$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: HldiuaVZrxg+1XdZQcm8BjtgV/0eZjjfYANfWdmNPwI= Subject key identifier: 07:3D:AF:B9:4E:80:A5:1F:46:CF:6D:A0:2B:63:68:D1:0A:67:33:C8 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584B0B76D863BCDF030CAF2E0200 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d8:63:bc:df:03:0c:af:2e:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ee4e042c-1517-4809-8570-0154e38659e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:ef:c7:73:b2:58:b9:6e:9e:d3:46:c5:9c: 9c:57:05:e9:3d:7f:0f:f2:45:54:77:4f:43:d5:11: fa:66:c6:7f:93:70:59:62:24:84:f4:53:67:be:c0: 91:5e:f0:66:f1:d7:c6:07:a0:9c:ed:c0:12:bd:4f: db:f9:1d:1f:bb:47:c8:3e:ff:37:f1:d9:07:c7:d3: a8:7c:2c:61:0a:dc:ff:47:5a:c3:aa:57:11:38:bc: 55:0e:9b:8d:aa:76:e7:e0:1d:8e:e6:01:f7:c1:94: db:2a:ad:d1:29:79:7d:1e:c5:90:f8:8e:30:6b:69: 60:f4:a2:26:b1:39:2e:c3:c1:25:44:11:1c:23:51: aa:7e:32:a2:77:de:37:3c:6b:ec:ea:5e:a5:34:05: 65:47:b9:58:4a:59:ef:e1:14:36:ba:36:7c:b6:31: 0a:b2:42:42:ff:a3:c5:13:ec:78:f7:28:c1:ad:d2: 31:93:95:ae:7c:c0:12:eb:ce:2f:b4:d0:74:43:ce: 56:b3:20:fd:98:f6:7e:69:1e:db:3a:7c:0f:f8:6a: 49:a0:78:82:40:c1:54:88:7c:e0:4c:15:77:87:2e: ff:ef:15:fa:a4:c8:e8:06:bb:57:bb:c3:6b:2e:42: 3c:f4:f3:74:2e:f6:c1:03:40:8b:5a:57:26:84:b9: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3D:AF:B9:4E:80:A5:1F:46:CF:6D:A0:2B:63:68:D1:0A:67:33:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:68:d6:35:9a:36:6d:aa:cc:16:66:9e:6b:96:06:55:f4:5c: d2:71:2e:68:e4:63:43:16:61:f7:b3:02:95:f4:1a:41:c3:8b: 29:2f:ac:b1:14:36:25:52:00:2f:ca:fe:3d:d9:0e:73:97:ee: 59:b8:05:14:44:f9:0a:6f:f0:f9:e5:27:ff:42:36:ae:bb:ef: 6a:57:4e:00:81:f6:a3:e8:51:04:ac:b5:14:5a:6f:78:c8:4f: 03:b1:b3:74:3f:90:25:73:a2:46:3f:21:3a:c0:62:00:30:69: 9a:37:ea:e2:fd:47:aa:19:e9:b4:48:4e:86:c5:5e:78:fa:3b: 20:af:63:00:fc:1a:a1:eb:63:dc:ff:f0:3f:32:92:cc:b5:9d: e9:d8:33:35:7a:bd:01:c5:c1:6b:77:b3:7e:f3:26:e1:7f:51: df:de:bd:94:5f:4a:33:22:ba:a3:ef:27:ef:6e:0a:77:19:9c: 7d:bc:10:ce:de:59:53:49:a3:d9:36:88:be:82:2b:40:56:44: b4:73:2c:9e:fb:0a:08:d0:ca:92:fc:23:44:2e:7a:c3:6e:02: 76:63:9c:90:34:d7:ae:70:ff:7b:d2:ea:b0:cf:de:b9:a9:74: fa:ba:e0:60:41:e0:52:2a:95:8a:7c:a7:b7:66:2e:c9:e2:f4: be:cc:d1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdthjvN8DDK8uAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZWU0ZTA0MmMtMTUxNy00ODA5LTg1NzAtMDE1NGUzODY1OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKPvx3OyWLluntNGxZycVwXpPX8P8kVUd09D 1RH6ZsZ/k3BZYiSE9FNnvsCRXvBm8dfGB6Cc7cASvU/b+R0fu0fIPv838dkHx9Oo fCxhCtz/R1rDqlcROLxVDpuNqnbn4B2O5gH3wZTbKq3RKXl9HsWQ+I4wa2lg9KIm sTkuw8ElRBEcI1GqfjKid943PGvs6l6lNAVlR7lYSlnv4RQ2ujZ8tjEKskJC/6PF E+x49yjBrdIxk5WufMAS684vtNB0Q85WsyD9mPZ+aR7bOnwP+GpJoHiCQMFUiHzg TBV3hy7/7xX6pMjoBrtXu8NrLkI89PN0LvbBA0CLWlcmhLkSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc9r7lOgKUfRs9toCtjaNEKZzPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBo1jWaNm2qzBZmnmuWBlX0XNJxLmjkY0MWYfezApX0GkHDiykvrLEU NiVSAC/K/j3ZDnOX7lm4BRRE+Qpv8PnlJ/9CNq6772pXTgCB9qPoUQSstRRab3jI TwOxs3Q/kCVzokY/ITrAYgAwaZo36uL9R6oZ6bRITobFXnj6OyCvYwD8GqHrY9z/ 8D8yksy1nenYMzV6vQHFwWt3s37zJuF/Ud/evZRfSjMiuqPvJ+9uCncZnH28EM7e WVNJo9k2iL6CK0BWRLRzLJ77CgjQypL8I0QuesNuAnZjnJA0165w/3vS6rDP3rmp dPq64GBB4FIqlYp8p7dmLsni9L7M0bA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:16 2025 by rpki-client