$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa File: 04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa (raw, json) Hash identifier: AErcoATKb7TeoTFVsVHKV8ewy0hVx5rIT6x+u8oJnrw= Subject key identifier: 1A:EA:3B:43:8E:08:71:52:44:FC:1B:F8:CB:C5:4C:67:1C:D3:29:6A Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584BAEC7B89DEDC198BA3880AF00 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 2914 IP address blocks: 155.254.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b8:9d:ed:c1:98:ba:38:80:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=59e578d3-8ad5-42d0-8926-de29de1435dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:8b:89:bb:a1:fa:1f:3c:90:80:66:48:a8: 61:a3:bc:a9:04:42:68:e0:17:52:1a:42:2d:5e:77: 09:79:1e:8e:71:eb:39:1b:46:50:82:4b:c8:e2:0e: f8:99:de:ec:00:e4:7f:fa:e3:58:bd:28:49:26:38: 8b:fb:60:e0:b3:54:fa:72:39:12:70:00:c7:30:36: 9c:99:43:33:5e:4c:81:f8:0a:54:bb:07:0f:a8:ef: c5:4f:c9:0f:c1:6f:00:75:ee:0f:18:ec:3d:2b:f3: 45:39:52:53:ee:88:ee:38:44:be:c8:7c:dc:3a:90: f7:79:5d:47:4e:1b:70:c7:9b:55:bb:73:ed:fc:99: 7b:06:7a:1e:c5:0a:38:ec:ea:ab:7f:ed:18:d0:a3: 11:c9:75:2f:e2:3e:6f:c7:d1:80:6a:73:2a:9e:08: 03:5f:37:e7:22:8a:98:e5:8c:4f:52:00:b5:62:e2: 0b:de:06:44:9d:94:68:b2:bb:04:cf:60:56:aa:b2: 51:14:1a:40:f4:47:68:99:34:fa:f7:35:f4:52:d8: 8e:45:94:a7:ee:6c:6b:8e:92:03:b8:72:70:4c:ce: 67:0d:04:20:13:d2:c2:03:65:8e:a8:7c:7f:ea:64: a6:6f:4a:7a:79:84:cf:36:b6:46:81:34:bf:96:05: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EA:3B:43:8E:08:71:52:44:FC:1B:F8:CB:C5:4C:67:1C:D3:29:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 155.254.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d9:61:37:81:49:4b:b3:92:cd:9c:84:8f:df:f7:6c:27:d0: 15:d4:ac:b0:55:c9:a9:91:a7:67:d5:3d:9a:be:88:cf:36:d1: 46:11:b8:77:29:76:ea:a4:6b:1c:db:d6:f2:50:14:c0:00:8d: 68:4b:a5:85:f6:23:a4:26:96:05:9c:53:45:1d:a2:b3:12:a3: 9d:4a:13:31:81:2f:16:e0:1e:9f:27:e6:39:df:62:56:b8:e3: 42:de:34:12:f1:25:5c:75:20:68:bb:13:55:9d:d8:6e:db:5e: 8c:81:14:82:e8:24:e0:2c:e0:f4:72:94:a7:f5:e7:ed:35:78: ea:d9:82:ce:7d:10:75:b7:f9:13:0b:e6:6e:e1:62:10:c0:9f: 05:67:4b:12:68:34:04:ca:08:af:0c:ef:f1:48:56:60:a0:31: cc:de:80:3d:cb:e5:2d:1f:87:92:74:cd:f4:f5:b1:98:57:35: 6b:89:21:2d:30:5b:2d:1a:44:9c:76:20:58:55:08:da:03:b3: 8b:63:c5:20:cf:68:ba:13:a5:ce:45:48:d6:90:68:c2:ef:20: 21:69:38:e2:78:bb:66:ad:f1:96:69:53:7b:55:e3:b9:40:39: 20:05:a9:fa:a9:e8:5f:d1:b7:dc:92:b2:f4:67:72:13:7e:76: 5c:f0:d8:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7id7cGYujiArwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NTllNTc4ZDMtOGFkNS00MmQwLTg5MjYtZGUyOWRlMTQzNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNqLibuh+h88kIBmSKhho7ypBEJo4BdSGkIt XncJeR6Oces5G0ZQgkvI4g74md7sAOR/+uNYvShJJjiL+2Dgs1T6cjkScADHMDac mUMzXkyB+ApUuwcPqO/FT8kPwW8Ade4PGOw9K/NFOVJT7ojuOES+yHzcOpD3eV1H Thtwx5tVu3Pt/Jl7BnoexQo47Oqrf+0Y0KMRyXUv4j5vx9GAanMqnggDXzfnIoqY 5YxPUgC1YuIL3gZEnZRosrsEz2BWqrJRFBpA9EdomTT69zX0UtiORZSn7mxrjpID uHJwTM5nDQQgE9LCA2WOqHx/6mSmb0p6eYTPNrZGgTS/lgVVhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrqO0OOCHFSRPwb+MvFTGcc0ylqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvMDRmM2FkYmItN2ZjNS0z MWVmLTlkMzctMGE4YTc4ZTY4OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm/7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTZYTeBSUuzks2chI/f92wn0BXUrLBVyamRp2fVPZq+iM820UYRuHcp duqkaxzb1vJQFMAAjWhLpYX2I6QmlgWcU0UdorMSo51KEzGBLxbgHp8n5jnfYla4 40LeNBLxJVx1IGi7E1Wd2G7bXoyBFILoJOAs4PRylKf15+01eOrZgs59EHW3+RML 5m7hYhDAnwVnSxJoNATKCK8M7/FIVmCgMczegD3L5S0fh5J0zfT1sZhXNWuJIS0w Wy0aRJx2IFhVCNoDs4tjxSDPaLoTpc5FSNaQaMLvICFpOOJ4u2at8ZZpU3tV47lA OSAFqfqp6F/Rt9ySsvRnchN+dlzw2Dg= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:53 2025 by rpki-client