ee:f1:13:a7:53:03:c8:56:f8: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3A:D3:86:F5:56:E2:99:BD:30:AA:71:2A:05:5D:0D:F1:BA:64:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl X509v3 Authority Key Identifier: keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer sbgp-ipAddrBlock: critical IPv4: 168.151.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:29:5a:7d:c7:ad:86:67:24:8b:c9:e5:a9:59:3c:07:9f:04: 93:58:a9:7a:57:a0:9f:25:c6:c6:2e:1e:68:e9:9a:6b:33:76: 4c:c1:1c:c8:c0:74:8b:a5:2c:9c:7d:c5:80:97:31:8c:64:a0: d5:86:25:6f:98:fc:3e:04:0b:b4:be:1f:09:2d:83:78:c6:5f: 41:50:d7:0e:f6:d7:14:7c:34:bc:65:e6:3d:3c:90:3b:24:40: f0:01:f6:15:f4:f1:f0:cf:4a:fb:47:7a:4a:b4:1a:de:78:0f: e6:88:55:75:fc:24:a5:3e:f1:9f:aa:1e:44:a3:10:25:ab:70: 59:d6:47:f0:1d:10:ea:35:e2:82:78:8a:07:70:b2:cc:7b:cd: 2e:40:bd:b7:07:15:0e:35:88:4d:d9:94:f0:e6:0d:48:35:c4: b6:6f:6f:71:da:b3:43:f4:7a:f5:c2:8b:87:f6:3b:55:e6:73: 28:32:03:a5:9d:0f:4a:0e:39:71:aa:fa:da:e9:39:1e:cc:a4: 63:95:32:fa:cc:04:d4:e9:e3:03:39:73:91:76:79:24:b3:16: ed:5f:35:78:87:a3:7f:96:d0:ce:ea:61:fc:56:fb:69:96:24: 62:31:72:dc:d8:78:4e:5a:9e:5d:99:a5:d9:05:00:9c:d4:71: 0c:26:0c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMNuRwkC2CdH8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5 M2E4MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MzNhYTI2ZTktNzNhNi00YjU1LWE4YzMtZGRkOWVjMDRlYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi03WD4qGcE9WxXa29VeWF5KqnZfcWpLs0LS5 38C+23Q7xNKUyCeHQON9rZQHftgAmNBHWeFEnk54IRKl+mdkBc0Vni0KhzRQ+pLI /VuJTGcHQVel3/I4S96kDSs4fZWuclAgcqjXdI6INzk+2hlBgHwzx2leslNeTRxL onhB7rGHk2Zho6jEgdX2B0iJmZY5IBQaw/Xpr6T5uV/Fs1tyV27jmfGZARb4E0Xm iff0ARjMWabU2mRGrrqaVj3UT3fxJKXvabOIAl0nadc7dcVouFlz1YZ5bvpw3Eac dSorU676i2hTTutstvvS/tmFOZYPPw6UgEfu8ROnUwPIVvi/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII604b1VuKZvTCqcSoFXQ3xumSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvODc3MmUxZTItODQ2OS0z MWY0LWJhN2EtMjk5MTQyYjM1YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4 ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOEpWn3HrYZnJIvJ5alZPAefBJNYqXpXoJ8lxsYuHmjpmmszdkzBHMjA dIulLJx9xYCXMYxkoNWGJW+Y/D4EC7S+Hwktg3jGX0FQ1w721xR8NLxl5j08kDsk QPAB9hX08fDPSvtHekq0Gt54D+aIVXX8JKU+8Z+qHkSjECWrcFnWR/AdEOo14oJ4 igdwssx7zS5AvbcHFQ41iE3ZlPDmDUg1xLZvb3Has0P0evXCi4f2O1XmcygyA6Wd D0oOOXGq+trpOR7MpGOVMvrMBNTp4wM5c5F2eSSzFu1fNXiHo3+W0M7qYfxW+2mW JGIxctzYeE5anl2ZpdkFAJzUcQwmDCI= -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:50 2025 by rpki-client