$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa File: c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa (raw, json) Hash identifier: q7qQOo6fAWk2w/HD8pTXu+1ZqJtKOU4KPrkhRm18/8Y= Subject key identifier: B9:12:D4:32:DD:28:A3:7B:09:8A:81:B1:47:23:0E:64:38:4E:1B:70 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C95398F0EF85E333F8080 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 167.94.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:95:39:8f:0e:f8:5e:33:3f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=ff396a87-5261-488b-aa9a-c6a93aa9b2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:49:87:ff:c1:e5:01:cb:87:07:44:47:bf: bc:2b:16:75:f7:51:41:9c:f2:cd:f8:3f:43:e2:96: d2:0f:b0:4e:4e:b0:6b:9e:63:78:5f:af:68:7f:97: 1d:e0:42:de:23:a6:8c:9b:77:4c:3b:f1:c4:dd:ab: 7f:ee:87:8f:37:ea:f8:bf:93:ec:b2:9c:d9:9e:4b: 63:5d:ff:42:90:84:b9:cb:90:c5:73:bf:6a:be:bc: 99:56:ab:75:2b:6e:e7:96:51:6a:ff:a8:69:cd:d8: 43:6b:e2:a7:27:ee:6f:df:51:ad:98:e5:d7:80:5c: 29:b6:9b:57:c1:82:52:08:f7:79:0a:50:de:bc:9d: 95:95:33:87:07:48:e5:ca:02:c9:66:4e:45:2e:cb: be:ae:e1:06:d9:9f:9c:4e:6f:30:09:d5:f2:0f:1b: ac:12:eb:07:5c:0a:ee:da:6f:fd:9d:06:d8:f7:25: 58:46:48:30:68:ea:32:f6:72:51:33:89:3b:f7:41: ac:e2:44:15:f2:0a:ed:f3:61:09:f2:4c:a2:0a:69: 2e:3c:a9:6d:85:d6:0a:9b:37:95:be:9b:c9:f2:a7: b3:09:8d:f5:c0:df:71:93:85:26:79:a0:5d:fe:b7: a2:1d:d6:14:4a:7e:88:1d:15:a6:1d:30:f8:14:8f: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:D4:32:DD:28:A3:7B:09:8A:81:B1:47:23:0E:64:38:4E:1B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:57:84:35:13:41:f9:33:40:3a:cb:d8:c1:ac:c0:4b:97:54: f6:49:af:af:33:c0:be:5b:27:26:9c:1c:32:d5:63:0a:c9:b9: 29:d7:32:95:79:4d:4a:d1:76:e5:08:5f:49:38:8c:6a:ee:c3: d8:a1:85:fd:85:83:2c:8b:4f:15:05:0b:5a:26:db:e1:5b:c6: 3c:44:34:66:40:02:c7:85:0d:d9:ec:29:1a:b5:f0:14:31:41: 2c:be:9c:cb:f4:4b:97:13:6a:bd:5c:32:fc:71:e3:33:7e:cc: f4:ee:89:65:7f:ad:f3:e4:07:09:9a:87:b4:95:8e:e5:74:16: b3:6f:57:00:2e:be:44:16:25:59:c6:d2:03:93:4d:04:63:cd: 55:0e:04:b6:2b:91:c9:b4:07:b6:10:f9:7a:53:79:18:b9:ea: aa:16:a4:bc:87:c6:76:c2:17:3c:71:a5:84:0e:f9:48:93:08: ce:51:79:6a:c5:4b:74:08:3d:87:72:5c:27:fc:4b:22:b0:07: db:10:a5:d7:ed:56:d0:b0:47:78:e7:c8:0f:3b:c4:85:03:10: 3d:e6:8c:ab:ce:af:50:af:d5:5a:15:73:51:1c:61:7f:de:56: 79:d5:35:f6:92:a9:7c:73:4e:ad:8c:f0:25:7c:dc:af:cd:67: 9f:05:dd:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJU5jw74XjM/gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZmYzOTZhODctNTI2MS00ODhiLWFhOWEtYzZhOTNhYTliMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJJh//B5QHLhwdER7+8KxZ191FBnPLN+D9D 4pbSD7BOTrBrnmN4X69of5cd4ELeI6aMm3dMO/HE3at/7oePN+r4v5PsspzZnktj Xf9CkIS5y5DFc79qvryZVqt1K27nllFq/6hpzdhDa+KnJ+5v31GtmOXXgFwptptX wYJSCPd5ClDevJ2VlTOHB0jlygLJZk5FLsu+ruEG2Z+cTm8wCdXyDxusEusHXAru 2m/9nQbY9yVYRkgwaOoy9nJRM4k790Gs4kQV8grt82EJ8kyiCmkuPKlthdYKmzeV vpvJ8qezCY31wN9xk4UmeaBd/reiHdYUSn6IHRWmHTD4FI/1MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkS1DLdKKN7CYqBsUcjDmQ4ThtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYzA2YjFlMTMtMWU1Yy0z N2FjLTkyNDMtY2FkOGEyODcxZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABXhDUTQfkzQDrL2MGswEuXVPZJr68zwL5bJyacHDLVYwrJuSnXMpV5 TUrRduUIX0k4jGruw9ihhf2FgyyLTxUFC1om2+FbxjxENGZAAseFDdnsKRq18BQx QSy+nMv0S5cTar1cMvxx4zN+zPTuiWV/rfPkBwmah7SVjuV0FrNvVwAuvkQWJVnG 0gOTTQRjzVUOBLYrkcm0B7YQ+XpTeRi56qoWpLyHxnbCFzxxpYQO+UiTCM5ReWrF S3QIPYdyXCf8SyKwB9sQpdftVtCwR3jnyA87xIUDED3mjKvOr1Cv1VoVc1EcYX/e VnnVNfaSqXxzTq2M8CV83K/NZ58F3UU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:51:06 2025 by rpki-client