$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3b530a7-401b-3080-879b-c6d9b80ec245.roa File: b3b530a7-401b-3080-879b-c6d9b80ec245.roa (raw, json) Hash identifier: RTFzX8PYaqR8sU4ehTPKJ5GavkMGtl4KTP4Fj8SkAss= Subject key identifier: CD:66:F9:50:23:7B:50:97:3D:0A:B0:74:9A:45:8A:20:54:5E:09:33 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BC33171709CD10188BEA62440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3b530a7-401b-3080-879b-c6d9b80ec245.roa Signing time: Wed 05 Nov 2025 20:29:57 +0000 ROA not before: Wed 05 Nov 2025 20:29:57 +0000 ROA not after: Tue 03 Feb 2026 20:29:57 +0000 asID: 269965 IP address blocks: 154.57.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:31:71:70:9c:d1:01:88:be:a6:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 5 20:29:57 2025 GMT Not After : Feb 3 20:29:57 2026 GMT Subject: CN=2b072d39-d0d8-460a-8452-f4ae2d2defbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:57:8d:c6:6d:05:2a:7f:46:d4:3d:27:35: d7:7b:ca:51:a1:1f:76:96:27:10:1f:3a:7b:0b:88: 7f:ae:fb:d9:e8:4a:c5:44:4e:b6:c4:9e:84:66:15: 49:89:78:bf:ab:2e:f9:42:98:50:7e:48:fc:55:e2: f3:ad:5a:63:77:9b:33:35:b9:84:b6:31:67:e4:fe: 9e:1a:ba:d0:3c:10:9c:8d:c7:54:fd:61:26:fa:df: 3f:bd:3b:72:be:22:08:45:a6:8f:ff:9b:4a:6e:f7: 0d:80:3e:be:9d:b7:a0:2a:e0:63:c5:39:e7:99:89: b4:6a:da:9f:df:0a:45:06:d4:9b:ee:2b:b7:20:47: b5:87:f3:9a:d0:3a:6b:d8:89:50:d2:a2:47:c2:0a: af:9c:16:d3:b2:8f:d2:9d:ff:2a:b7:e0:5f:23:da: c6:ce:24:8c:e4:60:05:2e:d7:8c:d6:8d:8b:1b:bf: 6a:e6:78:12:4e:bc:4d:84:1c:7b:01:b3:90:03:49: 85:c5:b1:c3:d8:3c:1d:4e:3f:a8:4c:43:02:03:b4: e4:1f:25:96:ac:4b:ca:84:ae:db:e5:41:d0:0d:08: 26:72:97:c2:1a:cc:da:d6:07:61:21:f5:c0:5f:57: ca:78:c6:69:6a:8a:c8:4e:44:6f:e7:10:40:d7:b0: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:F9:50:23:7B:50:97:3D:0A:B0:74:9A:45:8A:20:54:5E:09:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3b530a7-401b-3080-879b-c6d9b80ec245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.57.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e3:1a:ca:86:e9:f6:58:62:39:05:76:af:39:f3:07:dc:ec: be:a9:de:70:8b:51:5c:7a:8b:c8:1d:a3:d5:dc:db:b0:2a:e4: d1:e2:74:25:88:d4:fa:5e:e1:70:87:26:77:fc:bd:6d:9a:fb: 3b:b9:26:6b:b6:0f:9f:b5:34:dc:7c:df:8b:0e:b4:38:e9:33: ab:be:fe:5e:1d:6a:11:cc:81:b5:0f:f4:15:ae:1d:cd:86:e2: 92:53:71:d9:6e:1e:d3:50:b9:c3:01:98:d6:81:de:dc:07:a9: f0:c4:c4:af:4f:6f:90:8e:22:c1:32:56:15:c6:b9:f7:7c:91: 6f:4e:cc:29:ce:63:cc:b0:46:6d:23:a2:25:b8:c0:37:f2:18: 84:3a:1e:df:ed:99:c2:1d:49:e0:c1:71:51:e5:70:ab:8b:eb: 26:29:51:35:32:ce:d3:d7:eb:bf:74:49:2e:c2:65:d2:e4:76: 9e:87:4b:3d:bb:7b:59:31:55:47:38:30:71:51:72:ab:48:a3: 55:9c:a9:ca:7c:62:d0:77:05:44:97:d4:d1:7c:e3:79:cc:37: 67:50:24:7f:f6:54:94:e1:2a:31:6e:41:42:b9:28:12:2c:59: e0:31:12:da:52:8e:92:1e:88:c7:5a:1e:3b:63:03:e5:1b:35: d9:cc:13:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvDMXFwnNEBiL6mJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEwNTIwMjk1N1oXDTI2MDIwMzIwMjk1N1owLzEtMCsGA1UEAxMk MmIwNzJkMzktZDBkOC00NjBhLTg0NTItZjRhZTJkMmRlZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZNXjcZtBSp/RtQ9JzXXe8pRoR92licQHzp7 C4h/rvvZ6ErFRE62xJ6EZhVJiXi/qy75QphQfkj8VeLzrVpjd5szNbmEtjFn5P6e GrrQPBCcjcdU/WEm+t8/vTtyviIIRaaP/5tKbvcNgD6+nbegKuBjxTnnmYm0atqf 3wpFBtSb7iu3IEe1h/Oa0Dpr2IlQ0qJHwgqvnBbTso/Snf8qt+BfI9rGziSM5GAF LteM1o2LG79q5ngSTrxNhBx7AbOQA0mFxbHD2DwdTj+oTEMCA7TkHyWWrEvKhK7b 5UHQDQgmcpfCGsza1gdhIfXAX1fKeMZpaorITkRv5xBA17DQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1m+VAje1CXPQqwdJpFiiBUXgkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjNiNTMwYTctNDAxYi0z MDgwLTg3OWItYzZkOWI4MGVjMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmjk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfjGsqG6fZYYjkFdq858wfc7L6p3nCLUVx6i8gdo9Xc27Aq5NHidCWI 1Ppe4XCHJnf8vW2a+zu5Jmu2D5+1NNx834sOtDjpM6u+/l4dahHMgbUP9BWuHc2G 4pJTcdluHtNQucMBmNaB3twHqfDExK9Pb5COIsEyVhXGufd8kW9OzCnOY8ywRm0j oiW4wDfyGIQ6Ht/tmcIdSeDBcVHlcKuL6yYpUTUyztPX6790SS7CZdLkdp6HSz27 e1kxVUc4MHFRcqtIo1Wcqcp8YtB3BUSX1NF843nMN2dQJH/2VJThKjFuQUK5KBIs WeAxEtpSjpIeiMdaHjtjA+UbNdnME+Q= -----END CERTIFICATE-----Generated at Fri Nov 7 11:59:47 2025 by rpki-client