$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/cb6b13a4-533f-3f52-bc18-86463fde6494.roa File: cb6b13a4-533f-3f52-bc18-86463fde6494.roa (raw, json) Hash identifier: IuhvBOzZUaTgU++ESAmzPtaR7G7nVjJs209zBFu8oYE= Subject key identifier: A8:6F:2B:5D:AE:F5:DB:E4:23:BB:B0:56:43:E6:4D:CB:AE:80:51:8A Certificate issuer: /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea Certificate serial: 010D0C9F4328584BABFD034B29BEAFF05CBF4E80 Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/cb6b13a4-533f-3f52-bc18-86463fde6494.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 22768 IP address blocks: 152.160.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:03:4b:29:be:af:f0:5c:bf:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f6a223b8-ccf5-4cda-a444-4502af0463da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:97:40:3f:d3:0e:87:99:44:82:5e:67:30: 1d:ab:2c:83:a2:87:6b:91:73:61:fd:8f:f6:65:fc: 1d:19:2a:0f:c0:26:4e:32:88:d1:13:f6:6b:60:79: 2a:10:25:9d:82:26:4f:26:47:5e:58:92:2c:e2:85: 93:d9:c3:02:a2:84:ee:f9:ba:d3:8c:38:81:f2:da: ca:8d:4b:21:a4:ef:6a:32:e0:6d:77:05:0f:c5:b8: 6e:48:61:15:a9:56:38:ad:a1:37:0d:98:8b:ac:bf: ee:69:1d:57:60:4b:e0:55:86:1b:83:74:0e:4f:ec: fe:85:ed:15:b8:06:bb:c1:3f:22:e7:19:76:48:b2: 7b:98:6e:6b:34:7c:68:19:6f:c4:2d:5a:dc:35:67: e2:60:b9:2a:f8:7e:68:e8:f8:76:da:2b:2d:c1:39: 41:f3:02:18:3b:e9:6a:bf:1a:40:7d:9d:05:42:48: ff:bd:75:b1:0f:89:ea:18:d6:57:3f:93:0e:47:d1: 5f:df:a4:e2:ca:6a:10:10:04:f8:10:f0:45:f4:87: b5:10:b1:b9:6a:95:a4:b0:e7:f9:94:be:d7:45:ff: 11:1a:46:ec:52:d3:ad:d6:0e:be:f6:a0:b7:96:0b: 4f:62:4f:73:89:11:6d:2f:04:a2:56:b0:74:50:b2: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:2B:5D:AE:F5:DB:E4:23:BB:B0:56:43:E6:4D:CB:AE:80:51:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/cb6b13a4-533f-3f52-bc18-86463fde6494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl X509v3 Authority Key Identifier: keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer sbgp-ipAddrBlock: critical IPv4: 152.160.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:2f:17:04:27:de:64:c8:79:e1:d7:38:a6:f7:8d:9a:7d:b3: f3:99:a4:ff:27:49:6e:bd:04:67:a2:ac:f8:ee:16:65:8f:22: 84:db:5b:a8:01:d2:62:09:c2:24:21:90:42:0c:e8:e6:e5:a0: 67:34:fa:ea:3f:b6:59:33:c4:11:cf:2b:3e:e0:77:3d:2e:59: ea:1a:a2:19:0f:3e:66:31:1d:dc:ec:a5:73:55:c9:fe:bf:05: 02:9e:8a:d6:78:bd:84:9e:57:58:49:95:32:cd:a0:2f:30:4a: 98:d4:63:e2:8f:e4:3b:13:49:3d:31:a8:6f:bc:fa:bd:6b:7c: b9:e4:f0:07:c7:e5:0a:9c:1d:50:d0:85:b1:3e:68:a7:d8:22: 4a:cf:c8:07:6e:e1:5d:97:c9:3e:24:fd:d4:4f:82:0e:ce:e3: 1f:10:48:ae:de:cc:bd:3f:f0:6c:48:8d:a8:32:bd:2e:3e:a7: 59:5f:21:8b:57:5a:70:e8:83:de:47:83:13:84:1e:ea:f7:b4: b0:ff:57:b3:e8:54:b4:d4:6a:02:e3:c2:d9:9e:e9:f3:92:19: 52:cf:f0:ff:a2:d8:33:ee:cf:5d:5f:d7:53:be:3b:a3:d3:a2: 59:6c:b3:82:90:ff:ea:9b:b7:1e:51:60:90:6e:71:26:ab:50: 67:75:7c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QNLKb6v8Fy/ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiY2E1NDYtY2E4MS00OGY1LWJkZDQtOGMxMTFiYTUy M2VhMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjZhMjIzYjgtY2NmNS00Y2RhLWE0NDQtNDUwMmFmMDQ2M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eCXQD/TDoeZRIJeZzAdqyyDoodrkXNh/Y/2 ZfwdGSoPwCZOMojRE/ZrYHkqECWdgiZPJkdeWJIs4oWT2cMCooTu+brTjDiB8trK jUshpO9qMuBtdwUPxbhuSGEVqVY4raE3DZiLrL/uaR1XYEvgVYYbg3QOT+z+he0V uAa7wT8i5xl2SLJ7mG5rNHxoGW/ELVrcNWfiYLkq+H5o6Ph22istwTlB8wIYO+lq vxpAfZ0FQkj/vXWxD4nqGNZXP5MOR9Ff36TiymoQEAT4EPBF9Ie1ELG5apWksOf5 lL7XRf8RGkbsUtOt1g6+9qC3lgtPYk9ziRFtLwSiVrB0ULKyEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhvK12u9dvkI7uwVkPmTcuugFGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJj YTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzExMWJhNTIzZWEvY2I2YjEzYTQtNTMzZi0z ZjUyLWJjMTgtODY0NjNmZGU2NDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2FiY2E1NDYtY2E4MS00OGY1LWJk ZDQtOGMxMTFiYTUyM2VhLzNhYmNhNTQ2LWNhODEtNDhmNS1iZGQ0LThjMTExYmE1 MjNlYS5jcmwwHwYDVR0jBBgwFoAUoYEZY9Vg9XWnqQ30oiBjUGbpybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYWJjYTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzEx MWJhNTIzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmKCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwvFwQn3mTIeeHXOKb3jZp9s/OZpP8nSW69BGeirPjuFmWPIoTbW6gB 0mIJwiQhkEIM6ObloGc0+uo/tlkzxBHPKz7gdz0uWeoaohkPPmYxHdzspXNVyf6/ BQKeitZ4vYSeV1hJlTLNoC8wSpjUY+KP5DsTST0xqG+8+r1rfLnk8AfH5QqcHVDQ hbE+aKfYIkrPyAdu4V2XyT4k/dRPgg7O4x8QSK7ezL0/8GxIjagyvS4+p1lfIYtX WnDog95HgxOEHur3tLD/V7PoVLTUagLjwtme6fOSGVLP8P+i2DPuz11f11O+O6PT ollss4KQ/+qbtx5RYJBucSarUGd1fOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:20 2025 by rpki-client