$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa File: ced604c6-99bb-30aa-8483-52ecd57799da.roa (raw, json) Hash identifier: lnfeMgEA+rGODI26wiipE/Z0OjOyiC0NDCw5CulnrK4= Subject key identifier: 77:54:70:78:6E:A0:8C:FE:65:FE:F5:BA:7E:5F:36:0B:A3:7F:68:17 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584B110C05C040FE433566009200 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 16276 IP address blocks: 206.168.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:05:c0:40:fe:43:35:66:00:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=35e006b0-046b-4580-824b-ee86907f2f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:f7:69:b0:07:05:35:c5:e2:5f:87:ec:00: bf:4c:5d:00:ac:bb:4c:1b:e4:89:4d:7c:17:ff:e1: 94:5f:f9:f0:e9:12:b5:27:cf:74:b4:8d:96:1c:ef: df:70:9e:54:f0:82:4b:35:07:d9:5d:8e:f3:88:53: 24:05:00:6f:f7:f8:50:1b:9b:33:37:7c:ac:4a:54: a2:2b:3c:9a:7a:e6:00:c3:a0:47:ca:4d:d6:40:0d: c6:60:1f:ad:c8:a7:ac:91:9d:72:6e:7c:8a:14:7f: 96:01:3e:66:54:b8:c5:0d:7b:d6:4e:a7:22:ed:75: 3b:18:13:dc:aa:dc:a0:4b:bb:44:2d:cc:df:4b:db: 1f:29:3a:ad:a9:d8:1a:55:43:45:a0:38:68:1e:01: b8:2b:bc:fb:7c:18:9a:7f:fb:5a:2f:57:89:41:85: 14:55:b6:31:bb:de:02:9a:d5:f1:4f:aa:86:2b:17: 4a:92:b3:c7:9e:46:93:51:ba:78:57:d6:b0:66:cb: a0:8a:1b:ae:4d:53:52:03:fa:a4:40:e2:c7:7a:7a: 99:1d:44:af:d6:11:a1:d0:de:2b:b4:27:ac:8c:d0: 0f:8f:b8:5b:66:00:c7:de:3d:72:ae:a9:24:e7:cc: ef:f7:4d:03:69:9f:a2:60:3b:f2:b2:d0:af:e1:89: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:54:70:78:6E:A0:8C:FE:65:FE:F5:BA:7E:5F:36:0B:A3:7F:68:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 206.168.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a4:c8:f3:5a:06:88:1d:00:2b:c6:1e:41:3e:41:77:34:65: 5f:a1:99:a8:78:27:58:7d:6c:26:e9:36:f0:96:17:7e:ec:75: 26:19:ba:b8:05:0c:f6:14:4c:ee:d3:fb:fe:dd:71:28:48:8c: d2:97:f3:f4:84:09:6d:9f:47:c6:15:68:ed:87:72:4c:44:3d: 97:a3:5b:20:77:36:6f:94:e8:ae:92:33:8e:4b:c6:89:f2:7a: 01:ae:3f:55:c1:5b:18:7c:7f:b0:20:3f:c2:97:eb:19:25:f8: 84:4d:c4:38:bd:35:11:3e:1a:5c:f5:c6:42:ee:96:db:90:3a: 49:fd:3a:8e:90:52:b1:3e:db:88:a4:61:03:22:60:9a:60:47: 3e:00:12:40:70:1d:c7:53:94:6f:5b:6d:31:f4:22:5b:09:7f: 15:6c:7f:a8:55:4c:ea:ef:ed:d6:9e:5f:1d:aa:cd:db:51:fa: 64:af:09:60:b9:84:3f:3f:50:9d:52:e8:a2:19:e7:ff:d9:1c: 69:27:44:f3:c2:31:89:35:f7:91:4a:be:d5:08:4f:2c:a6:05: 55:15:0c:86:a9:68:a5:37:ed:d1:f2:73:32:8e:1b:70:60:a8: 02:30:c2:cb:7d:6b:ce:84:b0:70:97:51:bc:ca:ea:f2:77:3d: a5:82:49:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAXAQP5DNWYAkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzVlMDA2YjAtMDQ2Yi00NTgwLTgyNGItZWU4NjkwN2YyZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e73abAHBTXF4l+H7AC/TF0ArLtMG+SJTXwX /+GUX/nw6RK1J890tI2WHO/fcJ5U8IJLNQfZXY7ziFMkBQBv9/hQG5szN3ysSlSi KzyaeuYAw6BHyk3WQA3GYB+tyKeskZ1ybnyKFH+WAT5mVLjFDXvWTqci7XU7GBPc qtygS7tELczfS9sfKTqtqdgaVUNFoDhoHgG4K7z7fBiaf/taL1eJQYUUVbYxu94C mtXxT6qGKxdKkrPHnkaTUbp4V9awZsugihuuTVNSA/qkQOLHenqZHUSv1hGh0N4r tCesjNAPj7hbZgDH3j1yrqkk58zv900DaZ+iYDvystCv4YlcdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdUcHhuoIz+Zf71un5fNgujf2gXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvY2VkNjA0YzYtOTliYi0z MGFhLTg0ODMtNTJlY2Q1Nzc5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqivMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqkyPNaBogdACvGHkE+QXc0ZV+hmah4J1h9bCbpNvCWF37sdSYZurgF DPYUTO7T+/7dcShIjNKX8/SECW2fR8YVaO2HckxEPZejWyB3Nm+U6K6SM45Lxony egGuP1XBWxh8f7AgP8KX6xkl+IRNxDi9NRE+Glz1xkLultuQOkn9Oo6QUrE+24ik YQMiYJpgRz4AEkBwHcdTlG9bbTH0IlsJfxVsf6hVTOrv7daeXx2qzdtR+mSvCWC5 hD8/UJ1S6KIZ5//ZHGknRPPCMYk195FKvtUITyymBVUVDIapaKU37dHyczKOG3Bg qAIwwst9a86EsHCXUbzK6vJ3PaWCSSk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:11:58 2025 by rpki-client