$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa File: 7388a857-6a24-35a6-b537-daa459258a2e.roa (raw, json) Hash identifier: NdNwV9tnZCdpE2lMyUMM0jsfvXx5eAdbOsT/g9H9UMg= Subject key identifier: 4A:1F:33:72:D9:26:D1:3E:78:08:19:60:A1:1E:31:A0:5C:17:9D:06 Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F4328584BAEC7B16B52747D40F2152280 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b1:6b:52:74:7d:40:f2:15:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=190bd5c0-b4bd-4e75-8c1d-bfcda02d41a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:26:54:ea:47:52:e7:24:24:51:9f:8a:ea: b9:97:b1:19:54:c0:de:b0:5b:94:f5:79:4e:99:e1: 50:cc:5e:a7:12:ba:1c:45:c2:21:cd:16:22:13:0c: ec:93:82:17:fe:16:a4:6e:d7:a9:3e:97:c4:a8:4e: ec:9a:fc:61:07:73:46:95:32:a5:ee:01:22:54:a4: eb:a2:eb:5d:56:34:2b:da:b8:aa:24:5a:d9:6f:c4: c4:a3:be:36:8a:07:bc:fb:12:a0:8b:e1:df:5f:88: 09:4b:24:1e:81:ad:ec:97:54:bf:d0:fb:2c:c2:fe: f8:8b:1e:19:a6:e2:a9:0f:43:4e:5f:98:b0:03:ac: 79:07:d3:b8:d2:4f:bf:01:b1:c3:ef:49:87:d5:98: 16:49:a7:42:14:b0:d6:4d:5f:57:8e:39:71:ad:53: e2:67:1f:5c:07:51:94:e8:fc:ab:fc:99:57:b6:43: a1:7e:ed:b7:01:e6:7b:dd:fc:ff:33:69:3e:50:42: d3:ba:a6:fb:2f:52:91:11:8e:3f:7d:f4:45:76:0c: 97:86:32:0f:d9:0f:15:2d:f8:6a:45:ee:75:d0:01: a1:40:02:c1:ea:e1:ed:cf:4f:ab:a8:a3:19:04:b1: 5a:23:04:62:83:58:88:fc:ef:f7:4d:2b:de:3a:33: 31:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:33:72:D9:26:D1:3E:78:08:19:60:A1:1E:31:A0:5C:17:9D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:55:6f:82:91:9a:7f:e8:a5:1d:3d:00:4a:d1:6a:6f:d1:38: 66:fb:37:60:8d:8a:97:32:41:f1:b5:c6:18:da:14:14:e6:25: 57:52:e8:39:71:17:16:b3:3d:d1:29:6e:04:18:8e:b4:98:77: 8f:59:85:20:e1:dd:c8:75:d9:cc:51:29:79:5c:a0:1e:b5:55: 71:da:70:2e:13:fb:a1:b1:0f:b2:1b:bc:a4:01:9d:90:4f:4e: 44:01:6a:c1:7c:fc:9e:25:96:57:7c:4c:6c:d3:92:66:01:4b: 59:64:67:33:7b:8a:ba:41:7f:9d:e6:b1:f6:cf:59:35:78:29: 0c:52:e9:3c:d2:39:c4:67:12:3b:0d:66:1b:27:77:d2:17:3a: 80:be:bd:07:06:9a:de:98:29:4d:2f:b9:bb:b5:ef:8b:ed:33: 8a:65:6e:93:bb:7f:65:39:a4:60:98:5d:e0:96:33:2d:c7:8d: 24:f1:ab:93:ec:a8:1d:58:23:e5:45:9e:a2:60:6b:05:8b:56: a5:ac:de:72:c8:55:f9:39:f0:89:e7:8a:9f:a9:c3:23:4c:97: 2f:d4:0d:40:83:78:73:81:4f:97:90:60:a9:fd:1a:9e:58:b7: 7d:d2:d7:8c:de:4d:58:b0:6d:71:ac:87:76:cf:ed:0e:38:e7: 12:34:29:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7FrUnR9QPIVIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MTkwYmQ1YzAtYjRiZC00ZTc1LThjMWQtYmZjZGEwMmQ0MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAAmVOpHUuckJFGfiuq5l7EZVMDesFuU9XlO meFQzF6nErocRcIhzRYiEwzsk4IX/hakbtepPpfEqE7smvxhB3NGlTKl7gEiVKTr outdVjQr2riqJFrZb8TEo742ige8+xKgi+HfX4gJSyQega3sl1S/0Psswv74ix4Z puKpD0NOX5iwA6x5B9O40k+/AbHD70mH1ZgWSadCFLDWTV9XjjlxrVPiZx9cB1GU 6Pyr/JlXtkOhfu23AeZ73fz/M2k+UELTuqb7L1KREY4/ffRFdgyXhjIP2Q8VLfhq Re510AGhQALB6uHtz0+rqKMZBLFaIwRig1iI/O/3TSveOjMxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEofM3LZJtE+eAgZYKEeMaBcF50GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvNzM4OGE4NTctNmEyNC0z NWE2LWI1MzctZGFhNDU5MjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVVb4KRmn/opR09AErRam/ROGb7N2CNipcyQfG1xhjaFBTmJVdS6Dlx FxazPdEpbgQYjrSYd49ZhSDh3ch12cxRKXlcoB61VXHacC4T+6GxD7IbvKQBnZBP TkQBasF8/J4llld8TGzTkmYBS1lkZzN7irpBf53msfbPWTV4KQxS6TzSOcRnEjsN Zhsnd9IXOoC+vQcGmt6YKU0vubu174vtM4plbpO7f2U5pGCYXeCWMy3HjSTxq5Ps qB1YI+VFnqJgawWLVqWs3nLIVfk58Innip+pwyNMly/UDUCDeHOBT5eQYKn9Gp5Y t33S14zeTViwbXGsh3bP7Q445xI0KZg= -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:56 2025 by rpki-client