$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa File: 0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa (raw, json) Hash identifier: bPsVHPDo6lEhQAvF0ujoATZqwkMDJbue8ro2NUXiS7I= Subject key identifier: E6:E5:D6:47:39:E7:D2:81:9E:FD:22:42:52:BE:F0:DC:61:AA:94:D8 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584B540C69DBA31479036F4A4F60 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 192.131.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:69:db:a3:14:79:03:6f:4a:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=dd1e7c55-92e5-4f6a-a3f0-6109264cc732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:3c:e3:9e:fc:34:16:23:95:63:e4:16:ce: 36:58:fa:22:0c:e3:cd:c8:7c:6e:10:98:80:70:a5: 2f:8d:04:f5:b6:ba:76:f8:d8:95:0e:8f:c1:2a:6c: 3f:63:a9:e9:99:d6:41:26:4b:93:f6:82:07:e6:06: bd:63:12:5c:bc:b8:26:a1:45:05:63:41:cc:36:45: 84:03:a3:4b:c5:41:50:4c:70:f9:34:c2:45:48:40: fc:c0:51:72:de:e3:32:4d:b9:38:c3:3d:cb:7f:ba: ee:62:8f:59:24:da:da:c7:1f:60:b9:ed:6b:20:a5: 8d:ee:60:ae:13:27:d3:ae:99:61:fb:9f:cc:bd:eb: 17:f6:f0:02:ba:38:f8:3e:14:8e:4b:dd:e6:8c:53: fe:f2:1d:21:7a:3f:cf:b1:f9:e2:92:0c:60:74:2e: c5:cf:b4:90:5b:66:19:92:94:9d:bf:7a:c8:53:1e: 0e:7e:2b:d2:0f:20:45:11:64:96:76:35:34:29:9c: 92:af:27:9e:17:86:bb:84:fb:a0:a1:52:2e:c3:57: 25:c6:1e:7a:81:7b:e8:10:ce:ed:3d:7c:b9:08:f7: c0:c3:2f:42:23:e8:9d:b0:56:55:53:9d:9b:56:77: 32:36:2e:0a:bc:12:fb:8b:9d:c9:bb:1d:fe:c9:79: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E5:D6:47:39:E7:D2:81:9E:FD:22:42:52:BE:F0:DC:61:AA:94:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 192.131.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:05:7f:6c:86:78:19:4b:93:2d:cf:c3:8c:72:24:db:6a:01: 91:b8:fb:b3:a9:3b:2f:a6:5d:0c:4c:ea:77:a0:cb:e2:cb:fe: 12:a1:a5:57:31:df:3f:35:bd:2e:a4:85:1c:d6:b3:10:b1:80: ae:4f:f1:df:af:64:ca:a1:12:c0:ab:c9:eb:6e:7f:3c:3e:89: b5:32:c9:43:08:36:49:23:75:12:47:81:98:bd:d8:6d:0d:7c: 6b:d1:b1:de:43:90:7a:4c:1a:99:f4:2c:c8:4d:a5:5d:58:eb: d6:3a:0f:2e:a4:2c:c8:02:18:51:3b:d5:b1:3c:a6:11:77:3d: 65:54:44:cb:6f:69:89:1e:f8:7b:41:ef:bb:47:66:55:8f:25: d8:12:3e:69:45:5b:a2:9f:7a:cb:95:85:2d:ca:5f:8e:4e:d1: 1e:f9:06:cb:a7:02:a5:f5:83:b4:e4:48:11:50:fd:1b:99:1f: 0a:db:dd:b2:6b:e0:c8:6e:88:36:bc:f4:a9:85:04:c5:b1:4c: 5c:d4:57:37:76:cc:c8:d2:b4:f9:a5:17:e2:4c:63:1d:e2:ea: 65:41:e8:7c:60:7a:d0:4c:54:df:48:69:29:22:c3:ea:67:c2: fe:fb:43:b7:d9:64:26:b2:80:e3:69:04:8b:ee:c0:57:76:6d: 2c:79:3f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGnboxR5A29KT2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQxZTdjNTUtOTJlNS00ZjZhLWEzZjAtNjEwOTI2NGNjNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhss84578NBYjlWPkFs42WPoiDOPNyHxuEJiA cKUvjQT1trp2+NiVDo/BKmw/Y6npmdZBJkuT9oIH5ga9YxJcvLgmoUUFY0HMNkWE A6NLxUFQTHD5NMJFSED8wFFy3uMyTbk4wz3Lf7ruYo9ZJNraxx9gue1rIKWN7mCu EyfTrplh+5/MvesX9vACujj4PhSOS93mjFP+8h0hej/PsfnikgxgdC7Fz7SQW2YZ kpSdv3rIUx4OfivSDyBFEWSWdjU0KZySryeeF4a7hPugoVIuw1clxh56gXvoEM7t PXy5CPfAwy9CI+idsFZVU52bVncyNi4KvBL7i53Jux3+yXmPVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObl1kc559KBnv0iQlK+8NxhqpTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvMGRiNDkzOTktMGVkYS0z OGNmLTg3Y2QtMDZkY2Q0YzFiYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIFf2yGeBlLky3Pw4xyJNtqAZG4+7OpOy+mXQxM6negy+LL/hKhpVcx 3z81vS6khRzWsxCxgK5P8d+vZMqhEsCryetufzw+ibUyyUMINkkjdRJHgZi92G0N fGvRsd5DkHpMGpn0LMhNpV1Y69Y6Dy6kLMgCGFE71bE8phF3PWVURMtvaYke+HtB 77tHZlWPJdgSPmlFW6KfesuVhS3KX45O0R75BsunAqX1g7TkSBFQ/RuZHwrb3bJr 4MhuiDa89KmFBMWxTFzUVzd2zMjStPmlF+JMYx3i6mVB6HxgetBMVN9IaSkiw+pn wv77Q7fZZCaygONpBIvuwFd2bSx5P+k= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:48 2025 by rpki-client