$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa File: f7201aa5-0964-32a1-94a5-9389429ccd8f.roa (raw, json) Hash identifier: zZ/lH8Zkq4ujsTnAlSSlVcGSMWysgLK1fSkoSJ4cNVI= Subject key identifier: 2F:34:DB:35:92:FB:31:42:F4:1C:42:22:93:9F:A1:68:68:96:B5:D4 Certificate issuer: /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Certificate serial: 010D0C9F4328584B0A11685CCED7338532A75380 Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 398655 IP address blocks: 158.83.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:68:5c:ce:d7:33:85:32:a7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=22c2683b-47ae-485a-baa0-a0f5ee022c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:fc:87:69:c2:ea:99:15:cc:3c:f1:fb:8b: 72:88:29:bf:07:18:5c:25:18:1a:9a:3b:f3:91:b8: 78:80:2a:bf:88:2f:a3:3f:71:05:0e:56:1d:3c:15: 99:ac:c8:97:3d:09:70:09:85:db:7a:90:95:57:66: a2:58:c5:ad:4b:f2:9a:bc:51:31:96:74:e1:4a:62: b1:66:52:7d:e6:41:21:21:cc:6d:75:77:2b:40:8c: 12:a1:b2:12:00:7d:6a:2f:a8:e5:b9:c8:9a:e6:01: 6e:7f:40:ba:f9:10:b7:26:b1:15:aa:c9:0a:d2:f2: 60:c8:cf:f6:8c:a4:86:15:48:99:09:2b:f6:7c:a3: 76:41:89:c1:6e:86:76:2c:f1:44:e9:4f:04:6a:70: 78:e5:27:1b:87:9f:69:18:ec:70:32:7d:68:52:91: e7:f8:10:7f:41:5b:7a:0d:fd:35:f7:3f:dd:d3:76: 99:e2:bd:0a:55:88:fd:d2:65:11:f3:74:9c:2f:70: 7d:b5:3f:00:6a:c7:ab:52:41:77:57:e6:16:78:0e: 68:1c:c2:b9:bd:67:a1:cd:f9:80:7f:49:d1:95:cd: ae:ac:5f:4f:af:06:bb:96:36:dc:f8:c1:73:5a:05: 77:2b:f2:6e:82:1c:e7:bd:09:d5:da:b6:c4:f4:a2: 8d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:34:DB:35:92:FB:31:42:F4:1C:42:22:93:9F:A1:68:68:96:B5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl X509v3 Authority Key Identifier: keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer sbgp-ipAddrBlock: critical IPv4: 158.83.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ba:ba:26:e4:42:fb:44:92:a5:bd:76:ad:79:05:1a:e0:f8: 14:70:76:d0:f5:67:49:9a:87:45:b7:b1:a1:3d:e8:7e:fe:64: 9e:b3:4c:8e:07:75:2e:9a:7c:96:51:26:c2:46:6c:22:6f:ad: 41:85:e1:5b:49:2f:42:75:f4:15:1b:a1:9c:3f:29:3a:41:ae: 1d:b2:1a:a9:43:e4:78:9b:6e:ef:32:1d:e3:0a:ef:5e:c4:5b: 4f:30:c2:a0:cb:26:a4:65:3b:9a:34:48:2b:d0:ec:87:8a:da: bf:1f:08:94:02:72:10:47:9d:1b:75:d2:bb:6b:62:1c:0b:fb: c2:13:a6:e6:49:93:a2:4d:83:60:ae:44:70:04:e1:48:a0:07: cf:e9:14:9c:c1:4d:7f:86:a4:32:ae:83:d9:96:e1:fb:ba:6c: 1d:4c:b1:8d:0d:de:ae:82:39:30:65:69:d7:9a:78:d1:f4:85: f2:59:93:32:02:44:a2:1b:4a:59:ff:94:b9:d7:af:ba:1f:cb: 6d:6a:be:b8:64:da:32:b3:c5:9e:4d:99:c0:ad:2b:75:91:d4: 3e:cc:27:c9:f1:9c:5d:66:ca:e2:94:70:e6:4c:30:bf:01:c6: be:59:41:40:ad:ca:e8:34:6b:f9:69:c7:46:16:b9:5d:65:be: a8:1b:22:6a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsKEWhcztczhTKnU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFhMmQ0YjEtZGQ2My00ZWEzLTg3NjItNzBkNjI4MzQ3 Y2E2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MjJjMjY4M2ItNDdhZS00ODVhLWJhYTAtYTBmNWVlMDIyYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTr8h2nC6pkVzDzx+4tyiCm/BxhcJRgamjvz kbh4gCq/iC+jP3EFDlYdPBWZrMiXPQlwCYXbepCVV2aiWMWtS/KavFExlnThSmKx ZlJ95kEhIcxtdXcrQIwSobISAH1qL6jlucia5gFuf0C6+RC3JrEVqskK0vJgyM/2 jKSGFUiZCSv2fKN2QYnBboZ2LPFE6U8EanB45Scbh59pGOxwMn1oUpHn+BB/QVt6 Df019z/d03aZ4r0KVYj90mUR83ScL3B9tT8AaserUkF3V+YWeA5oHMK5vWehzfmA f0nRlc2urF9Prwa7ljbc+MFzWgV3K/JughznvQnV2rbE9KKNUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC802zWS+zFC9BxCIpOfoWholrXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEy ZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2MjgzNDdjYTYvZjcyMDFhYTUtMDk2NC0z MmExLTk0YTUtOTM4OTQyOWNjZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFhMmQ0YjEtZGQ2My00ZWEzLTg3 NjItNzBkNjI4MzQ3Y2E2L2QxYTJkNGIxLWRkNjMtNGVhMy04NzYyLTcwZDYyODM0 N2NhNi5jcmwwHwYDVR0jBBgwFoAUs6z+T9Sr8E7RB6JfLC/S0EMX/vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEyZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2 MjgzNDdjYTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnlMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbbq6JuRC+0SSpb12rXkFGuD4FHB20PVnSZqHRbexoT3ofv5knrNMjgd1 Lpp8llEmwkZsIm+tQYXhW0kvQnX0FRuhnD8pOkGuHbIaqUPkeJtu7zId4wrvXsRb TzDCoMsmpGU7mjRIK9Dsh4ravx8IlAJyEEedG3XSu2tiHAv7whOm5kmTok2DYK5E cAThSKAHz+kUnMFNf4akMq6D2Zbh+7psHUyxjQ3eroI5MGVp15p40fSF8lmTMgJE ohtKWf+Uudevuh/LbWq+uGTaMrPFnk2ZwK0rdZHUPswnyfGcXWbK4pRw5kwwvwHG vllBQK3K6DRr+WnHRha5XWW+qBsiag== -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:40 2025 by rpki-client