$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa File: cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa (raw, json) Hash identifier: 5ENNI2/MflA8rDToGe+kqi3BwRSxME30KYt8yVHXSHM= Subject key identifier: C1:4D:0F:3E:CA:70:FB:60:4C:C3:D9:BF:CC:43:05:1B:98:54:D4:7D Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584B1AD1963593AA92A8AB6ABA80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 9084 IP address blocks: 154.1.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:96:35:93:aa:92:a8:ab:6a:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d14bab35-1fac-4414-bdaa-415ab2a07524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:88:0d:a1:7b:a3:d0:d5:b5:e9:05:45:71:55: c5:8a:38:9b:a4:ee:02:98:ac:a5:17:9f:4b:6f:d9: 03:74:c8:1e:89:29:91:5f:6b:aa:52:fc:67:18:b8: 2e:f9:93:10:25:ff:e9:24:ed:6e:77:ae:80:22:53: cc:7d:f6:39:c3:3f:0e:9d:f1:2a:cc:c1:46:49:b2: cb:3e:8a:98:c2:78:60:d5:be:51:67:ee:17:de:ad: af:bc:15:65:d4:01:c0:be:21:2d:25:e2:a6:15:42: e6:63:94:33:d6:2b:96:eb:16:8b:29:55:d0:32:c1: 7e:4d:3c:8c:52:55:a1:4a:bb:1d:5d:d5:62:2d:2a: a9:4d:00:c6:1c:7a:a8:91:88:c6:43:f5:52:32:d1: 8a:a6:ba:ae:c9:df:28:bf:f8:4d:f8:4f:d3:6c:e9: 6e:5b:a4:8b:0d:1f:5a:e7:d8:a1:f9:16:e3:01:74: 6e:d1:1e:c0:fd:93:d9:4d:48:e6:c0:cc:4e:19:9b: 21:56:23:a7:d2:06:3c:f5:35:2f:6e:90:7d:6b:a2: 8f:15:c4:95:70:b8:5f:23:18:83:ac:28:61:f9:1c: cc:07:eb:83:20:d9:5b:01:04:e8:a9:c1:13:f8:22: fb:ea:12:ee:ad:af:dd:5c:be:cb:17:90:aa:dc:49: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:0F:3E:CA:70:FB:60:4C:C3:D9:BF:CC:43:05:1B:98:54:D4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 154.1.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:21:74:ee:94:40:9e:33:cd:00:b4:78:b3:b0:91:1f:34:a6: bf:a4:d6:5d:a1:9b:42:bf:fd:9d:4d:d3:6f:48:49:3b:17:6f: 0a:c2:16:47:00:cf:43:ef:01:94:79:39:96:31:60:74:48:f8: bd:04:37:db:7c:e1:8c:77:a6:36:a8:44:39:86:0c:97:49:70: 46:d3:58:3d:4d:e0:68:17:42:fc:9b:d6:0f:a5:fc:a9:51:cd: 7c:c7:45:41:20:29:da:42:c0:50:80:c5:6a:21:da:4c:a0:3b: 52:6a:a8:fd:c6:94:0c:d7:05:cc:b2:19:75:86:de:a4:af:6c: 49:e6:aa:83:17:43:52:3a:ce:24:b6:40:d2:fb:3e:d8:a1:b1: 93:02:82:9a:58:8b:a0:54:44:4f:8c:7c:f4:14:25:ae:d0:09: fc:f9:17:65:ad:11:46:8a:34:8c:b8:6d:ad:9c:ee:57:2d:98: 5d:70:23:72:e8:1b:0f:24:a5:97:3b:87:5b:4d:db:40:0c:fb: ba:ea:be:b5:27:06:a2:d7:c7:d9:91:63:1f:e5:9d:ac:8a:b0: 96:c7:01:8b:7e:89:da:60:07:52:f9:3f:17:0c:20:af:05:8b: 34:52:76:2c:2d:34:4c:55:43:62:4f:34:42:5b:0a:a4:7a:95: 23:22:0c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZY1k6qSqKtquoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDE0YmFiMzUtMWZhYy00NDE0LWJkYWEtNDE1YWIyYTA3NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYgNoXuj0NW16QVFcVXFijibpO4CmKylF59L b9kDdMgeiSmRX2uqUvxnGLgu+ZMQJf/pJO1ud66AIlPMffY5wz8OnfEqzMFGSbLL PoqYwnhg1b5RZ+4X3q2vvBVl1AHAviEtJeKmFULmY5Qz1iuW6xaLKVXQMsF+TTyM UlWhSrsdXdViLSqpTQDGHHqokYjGQ/VSMtGKprquyd8ov/hN+E/TbOluW6SLDR9a 59ih+RbjAXRu0R7A/ZPZTUjmwMxOGZshViOn0gY89TUvbpB9a6KPFcSVcLhfIxiD rChh+RzMB+uDINlbAQToqcET+CL76hLura/dXL7LF5Cq3EnbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFNDz7KcPtgTMPZv8xDBRuYVNR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvY2MyODAxNWMtMzhkOC0z N2NmLTlkNGYtOWZiMDZlODhmYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMhdO6UQJ4zzQC0eLOwkR80pr+k1l2hm0K//Z1N029ISTsXbwrCFkcA z0PvAZR5OZYxYHRI+L0EN9t84Yx3pjaoRDmGDJdJcEbTWD1N4GgXQvyb1g+l/KlR zXzHRUEgKdpCwFCAxWoh2kygO1JqqP3GlAzXBcyyGXWG3qSvbEnmqoMXQ1I6ziS2 QNL7PtihsZMCgppYi6BURE+MfPQUJa7QCfz5F2WtEUaKNIy4ba2c7lctmF1wI3Lo Gw8kpZc7h1tN20AM+7rqvrUnBqLXx9mRYx/lnayKsJbHAYt+idpgB1L5PxcMIK8F izRSdiwtNExVQ2JPNEJbCqR6lSMiDA8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:49:43 2025 by rpki-client