$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa File: 8d665762-0465-323b-b950-c65d3069d14c.roa (raw, json) Hash identifier: mJc52yCNc4J8vGzAJRcSsyP/r/AiUwiz05+pCKliB6c= Subject key identifier: 84:27:BE:ED:3B:F7:44:49:C1:93:50:7F:3C:76:DD:B7:D6:E9:D1:74 Certificate issuer: /CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Certificate serial: 010D0C9F4328584B7DECB13AD3739846A9033D40 Authority key identifier: 6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 28959 IP address blocks: 158.51.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b1:3a:d3:73:98:46:a9:03:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=28a99265-51ad-4332-b586-7e26e330056e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:93:89:80:ea:c3:d7:ef:13:61:06:a7:1a: d6:0e:0e:8e:f0:55:71:2b:a4:64:81:8d:75:ab:27: d0:ce:dd:dd:e1:27:05:e6:34:50:fc:c4:de:d1:02: b6:49:f1:cd:a0:15:e1:e9:35:f8:65:8e:62:f5:66: ac:19:34:57:3a:d2:f3:90:80:01:d8:c3:ac:ff:77: a8:9b:4b:17:87:eb:36:1f:ca:d0:ca:b8:2c:19:5c: f6:38:c7:64:87:00:e0:86:0b:87:77:9e:73:5f:6b: 42:10:92:56:7b:52:b9:45:3d:c4:01:de:c8:15:cc: 65:4e:f5:c1:50:a2:42:6b:c2:b2:48:9e:c0:c2:14: 26:d2:9b:e6:14:85:9a:5f:d8:2a:9a:05:98:c7:19: ad:b1:87:13:9f:4c:f7:4f:6f:66:c0:d3:3d:a3:35: c9:88:27:53:57:c9:bd:a2:5f:86:f8:8a:47:f7:00: 93:32:71:0a:89:48:38:fa:ff:c8:69:90:5b:3b:9c: c3:bc:77:ba:79:cd:86:c0:f4:39:69:ff:8f:cf:1a: 10:f5:b9:04:61:8f:cc:25:45:02:94:d8:07:52:c9: b5:fa:d2:9b:51:ce:18:fd:23:1d:8f:56:c8:d6:2a: 63:96:c8:12:d7:97:ad:99:54:fb:81:ba:b4:88:ac: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:27:BE:ED:3B:F7:44:49:C1:93:50:7F:3C:76:DD:B7:D6:E9:D1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl X509v3 Authority Key Identifier: keyid:6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer sbgp-ipAddrBlock: critical IPv4: 158.51.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:82:f0:44:f6:cc:9b:c8:6b:1d:41:ff:f6:03:d2:c9:a3:5d: 19:17:d1:35:97:25:97:c6:e4:a2:7a:c5:2a:f8:86:c7:a8:b0: c7:27:64:34:7e:6c:fc:80:62:02:c9:d0:32:95:78:83:1d:6f: d0:7f:29:48:84:02:02:b4:52:fc:96:20:07:72:74:92:f3:a9: 61:40:9d:a4:95:c3:31:b8:f8:09:c9:77:1c:56:42:6f:81:75: 4b:b2:4c:73:37:a5:84:7b:12:e7:57:d1:9b:ea:ba:a9:26:e3: 08:c5:92:53:05:1c:f6:e7:10:a6:45:42:d1:fb:fd:bc:c8:08: 3c:69:4b:d8:2a:bf:1c:7d:aa:bc:cf:d8:d1:b1:77:a2:7c:71: fa:df:0a:63:73:4f:27:d1:d9:ed:ec:b2:b5:e1:a1:a2:02:1f: b8:fd:be:32:a9:dc:38:b5:a4:c9:99:0a:61:6a:14:a1:0f:da: 7b:88:ff:03:db:9f:79:ec:5b:86:f8:5d:c1:00:b9:fc:ca:de: cf:36:ac:f3:00:c9:01:c3:d2:b9:47:42:56:ec:71:2e:3e:52: 9a:96:00:79:e1:d6:39:55:4e:12:f8:0f:4f:12:6c:ab:b7:b7: 20:e7:ac:7e:0e:5d:9a:bc:8c:39:88:23:87:83:aa:0e:70:8a: 49:25:41:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LE603OYRqkDPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRmM2RmNDItMDQwZS00ODU2LWIzZDYtN2MyZWJlMWUx ZDk0MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MjhhOTkyNjUtNTFhZC00MzMyLWI1ODYtN2UyNmUzMzAwNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQiTiYDqw9fvE2EGpxrWDg6O8FVxK6RkgY11 qyfQzt3d4ScF5jRQ/MTe0QK2SfHNoBXh6TX4ZY5i9WasGTRXOtLzkIAB2MOs/3eo m0sXh+s2H8rQyrgsGVz2OMdkhwDghguHd55zX2tCEJJWe1K5RT3EAd7IFcxlTvXB UKJCa8KySJ7AwhQm0pvmFIWaX9gqmgWYxxmtsYcTn0z3T29mwNM9ozXJiCdTV8m9 ol+G+IpH9wCTMnEKiUg4+v/IaZBbO5zDvHe6ec2GwPQ5af+PzxoQ9bkEYY/MJUUC lNgHUsm1+tKbUc4Y/SMdj1bI1ipjlsgS15etmVT7gbq0iKyVqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQnvu0790RJwZNQfzx23bfW6dF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYz ZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJlYmUxZTFkOTQvOGQ2NjU3NjItMDQ2NS0z MjNiLWI5NTAtYzY1ZDMwNjlkMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmRmM2RmNDItMDQwZS00ODU2LWIz ZDYtN2MyZWJlMWUxZDk0L2ZkZjNkZjQyLTA0MGUtNDg1Ni1iM2Q2LTdjMmViZTFl MWQ5NC5jcmwwHwYDVR0jBBgwFoAUbAobALw/CS8tFQXCB+UrueYwYTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYzZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJl YmUxZTFkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2C8ET2zJvIax1B//YD0smjXRkX0TWXJZfG5KJ6xSr4hseosMcnZDR+ bPyAYgLJ0DKVeIMdb9B/KUiEAgK0UvyWIAdydJLzqWFAnaSVwzG4+AnJdxxWQm+B dUuyTHM3pYR7EudX0Zvquqkm4wjFklMFHPbnEKZFQtH7/bzICDxpS9gqvxx9qrzP 2NGxd6J8cfrfCmNzTyfR2e3ssrXhoaICH7j9vjKp3Di1pMmZCmFqFKEP2nuI/wPb n3nsW4b4XcEAufzK3s82rPMAyQHD0rlHQlbscS4+UpqWAHnh1jlVThL4D08SbKu3 tyDnrH4OXZq8jDmII4eDqg5wikklQS4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:04 2025 by rpki-client