$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/0e60e648-d0ee-310e-865a-eb808c283eda.roa File: 0e60e648-d0ee-310e-865a-eb808c283eda.roa (raw, json) Hash identifier: X0ydD8mRm7T0aek7u2jPwEPlODE3qMJAB2jQLXCT5zk= Subject key identifier: 1A:E6:13:6C:E2:57:05:B7:66:E8:78:52:5B:D1:CC:8A:F6:90:33:32 Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Certificate serial: 010D0C9F4328584BBE40394D0DB8218CA285EB6F Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/0e60e648-d0ee-310e-865a-eb808c283eda.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 26395 IP address blocks: 159.222.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:39:4d:0d:b8:21:8c:a2:85:eb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5a9c018e-965d-4177-a053-217e5c079a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:c7:a2:84:48:da:64:48:95:37:3f:ae:aa: 14:64:70:24:9b:d7:61:ab:2e:1e:42:e3:c7:a3:02: 3a:5e:c7:36:f8:4f:d0:5d:8d:e9:00:5e:74:e2:66: 0b:ac:48:ae:b3:47:7e:0d:8b:95:15:1f:7c:11:dc: 9e:9c:0f:0b:3b:b1:f1:71:70:0e:52:e0:3d:a5:aa: 88:e2:30:bb:cb:66:8a:64:8a:7b:70:5f:60:54:7e: d8:1a:79:d5:85:c6:5a:31:8a:45:e0:77:bf:09:b2: ec:6f:d3:06:b8:c0:70:35:67:7f:cf:96:c7:77:b8: f0:6c:23:46:73:1e:f3:90:ba:5f:76:49:a9:15:d1: 24:93:f4:58:47:4d:c4:65:d2:c4:43:17:7c:b2:8b: dd:11:d1:9f:71:f2:86:08:11:83:75:95:33:b8:52: 72:93:6d:d5:61:f7:d4:41:a3:e3:46:7a:2a:ec:0f: 75:85:a4:4e:ad:cd:85:3a:6a:21:1c:d7:94:cb:cb: 40:34:df:9a:25:e9:87:d4:da:7b:34:a2:16:2c:17: d5:d2:5c:a5:87:5a:28:30:5e:14:b3:75:80:a1:4f: 77:00:de:bf:17:98:73:2a:58:35:5d:6a:bb:7d:96: 1a:ea:19:c3:57:39:c7:73:bc:41:73:76:e5:c2:7f: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:13:6C:E2:57:05:B7:66:E8:78:52:5B:D1:CC:8A:F6:90:33:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/0e60e648-d0ee-310e-865a-eb808c283eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl X509v3 Authority Key Identifier: keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer sbgp-ipAddrBlock: critical IPv4: 159.222.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:72:43:7d:c7:c0:ac:55:65:58:c2:23:5f:41:8e:ff:08:2e: 8b:24:53:fd:c4:f1:30:8c:6a:3b:3f:c9:64:a0:e1:ee:ae:ee: b7:09:ac:9d:01:92:95:e6:cc:b8:5e:6b:f1:bf:a1:6f:f9:e5: 80:db:59:cf:ca:36:f8:94:3f:5e:90:e2:fb:94:e7:a4:4b:4d: 9c:ad:50:a9:c2:6d:01:64:9f:bb:f0:77:87:15:01:17:04:b7: 91:a0:bc:30:12:52:cb:48:fb:5c:5a:ee:78:f0:28:89:d1:44: 89:57:74:46:bb:c7:a8:e9:3b:74:a3:46:53:49:fd:7a:55:47: be:26:f0:d1:07:71:f6:84:b6:e0:61:1d:e0:28:e2:72:c3:b2: 4b:08:a1:6d:8d:ac:5d:cb:84:b0:9e:f8:a4:57:b9:22:1e:2c: b3:19:36:eb:73:99:57:a3:84:1f:43:06:91:05:9f:23:15:bc: 47:44:5a:3b:14:a3:fa:db:43:40:16:fd:88:d5:1b:a0:69:b7: c5:96:50:ff:8a:5e:da:1b:e2:4a:d7:aa:89:f8:47:c4:74:f7: 36:53:bb:a8:b8:7a:e9:79:a0:39:cd:d9:00:99:68:d9:cf:88: 91:0e:92:7c:84:d3:5c:38:b5:5d:c4:06:6a:65:be:e3:9f:72: 33:a7:36:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDlNDbghjKKF628wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNlZTU2OGQtZWIwMC00NzhjLWI0ODYtZGIzZjVkNjJj YmYzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NWE5YzAxOGUtOTY1ZC00MTc3LWEwNTMtMjE3ZTVjMDc5YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9HHooRI2mRIlTc/rqoUZHAkm9dhqy4eQuPH owI6Xsc2+E/QXY3pAF504mYLrEius0d+DYuVFR98EdyenA8LO7HxcXAOUuA9paqI 4jC7y2aKZIp7cF9gVH7YGnnVhcZaMYpF4He/CbLsb9MGuMBwNWd/z5bHd7jwbCNG cx7zkLpfdkmpFdEkk/RYR03EZdLEQxd8sovdEdGfcfKGCBGDdZUzuFJyk23VYffU QaPjRnoq7A91haROrc2FOmohHNeUy8tANN+aJemH1Np7NKIWLBfV0lylh1ooMF4U s3WAoU93AN6/F5hzKlg1XWq7fZYa6hnDVznHc7xBc3blwn+zUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrmE2ziVwW3Zuh4UlvRzIr2kDMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lY2Vl NTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNmNWQ2MmNiZjMvMGU2MGU2NDgtZDBlZS0z MTBlLTg2NWEtZWI4MDhjMjgzZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWNlZTU2OGQtZWIwMC00NzhjLWI0 ODYtZGIzZjVkNjJjYmYzL2VjZWU1NjhkLWViMDAtNDc4Yy1iNDg2LWRiM2Y1ZDYy Y2JmMy5jcmwwHwYDVR0jBBgwFoAU3ezBYmsWKE4/m1LGgwTF1nWApUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lY2VlNTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNm NWQ2MmNiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn965MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJyQ33HwKxVZVjCI19Bjv8ILoskU/3E8TCMajs/yWSg4e6u7rcJrJ0B kpXmzLhea/G/oW/55YDbWc/KNviUP16Q4vuU56RLTZytUKnCbQFkn7vwd4cVARcE t5GgvDASUstI+1xa7njwKInRRIlXdEa7x6jpO3SjRlNJ/XpVR74m8NEHcfaEtuBh HeAo4nLDsksIoW2NrF3LhLCe+KRXuSIeLLMZNutzmVejhB9DBpEFnyMVvEdEWjsU o/rbQ0AW/YjVG6Bpt8WWUP+KXtob4krXqon4R8R09zZTu6i4eul5oDnN2QCZaNnP iJEOknyE01w4tV3EBmplvuOfcjOnNkc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:20:42 2025 by rpki-client