$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa File: bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa (raw, json) Hash identifier: nypnZFglHfouObGYWT74fA4w1Cg6/vQruRePaW/hSHI= Subject key identifier: CC:ED:15:77:CE:89:35:F4:1F:8D:D4:F5:60:CA:53:3A:16:AF:BA:8D Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F4328584B742755E4A1D39BB46BA2AD10 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 398446 IP address blocks: 143.246.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:55:e4:a1:d3:9b:b4:6b:a2:ad:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=5542e1ea-10a3-4d06-9287-0b5093849c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:fe:fd:d1:d3:23:36:e6:0c:13:05:80:57: 1a:96:0e:cb:b9:aa:36:d5:55:d9:10:70:0f:5d:90: 94:13:2e:95:5d:55:5b:34:08:72:b4:d8:c0:6b:3b: 8b:2d:ee:bf:e2:b2:29:40:a7:87:fe:ac:2f:ee:e4: b8:5c:a0:dd:fb:04:32:4e:87:c9:d5:82:d8:f4:9a: 20:dd:10:ad:f2:54:df:8b:76:ad:08:c8:6a:c9:f2: d1:4d:ad:64:ed:b8:8e:84:72:0e:77:81:02:62:8f: ab:1e:2b:55:9e:dd:42:ef:e1:95:e0:e5:d0:ed:75: 11:eb:70:46:87:77:f0:b8:4b:8c:97:32:2d:71:c7: 02:a3:fd:42:85:01:52:3a:c7:10:79:cd:51:8f:a4: 82:51:5c:63:47:2d:f1:1a:2d:ed:2c:e2:fe:33:74: 12:93:f2:cf:36:03:2c:c0:3c:7b:57:32:44:21:fe: fe:be:a1:30:1a:8e:16:47:e9:d6:f6:b1:8c:8e:f7: 92:de:ef:f1:5d:90:11:2d:25:e1:24:6f:0d:a1:51: c3:89:98:8d:14:08:f3:05:21:67:6e:65:c9:82:78: e9:fe:d2:46:dd:b5:82:7d:fe:77:b8:9b:7d:45:ad: 5a:42:fc:69:22:7d:88:19:ef:94:b4:df:eb:07:dd: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:ED:15:77:CE:89:35:F4:1F:8D:D4:F5:60:CA:53:3A:16:AF:BA:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 143.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2e:3d:43:63:00:62:25:7a:b9:da:c6:06:4b:78:24:c9:40: 54:a0:bd:cb:92:5e:ad:a1:98:d6:bc:05:37:2c:5c:6f:6a:b6: 39:d0:87:3d:a7:57:f2:1e:c5:d0:33:2d:e8:5b:05:34:4f:7b: 4a:ac:c5:4d:77:01:50:bb:65:20:12:3d:60:ae:df:53:17:3e: e0:52:51:93:87:ca:51:4f:cc:f8:9e:da:f9:42:93:fc:0b:ae: d4:2e:90:58:98:9d:74:73:08:86:7c:19:26:0c:99:16:bf:cb: d1:5c:d7:24:0c:99:c8:44:8d:ae:50:4f:09:73:33:91:3f:b5: 0e:5c:31:43:dd:a1:aa:41:0d:8f:57:95:d3:97:3a:67:f0:65: a5:bc:e8:35:6f:2a:63:e1:2a:fb:23:11:47:fb:42:96:68:e6: 0a:c0:e9:2c:fd:31:9b:9b:ce:7c:21:8f:0d:14:40:be:74:9e: ec:19:b9:2f:46:7a:2f:ac:5f:91:39:2c:ea:32:be:ac:cf:9a: 54:2c:ef:42:47:d0:12:66:f9:2d:18:27:3d:db:cf:a1:43:1e: 02:62:f2:52:e2:66:e3:e0:ba:4c:ab:01:96:5c:46:1f:90:1f: 79:bc:7f:01:0d:c4:81:d8:e6:4e:2e:4d:3e:aa:26:89:40:49: 4a:da:61:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1XkodObtGuirRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk NTU0MmUxZWEtMTBhMy00ZDA2LTkyODctMGI1MDkzODQ5YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxz+/dHTIzbmDBMFgFcalg7Luao21VXZEHAP XZCUEy6VXVVbNAhytNjAazuLLe6/4rIpQKeH/qwv7uS4XKDd+wQyTofJ1YLY9Jog 3RCt8lTfi3atCMhqyfLRTa1k7biOhHIOd4ECYo+rHitVnt1C7+GV4OXQ7XUR63BG h3fwuEuMlzItcccCo/1ChQFSOscQec1Rj6SCUVxjRy3xGi3tLOL+M3QSk/LPNgMs wDx7VzJEIf7+vqEwGo4WR+nW9rGMjveS3u/xXZARLSXhJG8NoVHDiZiNFAjzBSFn bmXJgnjp/tJG3bWCff53uJt9Ra1aQvxpIn2IGe+UtN/rB90oJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMztFXfOiTX0H43U9WDKUzoWr7qNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvYmRkMWRlZTYtYTc0OC0z YmNkLWE4MTctMWI2MTdlMmNiMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsuPUNjAGIlernaxgZLeCTJQFSgvcuSXq2hmNa8BTcsXG9qtjnQhz2n V/IexdAzLehbBTRPe0qsxU13AVC7ZSASPWCu31MXPuBSUZOHylFPzPie2vlCk/wL rtQukFiYnXRzCIZ8GSYMmRa/y9Fc1yQMmchEja5QTwlzM5E/tQ5cMUPdoapBDY9X ldOXOmfwZaW86DVvKmPhKvsjEUf7QpZo5grA6Sz9MZubznwhjw0UQL50nuwZuS9G ei+sX5E5LOoyvqzPmlQs70JH0BJm+S0YJz3bz6FDHgJi8lLiZuPgukyrAZZcRh+Q H3m8fwENxIHY5k4uTT6qJolASUraYU8= -----END CERTIFICATE-----Generated at Wed Nov 5 14:39:36 2025 by rpki-client