$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/2e867762-0184-31ad-8903-9739d8c6dde5.roa File: 2e867762-0184-31ad-8903-9739d8c6dde5.roa (raw, json) Hash identifier: P7KKQ57MvYzkrEMnN/2tVdtJqVfbo3/+GlZzfu68Edc= Subject key identifier: 18:23:E3:14:F7:A5:0A:64:11:0B:6A:48:43:6F:50:D0:EC:7A:36:E8 Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F4328584B3F1C65A9EE45A7303A9E0E80 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/2e867762-0184-31ad-8903-9739d8c6dde5.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 3761 IP address blocks: 158.120.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:65:a9:ee:45:a7:30:3a:9e:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=be55a75c-c19f-494e-8701-5a53bdfc1949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:3f:79:e2:f6:2e:09:74:dc:36:46:72:56: d1:50:9b:39:16:92:cd:63:23:72:0e:2f:12:c6:85: 7b:f0:21:8b:4b:49:1e:65:73:b7:bd:37:d1:fd:05: da:00:07:4d:f0:40:03:c1:f1:c7:e6:2b:06:7b:68: 15:c4:28:a5:0b:5f:9e:81:32:68:c2:c7:80:4a:8b: cb:4f:92:f9:54:c7:00:25:3e:f4:f5:aa:cf:17:fa: 96:35:17:f7:93:09:18:27:89:84:24:cb:ed:07:2f: 8b:2a:84:b7:60:a8:da:d6:1e:d1:75:a6:43:d0:8d: aa:db:d9:fe:83:a4:0e:5e:dd:9d:51:67:a8:99:42: 91:99:1b:ec:6d:c9:e4:91:6d:db:5d:b2:8d:15:0c: d2:1a:bb:f4:d0:6a:ea:9b:08:f3:53:08:c9:3a:0c: 24:eb:74:7e:85:d5:a6:ed:8b:65:83:9d:60:20:fa: d9:d1:b4:72:ce:1a:e4:dd:43:7d:46:d6:fe:88:c5: 38:f9:2d:57:00:2f:91:19:76:c5:30:9e:b4:ae:2b: 58:e9:9f:89:09:51:81:9c:69:6b:5b:dd:f2:ec:bc: 81:f8:33:33:8f:76:d4:08:62:4f:72:bc:e1:f0:f2: c0:62:75:a4:c2:2e:2f:f5:cb:33:24:e7:b7:96:a5: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:23:E3:14:F7:A5:0A:64:11:0B:6A:48:43:6F:50:D0:EC:7A:36:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/2e867762-0184-31ad-8903-9739d8c6dde5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:86:96:98:c4:9a:81:94:ee:14:f2:fd:d3:53:37:9b:f9:86: 9e:49:1d:f8:c1:21:12:0f:d2:9e:36:e0:9e:3f:47:f4:08:81: 16:72:14:f9:a2:8f:2c:fb:6a:a0:83:8d:79:86:05:a7:dc:83: 18:8f:f3:29:a5:49:02:76:26:95:c9:51:d6:5d:1b:52:06:7a: 41:69:ee:6f:f8:b7:49:32:2a:08:cc:c0:77:bb:ed:82:2e:45: ce:05:3b:80:15:33:7b:fa:a2:83:d1:40:b0:a9:09:77:c0:1e: 51:f4:c2:87:a5:51:51:46:47:30:00:3a:06:82:79:15:b1:97: 75:aa:c7:dd:42:5b:4d:66:aa:6d:21:5b:6f:af:e6:1b:16:ce: c2:19:46:5f:51:a7:3d:df:4e:03:34:2e:d3:6d:b2:b6:8e:ec: 10:93:e6:89:78:a3:83:e3:08:b2:75:17:ca:99:b2:00:93:a6: bf:3d:b0:bc:7e:79:c2:0a:1d:2e:51:34:13:17:d1:97:5f:64: 69:60:c7:07:aa:c2:9c:16:1c:72:6a:14:a7:7d:17:12:41:17: d3:55:9c:e8:eb:4a:7b:72:a5:88:95:83:87:a3:31:ff:e3:e2: 36:d9:71:a4:72:cf:b9:a5:6b:6a:0a:1e:5e:f6:75:0d:fd:d9: 2b:10:b7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGWp7kWnMDqeDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk YmU1NWE3NWMtYzE5Zi00OTRlLTg3MDEtNWE1M2JkZmMxOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl4/eeL2Lgl03DZGclbRUJs5FpLNYyNyDi8S xoV78CGLS0keZXO3vTfR/QXaAAdN8EADwfHH5isGe2gVxCilC1+egTJowseASovL T5L5VMcAJT709arPF/qWNRf3kwkYJ4mEJMvtBy+LKoS3YKja1h7RdaZD0I2q29n+ g6QOXt2dUWeomUKRmRvsbcnkkW3bXbKNFQzSGrv00GrqmwjzUwjJOgwk63R+hdWm 7Ytlg51gIPrZ0bRyzhrk3UN9Rtb+iMU4+S1XAC+RGXbFMJ60ritY6Z+JCVGBnGlr W93y7LyB+DMzj3bUCGJPcrzh8PLAYnWkwi4v9cszJOe3lqXlZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgj4xT3pQpkEQtqSENvUNDsejboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMmU4Njc3NjItMDE4NC0z MWFkLTg5MDMtOTczOWQ4YzZkZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGGlpjEmoGU7hTy/dNTN5v5hp5JHfjBIRIP0p424J4/R/QIgRZyFPmi jyz7aqCDjXmGBafcgxiP8ymlSQJ2JpXJUdZdG1IGekFp7m/4t0kyKgjMwHe77YIu Rc4FO4AVM3v6ooPRQLCpCXfAHlH0woelUVFGRzAAOgaCeRWxl3Wqx91CW01mqm0h W2+v5hsWzsIZRl9Rpz3fTgM0LtNtsraO7BCT5ol4o4PjCLJ1F8qZsgCTpr89sLx+ ecIKHS5RNBMX0ZdfZGlgxweqwpwWHHJqFKd9FxJBF9NVnOjrSntypYiVg4ejMf/j 4jbZcaRyz7mla2oKHl72dQ392SsQt6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:50 2025 by rpki-client