$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa File: 2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa (raw, json) Hash identifier: yGouu0tDvngrJjzBlXG89hS/w87SYynvV2eu8gTCvVA= Subject key identifier: 4A:75:71:78:AD:60:84:95:C9:86:E4:59:EA:59:03:AA:3A:F0:AE:BE Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Certificate serial: 010D0C9F4328584BA502383D48BCD4CF2D0C9A40 Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 401395 IP address blocks: 192.157.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:38:3d:48:bc:d4:cf:2d:0c:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=5ff167c0-172d-4018-bd72-0b2585c69557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:d6:6d:9c:91:6d:70:3b:9f:91:04:56:bb: 01:34:bc:e9:c6:97:25:eb:08:f2:c5:52:e3:99:cc: b4:dc:10:6c:e0:f3:bb:4c:b7:47:e5:27:ce:48:65: e0:a9:2b:bc:ee:a1:c1:74:15:7c:35:58:e2:24:27: 05:5e:2b:b3:4e:0d:14:25:e4:01:30:77:cb:0e:00: 84:b0:43:48:20:2e:28:58:e2:7c:ed:5e:9c:8f:57: 9a:32:f4:68:02:37:9a:f3:8d:e7:09:8a:27:9f:96: 69:33:17:92:c2:a6:a0:a3:37:33:11:bb:bf:50:db: 9b:d0:e0:04:9d:66:6e:60:2f:8d:c2:88:89:b2:a4: 5c:0b:0a:be:d8:15:10:ef:bb:77:11:84:fa:45:8c: 52:3d:17:af:35:7d:a6:43:91:d8:2e:a5:1d:88:c1: 4b:25:19:fb:09:87:c2:2e:8a:20:cc:6c:80:38:38: 97:7b:f7:b2:0c:1b:50:ea:ac:d0:73:5e:a9:cd:42: cf:3b:41:a8:af:91:5b:1a:45:93:fc:2b:8d:5f:9f: 47:01:18:89:73:9f:bb:89:58:af:b6:6a:d0:1f:e2: 89:f0:6a:69:46:7e:2c:ef:22:47:33:b2:95:62:10: c9:0e:3e:b2:27:47:7b:34:7d:bc:40:1a:28:37:4c: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:71:78:AD:60:84:95:C9:86:E4:59:EA:59:03:AA:3A:F0:AE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl X509v3 Authority Key Identifier: keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer sbgp-ipAddrBlock: critical IPv4: 192.157.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:89:1c:98:f8:bc:59:d5:bc:51:be:fd:d5:df:43:40:94:6b: 8c:79:fc:72:84:5b:9a:e5:d8:09:51:51:e6:f3:c1:f4:c3:f0: d1:dc:2f:1b:7c:36:5b:ba:11:c3:b0:67:cb:53:12:cf:bf:61: c3:d8:1e:54:60:fb:a8:f4:c3:06:28:9d:50:0e:3d:d6:3b:fb: c1:80:b8:32:6e:a1:8e:47:d8:5a:d5:a4:c4:f1:84:00:65:ec: 16:f5:17:e7:65:03:ce:16:81:f7:ac:6e:0b:b6:67:b7:57:cc: e7:80:49:10:13:8a:49:69:ab:68:02:e5:43:09:ef:9d:4e:2c: 0c:66:30:20:4f:45:a3:13:20:d8:47:a9:26:cf:26:d8:17:6a: 81:02:e0:69:5d:e8:20:3b:bf:d9:c8:9a:ac:0d:f3:6e:95:cb: 57:97:ff:1b:48:f9:4e:7a:0b:f5:23:e2:b3:aa:5a:65:0b:50: ff:84:df:83:49:92:a5:f7:2b:5c:01:b0:5f:bb:1b:dc:be:18: 25:3c:c1:af:1e:80:bd:52:ae:23:02:ef:8a:49:e2:ee:b0:f1: a9:d6:e8:a2:a9:8f:6a:2e:68:eb:87:8a:a5:52:cd:fd:4c:85: 92:7a:30:7f:3f:6f:1e:9a:d4:97:56:19:35:15:c4:fe:b0:a6: 78:2c:1f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjg9SLzUzy0MmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm MWE0MB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NWZmMTY3YzAtMTcyZC00MDE4LWJkNzItMGIyNTg1YzY5NTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWzWbZyRbXA7n5EEVrsBNLzpxpcl6wjyxVLj mcy03BBs4PO7TLdH5SfOSGXgqSu87qHBdBV8NVjiJCcFXiuzTg0UJeQBMHfLDgCE sENIIC4oWOJ87V6cj1eaMvRoAjea843nCYonn5ZpMxeSwqagozczEbu/UNub0OAE nWZuYC+NwoiJsqRcCwq+2BUQ77t3EYT6RYxSPRevNX2mQ5HYLqUdiMFLJRn7CYfC LoogzGyAODiXe/eyDBtQ6qzQc16pzULPO0Gor5FbGkWT/CuNX59HARiJc5+7iViv tmrQH+KJ8GppRn4s7yJHM7KVYhDJDj6yJ0d7NH28QBooN0zOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp1cXitYISVyYbkWepZA6o68K6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvMmQ1M2QzYWYtZTc3ZS0z YmQxLWJkOTYtYTU0MzExYmE1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx YjNjMmYxYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaJHJj4vFnVvFG+/dXfQ0CUa4x5/HKEW5rl2AlRUebzwfTD8NHcLxt8 Nlu6EcOwZ8tTEs+/YcPYHlRg+6j0wwYonVAOPdY7+8GAuDJuoY5H2FrVpMTxhABl 7Bb1F+dlA84Wgfesbgu2Z7dXzOeASRATiklpq2gC5UMJ751OLAxmMCBPRaMTINhH qSbPJtgXaoEC4Gld6CA7v9nImqwN826Vy1eX/xtI+U56C/Uj4rOqWmULUP+E34NJ kqX3K1wBsF+7G9y+GCU8wa8egL1SriMC74pJ4u6w8anW6KKpj2ouaOuHiqVSzf1M hZJ6MH8/bx6a1JdWGTUVxP6wpngsH5M= -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:42 2025 by rpki-client