$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa File: cf09a183-7514-346f-a223-607c0b53d3ec.roa (raw, json) Hash identifier: GL/xIH8juGz7xAv+IWUyfIfkp+168TOX7tjO0S8LXmQ= Subject key identifier: A8:DA:0A:4E:79:36:8D:9A:6F:DB:3A:79:09:B5:33:95:9B:B4:8E:09 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584BB88D5599348518DDCC1B4D80 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:55:99:34:85:18:dd:cc:1b:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4c5b9883-6f3f-4f3b-9552-b1f487922db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:b0:fa:0f:6d:5a:ab:ab:45:72:69:3f:21: 7d:93:3f:cd:bc:ca:a7:20:62:c1:f5:97:34:c9:85: 9e:70:0e:b2:97:c1:24:94:63:42:f8:e0:0c:03:fa: 18:43:7b:db:6a:f8:94:42:fc:55:39:a9:06:fd:1e: 93:ef:00:2c:34:9b:fb:fd:68:4e:74:ef:54:8e:51: cd:45:8f:6e:d1:ce:7a:e2:c1:b7:02:cf:7a:fb:0f: 3a:76:61:b6:f8:ea:38:06:ed:c3:e2:ee:6e:45:6f: 25:64:37:5e:6e:b8:7d:43:10:2c:ff:16:dc:9e:d0: d5:1f:c0:58:32:f3:f9:bf:a2:96:13:ac:5d:2a:db: 41:0f:6d:c3:9f:ad:ef:1d:db:de:dc:5d:af:0c:5c: dd:02:30:50:57:9f:00:10:ef:46:5a:5a:b0:17:ac: e6:65:93:e3:5c:df:33:b8:ce:1e:b1:a6:bc:e5:f5: 84:c5:17:70:f7:7b:dd:a6:6c:29:60:fd:8e:52:a2: a7:f2:b2:79:0d:f0:47:ee:4c:b5:5b:6f:0e:f3:7f: b7:3f:1f:de:c1:59:0e:0c:49:5d:37:ba:a2:a6:e9: 10:fc:45:1e:ce:08:d4:2c:23:e0:4c:a4:b9:7f:85: fa:43:e3:0c:b2:cb:4c:a3:a6:cb:b4:90:2f:20:6a: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DA:0A:4E:79:36:8D:9A:6F:DB:3A:79:09:B5:33:95:9B:B4:8E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:51:09:f6:f7:e1:6a:a5:a3:5d:44:2a:e3:4a:c9:25:98:95: 1c:7b:23:09:28:92:96:5a:7b:63:e9:2d:af:08:2b:44:4a:8c: 2b:ba:3d:67:ff:80:10:8c:95:a1:7d:72:ec:71:e9:8d:27:39: 8c:57:76:d7:52:31:5d:49:cb:c7:e2:b6:0a:a6:bf:bb:8a:cd: d8:ce:51:6e:6d:e7:23:b6:61:b8:61:34:f7:e8:7c:67:ce:61: 19:03:4d:49:1e:0c:f9:b5:29:94:1a:a0:60:d1:c0:67:95:88: 94:fb:ef:e2:51:c4:20:6a:23:ec:18:79:bf:b0:b5:67:03:b3: 52:ba:53:8a:40:59:94:7d:7b:72:34:a9:fe:85:4a:cf:02:da: 0e:be:cd:4a:d3:5a:72:92:3b:9d:6a:2a:55:fa:2c:88:f5:b6: f3:b2:45:1f:a8:f7:79:d4:18:f5:e5:e7:d3:d5:b9:e5:4c:64: d2:30:69:78:c6:b8:6c:34:26:94:4a:8a:78:27:9f:24:35:1d: bf:95:d1:82:2f:cf:b2:7d:6e:a3:b2:86:82:5a:c5:ee:fe:90: 63:7e:10:e0:e1:42:fa:33:84:51:80:07:dd:b4:74:a4:4e:9c: 71:fe:29:96:96:41:d3:d1:7b:d2:69:4a:2a:da:db:e6:b6:0b: 58:ae:09:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVWZNIUY3cwbTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGM1Yjk4ODMtNmYzZi00ZjNiLTk1NTItYjFmNDg3OTIyZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuWw+g9tWqurRXJpPyF9kz/NvMqnIGLB9Zc0 yYWecA6yl8EklGNC+OAMA/oYQ3vbaviUQvxVOakG/R6T7wAsNJv7/WhOdO9UjlHN RY9u0c564sG3As96+w86dmG2+Oo4Bu3D4u5uRW8lZDdebrh9QxAs/xbcntDVH8BY MvP5v6KWE6xdKttBD23Dn63vHdve3F2vDFzdAjBQV58AEO9GWlqwF6zmZZPjXN8z uM4esaa85fWExRdw93vdpmwpYP2OUqKn8rJ5DfBH7ky1W28O83+3Px/ewVkODEld N7qipukQ/EUezgjULCPgTKS5f4X6Q+MMsstMo6bLtJAvIGo7xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjaCk55No2ab9s6eQm1M5WbtI4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2YwOWExODMtNzUxNC0z NDZmLWEyMjMtNjA3YzBiNTNkM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlRCfb34Wqlo11EKuNKySWYlRx7IwkokpZae2PpLa8IK0RKjCu6PWf/ gBCMlaF9cuxx6Y0nOYxXdtdSMV1Jy8fitgqmv7uKzdjOUW5t5yO2YbhhNPfofGfO YRkDTUkeDPm1KZQaoGDRwGeViJT77+JRxCBqI+wYeb+wtWcDs1K6U4pAWZR9e3I0 qf6FSs8C2g6+zUrTWnKSO51qKlX6LIj1tvOyRR+o93nUGPXl59PVueVMZNIwaXjG uGw0JpRKingnnyQ1Hb+V0YIvz7J9bqOyhoJaxe7+kGN+EODhQvozhFGAB920dKRO nHH+KZaWQdPRe9JpSira2+a2C1iuCQM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:32 2025 by rpki-client