$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa File: df5adfc5-c427-36a1-9353-c23d1976c935.roa (raw, json) Hash identifier: 1leQQlVAShPYw9Z+6IQWMNpFpMf+o/JnP6/544R1UJE= Subject key identifier: 5D:0F:6A:48:64:44:41:D5:8B:17:B4:F7:2B:A6:D5:73:6E:6D:77:7A Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Certificate serial: 010D0C9F4328584B9E07C63D7AA2AB9581B81980 Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 10310 IP address blocks: 198.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c6:3d:7a:a2:ab:95:81:b8:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=386c44cf-bb49-4bd9-ac54-6ea9f10c1e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:75:bc:ca:fb:b8:e1:59:c5:d2:07:a6:9f: e6:0f:ad:ee:0c:88:e0:09:79:3b:6d:74:20:c6:17: 5a:42:d9:e0:db:10:ec:a0:e6:c7:a9:79:d0:f1:b2: 7c:2d:97:ce:3c:78:97:c7:5f:1d:19:89:b9:d8:c2: 30:c0:6c:a4:db:3f:90:8f:ee:9e:ac:65:7c:67:8b: d1:f7:a3:7e:0b:ed:95:31:25:3b:49:a8:24:55:d3: cd:a2:ac:06:b6:22:1e:f1:2a:bb:ec:b2:bf:ca:3c: ef:9a:c0:c1:93:a7:7a:ab:63:66:49:73:95:65:e4: 7f:db:d4:18:d5:d6:4b:6a:76:97:cd:1a:95:48:43: 99:6e:7b:4f:70:ec:2e:64:00:6c:e5:20:c8:40:38: 56:bb:cc:98:55:77:9a:76:01:97:c9:90:0b:af:f6: d4:8f:56:0f:5a:27:96:a4:99:a5:bb:ed:0d:24:b0: b6:a8:8a:b4:bd:7a:8b:28:61:5e:88:eb:73:2f:fa: a2:26:b0:96:b4:4a:cf:0c:10:70:b5:5c:fb:0c:23: d2:ed:64:f7:b9:37:28:84:e0:32:56:26:22:e8:44: 75:ff:ed:2e:a6:c5:18:e0:b3:e0:5f:5a:8d:80:ec: ad:63:98:62:d1:66:e3:25:29:d3:30:21:0e:8e:03: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0F:6A:48:64:44:41:D5:8B:17:B4:F7:2B:A6:D5:73:6E:6D:77:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl X509v3 Authority Key Identifier: keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer sbgp-ipAddrBlock: critical IPv4: 198.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c1:50:a9:b5:ff:49:8d:3f:12:0a:88:62:5b:c4:22:6e:38: 55:d5:ae:01:6b:48:f9:e5:ae:96:88:d0:bb:95:1b:e9:0a:6b: 2e:15:9d:f2:98:d2:b9:22:5a:65:21:2a:1a:46:e1:96:b3:78: 98:1a:0d:6a:46:82:66:29:21:58:3c:c8:d4:61:12:d5:a3:f8: d7:86:ed:7b:36:4a:a9:ab:3a:59:c9:d6:58:ae:73:09:c9:71: 87:cd:60:13:bf:bc:e6:57:5d:7a:12:84:b7:63:bb:7e:09:0d: 81:74:8f:b6:99:44:24:44:8e:f7:59:cf:7c:69:3b:a2:8d:3b: 6e:91:ff:0e:7d:ea:a0:67:70:15:0d:e6:44:67:c9:a9:e7:d2: 4b:34:bf:1c:f1:04:4b:71:ac:b0:69:fa:37:fc:44:57:ef:de: c6:50:9a:d1:09:38:12:4f:a3:2b:d5:a6:23:fb:d7:d5:92:6d: 50:d6:e3:5b:4b:e1:70:ce:95:82:d1:e9:4c:a7:bd:97:c8:cd: 17:c6:71:c9:29:f4:40:be:f3:9b:f0:d0:25:ec:d2:3b:31:0e: f0:4d:ba:dc:2f:16:4c:fe:0e:0f:b5:2a:d0:32:22:2f:e7:66: 09:89:b6:1d:1b:1d:33:20:4d:f4:c3:a5:1b:60:53:54:90:31: 48:cd:6b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8Y9eqKrlYG4GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5 NDgxMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Mzg2YzQ0Y2YtYmI0OS00YmQ5LWFjNTQtNmVhOWYxMGMxZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqd1vMr7uOFZxdIHpp/mD63uDIjgCXk7bXQg xhdaQtng2xDsoObHqXnQ8bJ8LZfOPHiXx18dGYm52MIwwGyk2z+Qj+6erGV8Z4vR 96N+C+2VMSU7SagkVdPNoqwGtiIe8Sq77LK/yjzvmsDBk6d6q2NmSXOVZeR/29QY 1dZLanaXzRqVSEOZbntPcOwuZABs5SDIQDhWu8yYVXeadgGXyZALr/bUj1YPWieW pJmlu+0NJLC2qIq0vXqLKGFeiOtzL/qiJrCWtErPDBBwtVz7DCPS7WT3uTcohOAy ViYi6ER1/+0upsUY4LPgX1qNgOytY5hi0WbjJSnTMCEOjgOcUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0PakhkREHVixe09yum1XNubXd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1 ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvZGY1YWRmYzUtYzQyNy0z NmExLTkzNTMtYzIzZDE5NzZjOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5 ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbBUKm1/0mNPxIKiGJbxCJuOFXVrgFrSPnlrpaI0LuVG+kKay4VnfKY 0rkiWmUhKhpG4ZazeJgaDWpGgmYpIVg8yNRhEtWj+NeG7Xs2SqmrOlnJ1liucwnJ cYfNYBO/vOZXXXoShLdju34JDYF0j7aZRCREjvdZz3xpO6KNO26R/w596qBncBUN 5kRnyann0ks0vxzxBEtxrLBp+jf8RFfv3sZQmtEJOBJPoyvVpiP719WSbVDW41tL 4XDOlYLR6UynvZfIzRfGcckp9EC+85vw0CXs0jsxDvBNutwvFkz+Dg+1KtAyIi/n ZgmJth0bHTMgTfTDpRtgU1SQMUjNa1Y= -----END CERTIFICATE-----Generated at Wed Nov 5 07:34:59 2025 by rpki-client