$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa File: 2ddea806-81f0-34de-aed2-4e3ace1914b0.roa (raw, json) Hash identifier: a0uld4ikeztroo1ctPkflPCX5KLaNl8N8Y62FiD4qMI= Subject key identifier: 33:5E:5D:20:02:D5:14:EA:BD:57:72:7F:17:2A:37:6A:EF:C1:67:FA Certificate issuer: /CN=b59f0cf0-b1db-4139-bfc6-e624159d7343 Certificate serial: 010D0C9F4328584AF5214FE8C50B45CEF7691B14 Authority key identifier: AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 31898 IP address blocks: 168.151.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4f:e8:c5:0b:45:ce:f7:69:1b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59f0cf0-b1db-4139-bfc6-e624159d7343 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=d18bd7a5-07fb-4162-8d46-099e6d65ff5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:2c:2d:88:b4:9b:9d:66:b6:8a:30:84:18: c3:10:2e:c2:c8:d4:98:f4:29:f1:76:1c:7a:3f:7c: 3d:17:8d:d4:d1:ac:43:fa:49:e5:9c:26:81:ca:c9: 78:7e:45:51:c2:44:26:fc:d9:b0:e8:a8:11:04:d0: 6e:bb:78:5b:69:89:7a:9d:6c:3f:79:73:27:47:55: e1:3e:31:d6:c4:57:4e:a1:88:5c:35:96:62:6b:8a: 07:c4:9f:33:f2:cf:15:56:1f:34:18:cf:91:78:66: ee:59:80:0b:78:2e:b9:b8:08:18:6c:87:00:74:e5: fb:ef:23:ed:26:7d:45:d3:e0:1f:0e:16:d8:ce:d6: 1f:20:85:53:99:c1:80:70:ff:72:26:ee:02:e4:51: 19:3e:99:9d:f5:a5:00:12:33:56:80:db:fd:7c:e0: 53:8d:2a:09:37:f0:96:a7:9c:49:52:a7:9a:6e:f0: 2a:40:83:3d:e3:de:ea:8f:41:ce:99:67:67:03:fd: 0f:f1:99:d6:26:16:d4:25:91:52:2a:bf:a0:db:96: 80:c7:24:36:a8:e4:53:c3:af:97:93:e7:32:24:66: 78:06:47:42:1e:82:d1:50:5f:61:fb:a7:a2:00:d7: 91:be:29:11:5b:08:c7:ea:bc:21:82:ae:8b:1a:97: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:5D:20:02:D5:14:EA:BD:57:72:7F:17:2A:37:6A:EF:C1:67:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl X509v3 Authority Key Identifier: keyid:AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer sbgp-ipAddrBlock: critical IPv4: 168.151.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:03:70:e6:16:91:b7:ac:fc:ac:7a:4d:6e:a6:bf:76:cd:6b: 51:6d:c9:79:63:ea:cc:ea:b7:c7:bc:71:6b:fc:08:63:6e:1d: 8a:74:c4:4a:8c:c7:1a:c6:07:d7:8f:02:53:12:1e:10:d3:30: 6d:6f:6c:59:76:68:82:b8:c3:91:7f:c9:94:b5:e3:26:5e:93: 9c:44:7b:72:db:b2:76:51:97:2a:03:7b:7a:a9:a6:bd:37:6c: ba:42:f1:64:36:fd:c4:53:88:73:b6:9b:31:44:3b:d8:64:6c: a6:be:72:fd:dd:5e:e0:d7:82:a4:2e:d0:ed:69:11:a4:6f:7b: 93:8b:9e:41:25:e0:0e:d3:5e:3d:58:5e:d1:5e:d3:e2:70:aa: 6f:cf:0a:21:51:3c:df:d7:48:6f:56:1a:0c:99:38:85:0c:50: 34:9f:a2:60:2f:5d:2c:41:b3:f1:57:84:81:08:5b:97:cd:79: 1a:da:2f:88:dd:3b:17:59:00:51:f4:23:fc:e3:ce:7d:49:19: 09:b5:00:8f:28:2c:30:6e:45:cd:79:15:1f:e3:ab:00:e8:1c: a6:d0:06:0f:e4:aa:32:88:25:f0:28:a5:4f:f1:08:2b:28:2f: 6c:b8:05:4b:12:22:f2:6f:9c:9a:2b:42:57:22:75:54:e5:c4: 03:b8:e5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU/oxQtFzvdpGxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU5ZjBjZjAtYjFkYi00MTM5LWJmYzYtZTYyNDE1OWQ3 MzQzMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDE4YmQ3YTUtMDdmYi00MTYyLThkNDYtMDk5ZTZkNjVmZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQQsLYi0m51mtoowhBjDEC7CyNSY9Cnxdhx6 P3w9F43U0axD+knlnCaBysl4fkVRwkQm/Nmw6KgRBNBuu3hbaYl6nWw/eXMnR1Xh PjHWxFdOoYhcNZZia4oHxJ8z8s8VVh80GM+ReGbuWYALeC65uAgYbIcAdOX77yPt Jn1F0+AfDhbYztYfIIVTmcGAcP9yJu4C5FEZPpmd9aUAEjNWgNv9fOBTjSoJN/CW p5xJUqeabvAqQIM9497qj0HOmWdnA/0P8ZnWJhbUJZFSKr+g25aAxyQ2qORTw6+X k+cyJGZ4BkdCHoLRUF9h+6eiANeRvikRWwjH6rwhgq6LGpei7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNeXSAC1RTqvVdyfxcqN2rvwWf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlm MGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0MTU5ZDczNDMvMmRkZWE4MDYtODFmMC0z NGRlLWFlZDItNGUzYWNlMTkxNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjU5ZjBjZjAtYjFkYi00MTM5LWJm YzYtZTYyNDE1OWQ3MzQzL2I1OWYwY2YwLWIxZGItNDEzOS1iZmM2LWU2MjQxNTlk NzM0My5jcmwwHwYDVR0jBBgwFoAUqvHU4NNuFDrX637PeSGpAaKpEIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlmMGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0 MTU5ZDczNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYDcOYWkbes/Kx6TW6mv3bNa1FtyXlj6szqt8e8cWv8CGNuHYp0xEqM xxrGB9ePAlMSHhDTMG1vbFl2aIK4w5F/yZS14yZek5xEe3LbsnZRlyoDe3qppr03 bLpC8WQ2/cRTiHO2mzFEO9hkbKa+cv3dXuDXgqQu0O1pEaRve5OLnkEl4A7TXj1Y XtFe0+Jwqm/PCiFRPN/XSG9WGgyZOIUMUDSfomAvXSxBs/FXhIEIW5fNeRraL4jd OxdZAFH0I/zjzn1JGQm1AI8oLDBuRc15FR/jqwDoHKbQBg/kqjKIJfAopU/xCCso L2y4BUsSIvJvnJorQlcidVTlxAO45fk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:20 2025 by rpki-client