$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa File: 33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa (raw, json) Hash identifier: 8XY8fxZst5XdWt0xg/azsdDsfjxm/NwhJ7MHFzePQBc= Subject key identifier: 3E:05:36:11:67:E5:5F:D0:4E:FE:C4:B8:5B:FD:0C:42:6E:D3:69:BC Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584B3D17C794A1FD9D5482832400 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa Signing time: Thu 18 Sep 2025 19:39:55 +0000 ROA not before: Thu 18 Sep 2025 19:39:55 +0000 ROA not after: Wed 17 Dec 2025 20:39:55 +0000 asID: 11377 IP address blocks: 159.26.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:17:c7:94:a1:fd:9d:54:82:83:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 18 19:39:55 2025 GMT Not After : Dec 17 20:39:55 2025 GMT Subject: CN=5b0e52c2-906e-4ff9-a5ec-a985409ae99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:a5:27:78:ea:e9:a9:0d:7c:9e:99:72:1f: f3:15:83:41:c5:de:4c:60:3e:4d:31:3d:cb:d4:f4: 15:dd:9d:a0:93:87:c6:09:53:6a:16:87:c9:fc:47: 96:06:37:84:41:9a:b0:90:be:84:be:2a:0f:1e:44: f9:a9:76:03:f9:86:cd:fc:b0:40:67:da:a7:4e:a1: ff:9e:bd:ce:25:19:13:de:18:74:d7:50:66:9a:33: fc:12:81:55:eb:7c:af:38:98:7c:33:25:b0:a8:37: bf:bd:c5:c9:cc:c1:84:66:39:d2:ed:44:d4:6d:cb: 6e:5e:95:d5:48:85:ad:3c:e6:51:31:53:10:43:83: 0c:ba:b3:f0:f6:3d:4f:88:c0:66:ad:6f:98:94:ff: 43:10:c7:88:f5:32:58:25:33:a5:5b:95:c1:42:9b: 49:39:7e:e4:4a:06:22:0d:60:09:ef:4e:25:94:d0: 6e:d9:a3:8b:14:8e:f0:7b:6f:5b:56:fc:ba:48:ca: 36:46:65:8e:53:5c:73:5d:6d:87:ca:4d:eb:45:da: 62:23:be:37:1e:c6:d9:3e:4a:76:5c:a1:30:66:69: 02:ad:33:f0:b8:c8:ca:88:39:12:17:62:14:76:e3: 69:e9:c6:3e:98:7b:91:2a:bf:8b:e5:ac:b5:b1:72: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:36:11:67:E5:5F:D0:4E:FE:C4:B8:5B:FD:0C:42:6E:D3:69:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/33c88fb6-a5a8-3701-b0da-beb09c02cc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.26.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ab:bb:90:92:47:5a:ae:2c:0f:a7:14:ec:a6:ea:37:e4:e3: 44:e0:2a:19:f5:c5:76:79:68:65:2b:cc:63:04:a5:e3:e2:97: 0a:56:91:d1:46:55:1a:61:98:97:30:96:7c:77:46:72:6e:f7: 8a:d6:c1:e0:b0:fc:34:02:39:c7:e9:03:3c:ed:ac:26:b1:47: a2:0a:4f:07:68:46:17:c5:39:05:6d:f1:a0:c0:67:fd:87:6b: 34:2d:53:e9:b1:4a:6e:9c:f5:09:e7:81:ae:62:9a:4b:1d:ac: ea:56:c0:8b:b4:0f:66:9f:50:ba:22:32:36:bf:62:19:a3:8a: b3:3e:2a:f2:a4:1d:ed:b3:1f:08:72:8c:73:fa:6b:4a:53:39: c6:94:61:4e:03:a1:27:ce:88:13:86:ce:c1:e4:8e:00:8e:90: c9:08:2e:a7:1f:4a:53:37:e5:a5:24:a8:d6:87:00:83:8c:f0: bd:f6:b4:96:0d:80:fb:18:d9:a2:e9:77:f0:b1:84:aa:eb:3e: 89:82:af:a1:84:fa:05:f1:f1:7c:c8:69:e1:d6:6d:55:48:c7: 3d:e3:a5:39:f9:bf:6b:27:1c:da:51:23:42:d1:0d:bb:28:25: 9d:14:b5:84:f0:98:ec:52:c4:71:27:db:03:68:5d:1a:ed:ea: 8d:3f:38:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9F8eUof2dVIKDJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDkxODE5Mzk1NVoXDTI1MTIxNzIwMzk1NVowLzEtMCsGA1UEAxMk NWIwZTUyYzItOTA2ZS00ZmY5LWE1ZWMtYTk4NTQwOWFlOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VulJ3jq6akNfJ6Zch/zFYNBxd5MYD5NMT3L 1PQV3Z2gk4fGCVNqFofJ/EeWBjeEQZqwkL6EvioPHkT5qXYD+YbN/LBAZ9qnTqH/ nr3OJRkT3hh011BmmjP8EoFV63yvOJh8MyWwqDe/vcXJzMGEZjnS7UTUbctuXpXV SIWtPOZRMVMQQ4MMurPw9j1PiMBmrW+YlP9DEMeI9TJYJTOlW5XBQptJOX7kSgYi DWAJ704llNBu2aOLFI7we29bVvy6SMo2RmWOU1xzXW2Hyk3rRdpiI743HsbZPkp2 XKEwZmkCrTPwuMjKiDkSF2IUduNp6cY+mHuRKr+L5ay1sXLwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4FNhFn5V/QTv7EuFv9DEJu02m8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMzNjODhmYjYtYTVhOC0z NzAxLWIwZGEtYmViMDljMDJjYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnxqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWru5CSR1quLA+nFOym6jfk40TgKhn1xXZ5aGUrzGMEpePilwpWkdFG VRphmJcwlnx3RnJu94rWweCw/DQCOcfpAzztrCaxR6IKTwdoRhfFOQVt8aDAZ/2H azQtU+mxSm6c9Qnnga5imksdrOpWwIu0D2afULoiMja/YhmjirM+KvKkHe2zHwhy jHP6a0pTOcaUYU4DoSfOiBOGzsHkjgCOkMkILqcfSlM35aUkqNaHAIOM8L32tJYN gPsY2aLpd/CxhKrrPomCr6GE+gXx8XzIaeHWbVVIxz3jpTn5v2snHNpRI0LRDbso JZ0UtYTwmOxSxHEn2wNoXRrt6o0/OEA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:41:56 2025 by rpki-client