$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa File: 7395442f-a0fe-3451-b692-69afd3407f29.roa (raw, json) Hash identifier: 9z94OR7dDQAZSfc9AbIzstGjWvO+o/YVZ47RLAf+mDI= Subject key identifier: 64:EA:1C:CC:92:A4:4A:87:85:AB:E8:A1:2D:FF:49:B7:3D:7C:F7:BB Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584BB45D3403FD90E448D47D2F80 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 22925 IP address blocks: 168.235.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:34:03:fd:90:e4:48:d4:7d:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=5c88beb6-33bc-40d9-92d1-f2890e6998b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:d1:07:ec:7a:d0:80:e3:4d:23:8c:a0:df: ae:18:7c:6d:53:47:ad:b2:13:8b:64:eb:a8:8f:d7: 19:6a:45:10:92:fd:3e:8d:f2:1e:d0:30:9f:c5:4b: 98:bb:02:10:08:68:be:9c:93:01:55:e8:b1:a0:9e: 33:f1:b0:72:eb:fb:0a:cf:a4:20:d0:17:27:99:95: 5b:0b:4c:0f:3d:38:06:f6:3a:06:cb:47:6b:88:40: 80:b6:e6:74:44:ef:ea:cb:86:40:18:1e:1c:a7:9c: f7:44:be:0d:05:be:06:c1:3d:46:50:39:c3:da:fa: 9d:10:df:aa:ba:6d:af:34:a7:b3:97:94:01:e3:c3: 1c:6b:a1:cb:68:54:4a:52:e9:f4:e3:ce:7a:a4:c5: c7:38:09:f6:4c:8c:89:12:16:4f:30:fb:ef:59:a1: 46:c5:1f:eb:e8:2d:4b:7c:30:7f:83:17:45:77:dc: 3c:6b:b8:24:fd:b1:dc:48:04:38:28:35:7f:d8:c6: 79:3b:70:80:2f:26:b7:19:bd:1a:f9:eb:32:2d:1a: 5d:9f:05:39:11:fb:d1:84:03:95:b9:49:d5:00:25: ce:1d:14:8c:32:94:71:c7:11:90:85:94:fa:8a:db: 5f:e9:45:5a:e0:02:73:cc:b6:0d:fa:ae:04:3f:0f: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:1C:CC:92:A4:4A:87:85:AB:E8:A1:2D:FF:49:B7:3D:7C:F7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:9c:2c:f7:eb:2e:4a:3f:ab:22:86:00:cf:70:64:2c:f9:45: c1:ea:0f:3a:26:b3:eb:1d:81:47:00:43:29:53:fc:6b:ae:83: 71:94:f0:70:a0:62:5c:a3:ef:0a:13:7f:90:09:ff:88:e8:ea: ea:d7:61:97:67:2d:82:70:82:f8:68:2f:48:45:cd:ad:b1:3a: e6:bc:93:d2:ae:75:05:94:da:03:0f:87:db:94:6d:bf:6c:47: dc:4e:4d:5a:34:e8:96:14:b7:a7:c8:9f:1b:9f:2b:9c:83:44: 99:22:3f:25:18:40:6a:b1:a9:a9:23:12:1f:41:42:fa:7c:48: 71:58:d7:f7:60:67:ef:f0:62:d3:f9:6b:ef:0d:cb:d6:21:d9: e3:d0:8c:8c:ad:1b:bf:e9:07:9c:4b:ba:72:23:8c:3c:73:fd: 36:4e:1a:2e:0b:60:a4:98:c4:a8:b1:17:49:df:c0:6a:19:53: 6b:ca:37:40:9e:89:f0:41:a4:15:c6:1b:31:38:2f:a9:8e:ff: 33:58:1e:ef:4d:bf:cb:d4:28:71:bd:d0:23:63:c3:1e:ca:ae: 65:43:f3:8b:da:4b:60:99:af:c8:a6:c2:19:0e:f4:c7:56:64: a1:3b:e8:ab:0e:fc:08:b3:80:b2:90:48:c7:37:2a:73:1f:ff: 56:f0:8f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTQD/ZDkSNR9L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NWM4OGJlYjYtMzNiYy00MGQ5LTkyZDEtZjI4OTBlNjk5OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtenRB+x60IDjTSOMoN+uGHxtU0etshOLZOuo j9cZakUQkv0+jfIe0DCfxUuYuwIQCGi+nJMBVeixoJ4z8bBy6/sKz6Qg0BcnmZVb C0wPPTgG9joGy0driECAtuZ0RO/qy4ZAGB4cp5z3RL4NBb4GwT1GUDnD2vqdEN+q um2vNKezl5QB48Mca6HLaFRKUun04856pMXHOAn2TIyJEhZPMPvvWaFGxR/r6C1L fDB/gxdFd9w8a7gk/bHcSAQ4KDV/2MZ5O3CALya3Gb0a+esyLRpdnwU5EfvRhAOV uUnVACXOHRSMMpRxxxGQhZT6ittf6UVa4AJzzLYN+q4EPw/2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTqHMySpEqHhavooS3/Sbc9fPe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvNzM5NTQ0MmYtYTBmZS0z NDUxLWI2OTItNjlhZmQzNDA3ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqOuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+cLPfrLko/qyKGAM9wZCz5RcHqDzoms+sdgUcAQylT/Guug3GU8HCg Ylyj7woTf5AJ/4jo6urXYZdnLYJwgvhoL0hFza2xOua8k9KudQWU2gMPh9uUbb9s R9xOTVo06JYUt6fInxufK5yDRJkiPyUYQGqxqakjEh9BQvp8SHFY1/dgZ+/wYtP5 a+8Ny9Yh2ePQjIytG7/pB5xLunIjjDxz/TZOGi4LYKSYxKixF0nfwGoZU2vKN0Ce ifBBpBXGGzE4L6mO/zNYHu9Nv8vUKHG90CNjwx7KrmVD84vaS2CZr8imwhkO9MdW ZKE76KsO/AizgLKQSMc3KnMf/1bwjxs= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:25 2025 by rpki-client