$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa File: bb5fb053-0a17-3122-970c-cf4d60448f9d.roa (raw, json) Hash identifier: 645sYmzNVfOxYJmbYfmYaVqaobxys86gxOEfZgslMnE= Subject key identifier: 18:4C:C3:2C:AF:0F:2B:30:34:4E:56:8D:30:5D:7E:56:B4:42:8E:80 Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Certificate serial: 010D0C9F4328584B5B073DF2B1E534CE07C34B00 Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 23265 IP address blocks: 67.158.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3d:f2:b1:e5:34:ce:07:c3:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d9ae6cfa-b2d2-453b-93af-d7fb11ff32e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:b0:ce:39:ff:88:a9:d6:35:99:bd:01:7d: b6:14:df:07:51:bf:99:51:7b:43:74:14:cd:e9:97: 37:2d:e9:5b:50:f5:8b:f5:39:eb:4c:6d:57:0b:3b: a4:9e:fa:df:e7:8f:f5:59:51:f9:0d:ca:d2:08:9b: 70:0c:db:b1:09:2c:22:2d:2f:97:50:cc:11:56:ad: 34:0b:6c:ff:83:b3:d1:4c:3d:73:ce:17:4b:9b:18: f4:90:bd:23:4d:a2:85:63:58:fa:7d:aa:00:44:eb: 55:6a:0e:25:fb:83:4a:de:9b:a9:68:0e:c3:8d:f2: 17:7b:d0:b3:3d:cf:11:03:bd:60:44:3c:0f:bd:84: 27:50:cd:6e:ae:38:f3:d2:ba:f2:27:62:5e:f2:da: 7a:bb:16:70:56:52:87:9b:69:c4:c0:6d:a2:b2:40: fa:45:ea:0a:ff:dd:b9:0e:d1:96:4a:24:71:23:73: 28:cc:76:0e:34:eb:1a:75:81:cd:90:b4:7a:2a:7e: 25:f3:95:14:9b:03:ad:e7:cd:03:c6:ce:6e:55:49: dc:79:9d:84:26:88:e2:64:1c:7b:fb:2c:88:00:c5: ac:6c:89:fd:26:98:5f:0a:bc:00:75:bc:74:34:da: 11:ae:21:08:e3:0e:36:24:c7:27:25:80:71:6c:17: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4C:C3:2C:AF:0F:2B:30:34:4E:56:8D:30:5D:7E:56:B4:42:8E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl X509v3 Authority Key Identifier: keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer sbgp-ipAddrBlock: critical IPv4: 67.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:06:f6:0c:a4:f0:45:01:5c:7d:fb:a3:8c:dd:e6:16:2f:da: 96:86:42:e1:cc:da:7e:d1:ca:cf:b9:dc:90:72:94:55:f1:17: 6a:4b:1b:c7:ad:e9:06:44:30:92:e8:bc:7a:1e:53:e8:f0:77: 76:ab:29:d9:41:d4:88:01:0f:cb:e6:e5:20:6a:bd:29:f6:2b: 81:aa:ba:8e:67:38:de:be:bd:5f:1e:e9:7f:f9:ea:32:22:6b: 85:9e:27:ed:29:ef:2f:20:a2:8d:5d:c7:1b:fc:ad:c6:00:42: 89:48:c2:2c:98:e3:7f:53:9c:5c:d1:58:18:f1:58:bd:44:31: 10:d4:c7:6a:b9:58:d6:d2:29:70:1b:58:5b:23:b1:18:f1:29: 59:8c:03:aa:1a:d2:56:51:e6:a1:a2:69:14:30:b7:5a:3e:b9: 8e:cb:1d:95:84:60:05:8f:31:7b:13:0c:56:10:c1:72:63:2e: f9:e5:c9:82:57:e8:97:6a:5a:18:9d:71:d0:f2:05:b7:e3:e6: 37:b1:41:89:d0:33:89:b3:e4:63:29:5d:b6:59:29:6a:61:d9: 75:83:d5:d9:ec:98:18:74:41:93:ac:0b:19:39:0b:18:8f:e8: 27:fc:53:c4:0e:a8:89:92:9c:37:2c:81:fb:55:df:50:f2:04: 0d:92:9b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBz3yseU0zgfDSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0 MWU5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDlhZTZjZmEtYjJkMi00NTNiLTkzYWYtZDdmYjExZmYzMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuqwzjn/iKnWNZm9AX22FN8HUb+ZUXtDdBTN 6Zc3LelbUPWL9TnrTG1XCzuknvrf54/1WVH5DcrSCJtwDNuxCSwiLS+XUMwRVq00 C2z/g7PRTD1zzhdLmxj0kL0jTaKFY1j6faoAROtVag4l+4NK3pupaA7DjfIXe9Cz Pc8RA71gRDwPvYQnUM1urjjz0rryJ2Je8tp6uxZwVlKHm2nEwG2iskD6ReoK/925 DtGWSiRxI3MozHYONOsadYHNkLR6Kn4l85UUmwOt580Dxs5uVUnceZ2EJojiZBx7 +yyIAMWsbIn9JphfCrwAdbx0NNoRriEI4w42JMcnJYBxbBd4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhMwyyvDyswNE5WjTBdfla0Qo6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5 ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvYmI1ZmIwNTMtMGExNy0z MTIyLTk3MGMtY2Y0ZDYwNDQ4ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm YmUzYTQxZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ57gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcG9gyk8EUBXH37o4zd5hYv2paGQuHM2n7Rys+53JBylFXxF2pLG8et 6QZEMJLovHoeU+jwd3arKdlB1IgBD8vm5SBqvSn2K4Gquo5nON6+vV8e6X/56jIi a4WeJ+0p7y8goo1dxxv8rcYAQolIwiyY439TnFzRWBjxWL1EMRDUx2q5WNbSKXAb WFsjsRjxKVmMA6oa0lZR5qGiaRQwt1o+uY7LHZWEYAWPMXsTDFYQwXJjLvnlyYJX 6JdqWhidcdDyBbfj5jexQYnQM4mz5GMpXbZZKWph2XWD1dnsmBh0QZOsCxk5CxiP 6Cf8U8QOqImSnDcsgftV31DyBA2Sm5U= -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:34 2025 by rpki-client