$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffef36b0-0242-30de-a94a-3afa0b5689f1.roa File: ffef36b0-0242-30de-a94a-3afa0b5689f1.roa (raw, json) Hash identifier: AsfixnIPj9zw1auxEDW8oTGVszCC6nm7RdB4Yilo51w= Subject key identifier: FE:2B:2B:A7:D3:DA:FD:80:54:DC:71:FB:F2:EE:8C:B4:EC:C4:D2:F2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B960D0FA790FF0C48F1ACDB00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffef36b0-0242-30de-a94a-3afa0b5689f1.roa Signing time: Mon 20 Oct 2025 16:25:16 +0000 ROA not before: Mon 20 Oct 2025 16:25:16 +0000 ROA not after: Sun 18 Jan 2026 17:25:16 +0000 asID: 206735 IP address blocks: 154.57.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:0d:0f:a7:90:ff:0c:48:f1:ac:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 16:25:16 2025 GMT Not After : Jan 18 17:25:16 2026 GMT Subject: CN=f52df7d0-b88a-42ab-b624-e9459b0aa481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:80:26:2d:7f:8f:23:b5:08:45:c5:c6:ed: 26:f5:ad:8c:b3:28:6f:7e:cf:47:26:3b:d0:f8:5e: 70:ec:76:c3:f8:6b:83:8a:55:db:8b:53:5c:3b:06: 29:fe:90:bc:94:af:fc:8d:45:32:4f:09:90:e1:57: f7:98:a5:82:3d:ad:3f:eb:84:3f:d8:d9:3a:e3:27: 81:e0:ad:3f:99:0f:67:21:55:32:ff:ff:bd:26:71: ed:9d:6d:71:69:ab:77:1c:f4:25:49:b6:c5:e7:08: 9b:06:fd:1d:d4:2c:47:17:0d:e0:9a:80:f9:ba:ec: 80:a1:02:37:3c:55:ca:ab:26:50:b6:4d:b5:d8:ee: 86:28:17:a6:87:92:82:74:26:4e:d2:a8:94:2e:b8: a2:21:0b:41:e4:2d:9d:ce:18:5b:0f:bc:fe:11:87: d1:be:6f:2f:1b:e8:fb:c3:33:1c:51:9b:86:d2:07: c1:9b:f6:32:c6:f4:26:c0:04:7e:0a:cc:aa:5c:10: 0e:d3:a1:b5:4c:21:a9:89:0b:c5:f6:24:cf:e7:a1: 91:74:8b:ed:47:60:f1:eb:1d:8d:59:86:47:31:48: b7:1e:35:38:5c:19:b3:9f:e2:2a:95:61:7d:89:53: 90:42:34:27:cf:31:aa:8f:1f:7e:b6:3d:d7:33:52: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:2B:A7:D3:DA:FD:80:54:DC:71:FB:F2:EE:8C:B4:EC:C4:D2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffef36b0-0242-30de-a94a-3afa0b5689f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.57.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:28:d0:b8:0b:12:5e:f2:7c:29:7a:ff:4f:16:71:97:d3:bf: 9b:0f:c5:1f:97:7f:1a:92:3b:9b:89:11:13:93:79:dc:7f:0f: b6:6c:15:ad:c9:a4:62:6c:96:b4:12:85:4e:95:77:01:4e:73: 3c:1f:d5:43:0e:58:0b:9c:3c:8c:1a:8d:00:05:9a:87:66:96: 17:aa:06:ea:ad:5d:c0:7d:f8:46:5f:cd:5c:ed:81:a3:33:ba: 5e:1d:13:5e:39:04:65:92:0e:39:82:16:ec:97:0b:48:83:fd: 23:8e:ce:07:ce:49:0f:12:23:29:c4:bd:f1:38:16:f0:25:c3: 74:98:d1:10:c5:8e:68:98:5c:5e:51:66:68:7b:5c:66:35:38: 5e:fd:f5:8f:21:a5:91:ed:84:44:b0:e2:66:6b:e8:ae:75:c1: b2:44:94:f3:cc:db:a4:35:5a:98:d8:c7:25:78:19:ce:fa:ff: a0:10:ae:01:b3:42:c2:77:cc:14:89:dc:f0:de:83:42:e6:68: 68:97:2b:f3:ae:7d:64:e0:21:54:95:1b:bf:b4:06:b8:a2:6e: 74:6a:55:41:18:6f:b7:f6:71:f1:93:87:16:54:1e:4e:98:9c: b4:a2:7b:9d:dd:d4:86:cb:a8:d8:31:ba:dc:1b:e5:d8:9d:eb: c4:6d:9f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWDQ+nkP8MSPGs2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMDE2MjUxNloXDTI2MDExODE3MjUxNlowLzEtMCsGA1UEAxMk ZjUyZGY3ZDAtYjg4YS00MmFiLWI2MjQtZTk0NTliMGFhNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hqAJi1/jyO1CEXFxu0m9a2Msyhvfs9HJjvQ +F5w7HbD+GuDilXbi1NcOwYp/pC8lK/8jUUyTwmQ4Vf3mKWCPa0/64Q/2Nk64yeB 4K0/mQ9nIVUy//+9JnHtnW1xaat3HPQlSbbF5wibBv0d1CxHFw3gmoD5uuyAoQI3 PFXKqyZQtk212O6GKBemh5KCdCZO0qiULriiIQtB5C2dzhhbD7z+EYfRvm8vG+j7 wzMcUZuG0gfBm/YyxvQmwAR+CsyqXBAO06G1TCGpiQvF9iTP56GRdIvtR2Dx6x2N WYZHMUi3HjU4XBmzn+IqlWF9iVOQQjQnzzGqjx9+tj3XM1I5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4rK6fT2v2AVNxx+/LujLTsxNLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmZlZjM2YjAtMDI0Mi0z MGRlLWE5NGEtM2FmYTBiNTY4OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmjkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgo0LgLEl7yfCl6/08WcZfTv5sPxR+XfxqSO5uJEROTedx/D7ZsFa3J pGJslrQShU6VdwFOczwf1UMOWAucPIwajQAFmodmlheqBuqtXcB9+EZfzVztgaMz ul4dE145BGWSDjmCFuyXC0iD/SOOzgfOSQ8SIynEvfE4FvAlw3SY0RDFjmiYXF5R Zmh7XGY1OF799Y8hpZHthESw4mZr6K51wbJElPPM26Q1WpjYxyV4Gc76/6AQrgGz QsJ3zBSJ3PDeg0LmaGiXK/OufWTgIVSVG7+0BriibnRqVUEYb7f2cfGThxZUHk6Y nLSie53d1IbLqNgxutwb5did68Rtn3s= -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:03 2025 by rpki-client