$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json) Hash identifier: WGL1Ssikwc3faVEsPuAhYPYaOYvrhvLkVNKCSli+0k8= Subject key identifier: 56:71:9F:AD:11:0D:D6:48:8B:C8:92:63:54:10:DD:F0:4A:4D:11:9C Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584BA9326B0465551018440A8340 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 53991 IP address blocks: 164.152.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6b:04:65:55:10:18:44:0a:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=91fdc418-2ace-4b7b-9b30-1d8090d2b285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:e8:8a:17:a0:28:74:ef:aa:9a:14:79:e9: 97:0c:ae:c8:76:70:16:56:75:54:1f:85:3a:30:56: a2:60:25:24:2f:9e:16:b6:50:d5:b2:39:25:ce:7d: 2e:e1:85:5f:dc:d0:57:75:8d:fa:e6:a1:eb:c4:30: 52:1e:ea:3c:66:8c:f7:1e:23:49:c3:6b:53:3f:6f: 6b:28:fd:85:54:ff:9b:26:c7:1a:db:35:eb:07:66: 49:ea:8a:1b:7f:df:31:f8:73:f5:88:83:67:51:0a: 56:45:04:1b:a5:06:30:4e:6e:10:6f:63:ae:b4:33: e2:74:ea:73:17:b6:a3:c2:c3:e0:b9:b4:7f:04:15: 38:14:21:0e:9d:63:a8:e4:6c:7d:56:67:47:32:b2: ab:ae:34:be:46:bc:0e:4d:80:a3:aa:7e:4a:89:72: 14:75:02:7c:8a:6c:78:d8:a1:7b:71:64:f8:94:c6: 96:ae:ee:59:be:d1:b8:55:08:0a:a0:28:82:c4:07: 2f:04:66:a0:b0:e2:07:85:34:bf:3b:22:b7:8e:d5: 0e:5a:73:95:55:6d:eb:60:20:70:70:dc:4d:75:82: c8:b7:ca:9b:ed:53:2b:90:06:4a:13:fb:79:05:f7: 50:af:cf:c1:bd:d5:3f:dd:da:bf:f5:7a:6f:7d:b3: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:9F:AD:11:0D:D6:48:8B:C8:92:63:54:10:DD:F0:4A:4D:11:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:eb:f6:0c:e7:97:b7:16:bf:07:b7:fa:76:35:8d:50:32:87: 03:51:61:60:9a:88:a8:88:37:42:ae:0b:0a:18:2c:49:5e:7e: d8:66:ac:90:c9:9d:2d:72:e1:72:7e:0c:f1:1d:e5:f2:f9:42: da:8c:21:a1:c0:7c:1a:d5:80:37:7c:24:fc:37:bc:a0:be:be: 3e:16:99:ee:6d:13:34:a1:e0:8e:20:ee:10:7f:a5:7a:9c:68: 1c:73:79:f6:e5:c4:08:b4:07:c7:96:27:27:87:0e:22:12:7a: 71:dd:ea:f0:3e:13:fe:65:1d:98:87:54:43:e1:b1:27:f4:3a: b2:29:a4:b3:65:3e:90:04:c3:37:3d:01:25:92:e9:fc:23:cf: 0c:15:b6:45:49:d1:c2:ba:6e:4f:99:2f:65:1d:04:14:bf:eb: 4b:59:9b:31:00:8c:08:9d:0d:2b:b0:48:34:9d:44:58:dc:21: c3:c1:ae:29:57:92:88:b8:17:22:61:be:03:a0:69:22:37:64: 43:5b:e8:8e:00:27:03:03:f4:35:83:49:65:5f:81:5c:7d:c5: 53:ad:e4:66:b5:dc:e4:af:57:ce:dd:c0:15:97:1b:22:19:48: da:a3:9d:e6:65:3e:a2:30:5b:db:12:51:95:24:09:44:3f:4a: 73:c9:3f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmsEZVUQGEQKg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTFmZGM0MTgtMmFjZS00YjdiLTliMzAtMWQ4MDkwZDJiMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3voihegKHTvqpoUeemXDK7IdnAWVnVUH4U6 MFaiYCUkL54WtlDVsjklzn0u4YVf3NBXdY365qHrxDBSHuo8Zoz3HiNJw2tTP29r KP2FVP+bJsca2zXrB2ZJ6oobf98x+HP1iINnUQpWRQQbpQYwTm4Qb2OutDPidOpz F7ajwsPgubR/BBU4FCEOnWOo5Gx9VmdHMrKrrjS+RrwOTYCjqn5KiXIUdQJ8imx4 2KF7cWT4lMaWru5ZvtG4VQgKoCiCxAcvBGagsOIHhTS/OyK3jtUOWnOVVW3rYCBw cNxNdYLIt8qb7VMrkAZKE/t5BfdQr8/BvdU/3dq/9XpvfbOZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZxn60RDdZIi8iSY1QQ3fBKTRGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMjk0M2JmYzQtYTg0OS0z MTIzLTg0ZjYtOTlkNmNlYjc5ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfr9gznl7cWvwe3+nY1jVAyhwNRYWCaiKiIN0KuCwoYLElefthmrJDJ nS1y4XJ+DPEd5fL5QtqMIaHAfBrVgDd8JPw3vKC+vj4Wme5tEzSh4I4g7hB/pXqc aBxzefblxAi0B8eWJyeHDiISenHd6vA+E/5lHZiHVEPhsSf0OrIppLNlPpAEwzc9 ASWS6fwjzwwVtkVJ0cK6bk+ZL2UdBBS/60tZmzEAjAidDSuwSDSdRFjcIcPBrilX koi4FyJhvgOgaSI3ZENb6I4AJwMD9DWDSWVfgVx9xVOt5Ga13OSvV87dwBWXGyIZ SNqjneZlPqIwW9sSUZUkCUQ/SnPJP1g= -----END CERTIFICATE-----Generated at Wed Nov 5 09:11:28 2025 by rpki-client