$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3c334b7c-b500-3368-b581-9227a6af0c8b.roa File: 3c334b7c-b500-3368-b581-9227a6af0c8b.roa (raw, json) Hash identifier: MY3xlgkr529oIXVpI/+7Ke0srCdfBtF4WmSvu0A4gu0= Subject key identifier: D7:07:CB:0A:84:26:68:3E:96:3A:11:74:E2:90:97:FC:B9:6C:90:77 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B5DD20D666364DDF611CD72E0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3c334b7c-b500-3368-b581-9227a6af0c8b.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 10794 IP address blocks: 171.159.112.0/21 maxlen: 21 171.159.112.0/24 maxlen: 24 171.159.113.0/24 maxlen: 24 171.159.114.0/23 maxlen: 23 171.159.114.0/24 maxlen: 24 171.159.115.0/24 maxlen: 24 171.159.116.0/24 maxlen: 24 171.159.117.0/24 maxlen: 24 171.159.118.0/24 maxlen: 24 171.159.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:0d:66:63:64:dd:f6:11:cd:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=c5eeac1e-7ca7-4037-9d24-8fc658e1a206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:34:6c:04:df:f9:cb:dd:95:11:c1:d9:b8:be: a5:db:0d:76:b7:2c:a9:6d:b8:f7:cc:4c:2e:5d:14: 48:ff:ee:74:3f:7d:57:2f:98:d5:e9:29:98:17:0e: bb:cb:22:eb:c6:71:16:6b:53:c7:0a:8c:49:58:b8: 25:8c:7c:4b:37:66:4b:a4:79:91:ec:3b:28:7e:4e: f3:18:c7:33:da:02:80:2f:9d:38:62:35:bb:be:e9: 03:e5:2c:c9:a8:30:38:88:a1:2d:17:5f:32:d3:f1: 0b:69:0d:37:6b:62:83:61:82:a3:d0:47:10:a3:4d: c0:31:e4:ae:5d:6c:06:75:10:c1:76:bc:51:d5:e1: b7:77:85:c9:ed:12:c7:0c:a0:bd:50:de:9c:12:ba: 73:8d:9e:9a:31:be:4c:eb:2d:83:eb:84:9f:bc:24: db:6f:72:57:00:b7:e5:22:75:2c:bf:6a:83:88:be: c3:87:ba:be:43:b9:c8:fa:98:fb:7e:e1:98:91:31: 3f:29:a6:de:f7:ba:1a:34:31:d3:7d:bb:ca:04:64: 14:21:1d:82:7c:0a:49:0c:61:bb:35:ea:ba:1b:7f: b2:b2:af:73:d7:e6:31:90:d8:25:e6:66:b6:68:17: 95:fa:41:2d:07:d8:60:b1:84:70:2c:12:66:2d:87: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:07:CB:0A:84:26:68:3E:96:3A:11:74:E2:90:97:FC:B9:6C:90:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3c334b7c-b500-3368-b581-9227a6af0c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.159.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fb:0e:13:e2:76:c4:ff:a7:be:c0:d5:56:80:3f:b2:a1:54: 00:a7:bf:e7:4d:8c:08:3b:0b:96:fc:51:a4:57:98:4d:ea:7d: bd:c3:c1:2b:d7:f8:b1:60:0c:29:ab:a9:41:f7:74:51:10:a0: 41:74:61:67:5a:d1:1c:29:d1:03:27:04:30:6b:75:da:dd:8a: 3c:db:ff:18:b3:f4:14:db:23:b3:17:dd:d6:98:a8:22:ae:03: 26:3c:d8:b0:3f:4d:1c:39:c0:83:69:b0:06:55:2a:2a:2b:77: 55:b7:c4:ba:96:54:57:7f:7e:08:6f:7d:7b:46:bc:1c:45:81: bc:fb:99:62:8f:b8:54:aa:09:19:b5:72:32:81:79:6d:ab:20: 5e:90:4e:2e:5b:86:5c:9f:8b:ca:a4:2f:f0:09:4e:0d:1f:f2: 9c:a4:79:a7:8d:db:a7:a5:46:24:56:49:57:f6:74:54:b9:d6: b1:e6:f7:cf:74:d7:f3:c7:37:e2:06:58:a3:d2:e9:36:de:5c: 7b:11:cd:32:58:10:2a:37:df:7a:51:70:fe:16:bc:86:14:2b: 00:f3:d9:3c:91:e8:2e:28:27:66:e3:18:98:a3:f7:8d:b1:7a: a9:b9:f4:24:0d:ea:ff:10:d1:d7:a7:96:db:c5:c9:f1:0b:af: 49:d2:59:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0g1mY2Td9hHNcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YzVlZWFjMWUtN2NhNy00MDM3LTlkMjQtOGZjNjU4ZTFhMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjRsBN/5y92VEcHZuL6l2w12tyypbbj3zEwu XRRI/+50P31XL5jV6SmYFw67yyLrxnEWa1PHCoxJWLgljHxLN2ZLpHmR7Dsofk7z GMcz2gKAL504YjW7vukD5SzJqDA4iKEtF18y0/ELaQ03a2KDYYKj0EcQo03AMeSu XWwGdRDBdrxR1eG3d4XJ7RLHDKC9UN6cErpzjZ6aMb5M6y2D64SfvCTbb3JXALfl InUsv2qDiL7Dh7q+Q7nI+pj7fuGYkTE/Kabe97oaNDHTfbvKBGQUIR2CfApJDGG7 Neq6G3+ysq9z1+YxkNgl5ma2aBeV+kEtB9hgsYRwLBJmLYe4vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcHywqEJmg+ljoRdOKQl/y5bJB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvM2MzMzRiN2MtYjUwMC0z MzY4LWI1ODEtOTIyN2E2YWYwYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDq59wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn7DhPidsT/p77A1VaAP7KhVACnv+dNjAg7C5b8UaRXmE3qfb3DwSvX +LFgDCmrqUH3dFEQoEF0YWda0Rwp0QMnBDBrddrdijzb/xiz9BTbI7MX3daYqCKu AyY82LA/TRw5wINpsAZVKiord1W3xLqWVFd/fghvfXtGvBxFgbz7mWKPuFSqCRm1 cjKBeW2rIF6QTi5bhlyfi8qkL/AJTg0f8pykeaeN26elRiRWSVf2dFS51rHm9890 1/PHN+IGWKPS6TbeXHsRzTJYECo333pRcP4WvIYUKwDz2TyR6C4oJ2bjGJij942x eqm59CQN6v8Q0denltvFyfELr0nSWZY= -----END CERTIFICATE-----Generated at Thu Nov 6 06:04:46 2025 by rpki-client