$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/d36166e4-c341-359d-b454-ef42a101c9da.roa File: d36166e4-c341-359d-b454-ef42a101c9da.roa (raw, json) Hash identifier: EzNyzYjGLRxUu0Ww6lEetV8EsEjui8XxZ2dbL8WVJUo= Subject key identifier: 25:13:5D:66:D8:1C:A0:68:AE:15:EC:90:C1:34:67:4A:99:CD:45:56 Certificate issuer: /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967 Certificate serial: 010D0C9F4328584B5B07472FDDED0CC6BC651C80 Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/d36166e4-c341-359d-b454-ef42a101c9da.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 55230 IP address blocks: 205.174.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:47:2f:dd:ed:0c:c6:bc:65:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=85046e37-bb60-4da2-a995-c36b5bc803a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:78:d1:de:03:ac:b6:33:b8:cb:cd:d6:ac: 2d:96:91:13:f6:7e:cc:56:44:fb:2e:d0:62:15:f1: a5:98:6f:46:e7:51:55:0f:f7:a7:4c:52:de:02:26: fa:eb:6e:79:bf:1d:95:28:a0:6b:2e:6c:37:33:9f: 3d:16:8e:cd:a0:ea:eb:c9:0e:27:73:a9:14:a5:ff: 1e:b1:e1:b5:96:ba:66:6f:cd:d5:c5:17:b6:6d:ad: c0:c9:19:0e:e6:d2:55:e6:d5:cb:72:aa:68:60:19: 53:e8:36:b3:11:da:47:3a:09:6d:5d:63:64:37:92: 04:f8:a9:44:f5:74:19:44:10:89:19:7a:10:0e:a0: 49:c1:96:2f:b5:84:9a:c5:5d:fd:4d:24:c2:70:21: b6:90:4e:45:7e:97:20:73:ac:5a:b1:6a:d5:de:13: 69:2a:a7:72:07:45:72:0b:7f:c9:81:35:cf:b3:c4: bc:76:14:96:78:4c:06:94:1c:96:cd:95:17:ba:b7: 4c:8d:4a:49:33:72:76:14:59:84:55:4b:69:a9:20: ba:d1:38:b6:63:3a:21:b5:3b:b1:04:2c:87:ef:77: 8e:9c:b3:e9:ed:d5:3c:00:b2:79:24:a2:5f:dd:79: f3:db:cf:f3:ec:6b:49:c4:3a:fa:46:75:38:7c:f0: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:13:5D:66:D8:1C:A0:68:AE:15:EC:90:C1:34:67:4A:99:CD:45:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/d36166e4-c341-359d-b454-ef42a101c9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl X509v3 Authority Key Identifier: keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer sbgp-ipAddrBlock: critical IPv4: 205.174.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:aa:6e:00:ba:3f:d8:94:e1:0b:72:72:93:14:2d:ba:ef:b6: 53:67:e3:9a:c2:43:a6:7f:ea:0e:f0:3c:98:ca:3e:4d:f6:2f: dc:e5:09:3f:6d:50:15:f3:c1:35:12:45:f1:61:82:71:6b:16: 48:8c:e8:15:47:76:90:ce:00:75:da:5c:7f:c5:e2:3b:db:79: 3b:da:7c:1e:41:e0:53:df:54:de:fa:37:38:fa:f1:e9:62:00: f0:8a:84:81:73:d5:a1:f8:79:5b:4e:f3:5a:a1:e9:02:1d:90: 66:04:a5:0b:62:c8:78:88:cf:95:70:47:97:e8:6b:84:58:a8: 7b:1c:16:a3:4c:53:32:c2:93:e3:6a:e7:4e:20:39:cd:8f:35: f1:20:2e:d3:af:20:c8:96:de:4f:99:94:67:40:8e:c9:ef:b5: 0e:b7:38:46:1c:1a:60:67:41:bc:a1:c2:86:c1:a5:f4:95:49: 14:78:ff:24:e6:06:ca:12:e4:1c:f4:40:54:3e:ef:f4:85:f5: 55:2b:8f:df:b2:1a:f2:29:3d:69:e0:c5:d8:7a:e6:f8:58:12: 7f:fb:d8:f9:fd:e8:45:13:30:71:cc:f7:a3:64:50:71:fc:84: 4f:7f:a7:33:1c:6a:9e:1d:26:4f:ea:a6:56:28:51:b7:53:cb: 9b:57:67:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0cv3e0MxrxlHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNjRlZDAtNTIxYi00NTNiLWI4ZjYtODVhYjRkNDdj OTY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODUwNDZlMzctYmI2MC00ZGEyLWE5OTUtYzM2YjViYzgwM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKd40d4DrLYzuMvN1qwtlpET9n7MVkT7LtBi FfGlmG9G51FVD/enTFLeAib66255vx2VKKBrLmw3M589Fo7NoOrryQ4nc6kUpf8e seG1lrpmb83VxRe2ba3AyRkO5tJV5tXLcqpoYBlT6DazEdpHOgltXWNkN5IE+KlE 9XQZRBCJGXoQDqBJwZYvtYSaxV39TSTCcCG2kE5Ffpcgc6xasWrV3hNpKqdyB0Vy C3/JgTXPs8S8dhSWeEwGlByWzZUXurdMjUpJM3J2FFmEVUtpqSC60Ti2YzohtTux BCyH73eOnLPp7dU8ALJ5JKJf3Xnz28/z7GtJxDr6RnU4fPBNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUTXWbYHKBorhXskME0Z0qZzUVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YzI2 NGVkMC01MjFiLTQ1M2ItYjhmNi04NWFiNGQ0N2M5NjcvZDM2MTY2ZTQtYzM0MS0z NTlkLWI0NTQtZWY0MmExMDFjOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWMyNjRlZDAtNTIxYi00NTNiLWI4 ZjYtODVhYjRkNDdjOTY3LzVjMjY0ZWQwLTUyMWItNDUzYi1iOGY2LTg1YWI0ZDQ3 Yzk2Ny5jcmwwHwYDVR0jBBgwFoAUnyjNCBzMRCkWsHxtGJsuueYCT98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YzI2NGVkMC01MjFiLTQ1M2ItYjhmNi04NWFi NGQ0N2M5NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDza6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuqbgC6P9iU4QtycpMULbrvtlNn45rCQ6Z/6g7wPJjKPk32L9zlCT9t UBXzwTUSRfFhgnFrFkiM6BVHdpDOAHXaXH/F4jvbeTvafB5B4FPfVN76Nzj68eli APCKhIFz1aH4eVtO81qh6QIdkGYEpQtiyHiIz5VwR5foa4RYqHscFqNMUzLCk+Nq 504gOc2PNfEgLtOvIMiW3k+ZlGdAjsnvtQ63OEYcGmBnQbyhwobBpfSVSRR4/yTm BsoS5Bz0QFQ+7/SF9VUrj9+yGvIpPWngxdh65vhYEn/72Pn96EUTMHHM96NkUHH8 hE9/pzMcap4dJk/qplYoUbdTy5tXZ0U= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:11 2025 by rpki-client