$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0bb0f391-d564-3720-9fae-91c0e9415077.roa File: 0bb0f391-d564-3720-9fae-91c0e9415077.roa (raw, json) Hash identifier: rc9Q7OzV88kHOtEHhY54Mp5lcMNdjZkzs734vX+BP8A= Subject key identifier: A0:F1:D0:BF:F1:3A:83:C9:79:1A:2A:5E:DC:25:FD:75:DF:41:E3:8B Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584BA0D24BA2D77DFC4157469900 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0bb0f391-d564-3720-9fae-91c0e9415077.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 394434 IP address blocks: 159.183.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4b:a2:d7:7d:fc:41:57:46:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c684f1b4-9ffb-4b57-a2c6-a3b48ca6d10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:3e:3f:dc:13:57:8a:bc:81:a8:db:ff:40: a7:fa:20:96:02:f0:5a:fd:20:55:93:b3:59:a4:54: 16:fc:3a:32:54:ec:cd:ca:7c:aa:b1:7b:17:8e:2a: b1:f8:2f:c2:ad:c8:1a:d5:eb:cc:4b:79:7d:56:35: 79:d8:ff:63:3d:ea:a4:3f:9e:18:1e:43:e2:5a:58: fa:c8:66:51:b8:d1:f7:a0:b6:74:6e:e8:fe:a5:a2: fc:9c:20:36:44:28:a8:17:73:7b:8b:e7:c8:77:74: c4:50:17:0a:17:2e:75:09:98:84:74:f2:4b:ad:8f: 3d:c5:3a:b1:46:26:5e:f1:6d:17:c9:b7:78:48:27: cd:cd:f7:d8:45:ec:b4:11:d4:5f:bd:cb:a6:a0:05: 11:f7:aa:77:3d:57:10:8c:1b:a5:ca:a4:d7:f3:d8: 20:f3:08:7d:4d:65:59:53:23:43:5e:15:a9:48:d3: 9c:c9:45:19:22:70:01:61:e2:23:80:75:e5:4f:8b: 95:80:77:b7:54:29:80:99:a6:ae:71:ec:dd:e6:c2: d6:64:35:cf:e4:40:ee:96:6a:b4:d0:8b:95:e7:dd: 48:ac:64:97:4d:6b:18:60:c3:3b:a7:80:71:be:ec: ae:aa:81:fb:56:1e:a3:f1:81:88:05:0a:55:f5:07: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:D0:BF:F1:3A:83:C9:79:1A:2A:5E:DC:25:FD:75:DF:41:E3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0bb0f391-d564-3720-9fae-91c0e9415077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0b:11:cd:98:b2:87:30:10:73:b3:81:50:f7:e7:67:29:74: f8:3d:6a:75:fa:68:73:4a:96:4b:f2:a8:8f:63:31:2a:ed:65: c5:fb:63:d6:2e:ac:f5:3f:3d:87:14:5b:d7:de:11:63:91:23: 18:a5:76:6d:e7:3c:64:7b:d4:99:1c:eb:54:8d:5b:b3:ef:61: 60:c7:1a:f5:08:2c:7c:21:d5:4f:28:46:62:db:80:ba:5f:a8: e4:45:f4:91:13:9f:01:e6:6d:80:de:57:41:b4:13:d2:ac:7b: d0:fb:00:7e:cf:3c:89:6a:7e:64:37:ef:7a:5e:4a:c3:4b:e9: 7b:c7:6e:3d:f9:90:00:f8:14:bf:ec:9d:9e:5d:dc:71:01:0f: 15:5e:d0:22:06:1e:ce:ad:9d:ea:a9:25:33:7f:69:74:e4:b7: a1:ac:3b:b6:98:25:93:9a:76:4f:60:9f:b7:9c:e3:98:3d:92: 08:76:0a:23:c6:01:e6:7d:d9:c3:ee:c3:20:7a:24:85:37:07: f0:8c:91:8e:9a:8f:04:8e:e8:7e:12:83:88:23:4a:29:cf:9c: 65:b6:9f:ae:cb:83:54:7b:43:e3:f4:c8:32:5a:0f:14:ab:6a: 19:5e:18:8b:de:74:f9:b7:8b:5b:bf:5c:a1:74:80:db:ea:ea: 29:7d:71:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kui1338QVdGmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzY4NGYxYjQtOWZmYi00YjU3LWEyYzYtYTNiNDhjYTZkMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnc+P9wTV4q8gajb/0Cn+iCWAvBa/SBVk7NZ pFQW/DoyVOzNynyqsXsXjiqx+C/Crcga1evMS3l9VjV52P9jPeqkP54YHkPiWlj6 yGZRuNH3oLZ0buj+paL8nCA2RCioF3N7i+fId3TEUBcKFy51CZiEdPJLrY89xTqx RiZe8W0Xybd4SCfNzffYRey0EdRfvcumoAUR96p3PVcQjBulyqTX89gg8wh9TWVZ UyNDXhWpSNOcyUUZInABYeIjgHXlT4uVgHe3VCmAmaaucezd5sLWZDXP5EDulmq0 0IuV591IrGSXTWsYYMM7p4BxvuyuqoH7Vh6j8YGIBQpV9QeMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDx0L/xOoPJeRoqXtwl/XXfQeOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMGJiMGYzOTEtZDU2NC0z NzIwLTlmYWUtOTFjMGU5NDE1MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn7f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4LEc2YsocwEHOzgVD352cpdPg9anX6aHNKlkvyqI9jMSrtZcX7Y9Yu rPU/PYcUW9feEWORIxildm3nPGR71Jkc61SNW7PvYWDHGvUILHwh1U8oRmLbgLpf qORF9JETnwHmbYDeV0G0E9Kse9D7AH7PPIlqfmQ373peSsNL6XvHbj35kAD4FL/s nZ5d3HEBDxVe0CIGHs6tneqpJTN/aXTkt6GsO7aYJZOadk9gn7ec45g9kgh2CiPG AeZ92cPuwyB6JIU3B/CMkY6ajwSO6H4Sg4gjSinPnGW2n67Lg1R7Q+P0yDJaDxSr ahleGIvedPm3i1u/XKF0gNvq6il9cTo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:14 2025 by rpki-client