$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/f63511c5-7fd8-3344-bc95-d5914953a877.roa File: f63511c5-7fd8-3344-bc95-d5914953a877.roa (raw, json) Hash identifier: UalOvT4yVmJSW3D200CPv1AkcRl+e6W3q6UUoX+xcuA= Subject key identifier: 1A:6F:62:7C:2A:59:D0:BB:4B:F5:31:40:04:21:71:7E:15:76:55:A6 Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Certificate serial: 010D0C9F4328584B959DAFFF90512B6A4B0A1B00 Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/f63511c5-7fd8-3344-bc95-d5914953a877.roa Signing time: Mon 20 Oct 2025 12:40:52 +0000 ROA not before: Mon 20 Oct 2025 12:40:52 +0000 ROA not after: Sun 18 Jan 2026 13:40:52 +0000 asID: 8075 IP address blocks: 159.222.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:9d:af:ff:90:51:2b:6a:4b:0a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Validity Not Before: Oct 20 12:40:52 2025 GMT Not After : Jan 18 13:40:52 2026 GMT Subject: CN=451a2635-5d33-47c5-8104-1ef87985bd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:80:59:22:3b:6b:33:b7:ad:62:82:ae:df: 1d:d7:4b:f1:d1:91:10:db:11:c3:85:15:90:32:00: ce:f6:43:01:c9:1e:15:b1:58:79:77:c6:27:14:49: 56:27:e5:20:54:6d:0c:f8:6c:c8:1e:e2:a7:5a:90: b2:04:98:e2:15:29:3a:39:e8:1a:38:ec:a4:e7:42: 67:d7:ba:e8:b7:91:fc:ed:42:b3:87:1f:ee:0e:01: 43:80:ee:d0:30:d1:3a:5a:a4:f3:d0:1b:82:84:17: 94:f6:47:77:06:43:75:39:e8:a9:38:04:d9:2b:af: b6:76:b1:8c:3c:bc:88:79:cf:81:a5:4d:0d:fe:98: b5:91:38:5b:6f:a1:53:c5:22:50:89:3a:47:26:33: 77:36:d7:c1:58:96:5c:94:1d:6e:ab:db:91:47:8a: 76:b4:8b:f2:43:be:09:31:63:cb:e3:9f:d4:c2:14: 3c:44:53:b8:25:44:82:28:3f:76:c4:23:55:ad:bc: 02:ba:41:36:82:a3:6f:79:a6:ae:84:05:21:24:fd: 4d:0a:90:4f:ec:ec:c0:01:03:b2:6c:95:4b:9c:84: a6:ff:34:90:e2:97:83:cc:b3:70:5f:e6:d0:07:ec: fc:88:60:80:25:87:a5:3e:07:b3:7c:f4:d1:53:f5: 1d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6F:62:7C:2A:59:D0:BB:4B:F5:31:40:04:21:71:7E:15:76:55:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/f63511c5-7fd8-3344-bc95-d5914953a877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl X509v3 Authority Key Identifier: keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer sbgp-ipAddrBlock: critical IPv4: 159.222.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a2:8c:7d:81:92:e5:30:f3:22:b9:99:31:a0:8c:7f:60:0c: cf:0b:43:0d:22:cf:bc:9d:c9:76:77:2e:5c:ba:1b:61:23:26: 7b:ef:86:f4:1e:a0:17:ba:22:6c:e5:e4:4f:f4:62:0f:1c:d0: 43:1c:bc:0a:54:5a:44:d9:88:bd:24:73:b5:56:0a:81:95:22: 8b:60:35:79:23:c8:66:87:c1:ca:ba:10:dd:04:23:fe:02:a8: 91:8e:69:43:3d:7d:00:1f:2f:ce:87:70:1a:d6:09:4d:56:8f: 53:ce:76:3e:b3:c3:3a:14:4c:80:8b:fe:6b:38:64:ec:20:a2: db:09:6f:07:c3:c1:88:45:9d:47:9d:fb:3e:af:96:18:75:db: e1:d9:c3:9f:55:c8:ee:6a:70:ec:b5:40:41:90:97:21:40:96: 31:9b:c5:8f:81:40:e8:61:25:a5:48:63:c7:bd:d5:f3:19:e3: b9:aa:d7:68:5c:6f:34:c6:a5:84:47:31:cd:95:95:c4:66:d3: 99:ad:c8:1e:a5:b4:ae:d0:02:96:7f:31:90:06:4f:10:bb:fc: 92:1c:c0:34:26:78:cb:c9:b6:81:86:9c:7c:d4:b8:5d:c1:58: 6a:26:e6:44:c7:98:93:17:84:8d:37:2d:29:96:c3:a8:15:a0: 5d:85:47:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVna//kFEraksKGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNlZTU2OGQtZWIwMC00NzhjLWI0ODYtZGIzZjVkNjJj YmYzMB4XDTI1MTAyMDEyNDA1MloXDTI2MDExODEzNDA1MlowLzEtMCsGA1UEAxMk NDUxYTI2MzUtNWQzMy00N2M1LTgxMDQtMWVmODc5ODViZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOaAWSI7azO3rWKCrt8d10vx0ZEQ2xHDhRWQ MgDO9kMByR4VsVh5d8YnFElWJ+UgVG0M+GzIHuKnWpCyBJjiFSk6OegaOOyk50Jn 17rot5H87UKzhx/uDgFDgO7QMNE6WqTz0BuChBeU9kd3BkN1OeipOATZK6+2drGM PLyIec+BpU0N/pi1kThbb6FTxSJQiTpHJjN3NtfBWJZclB1uq9uRR4p2tIvyQ74J MWPL45/UwhQ8RFO4JUSCKD92xCNVrbwCukE2gqNveaauhAUhJP1NCpBP7OzAAQOy bJVLnISm/zSQ4peDzLNwX+bQB+z8iGCAJYelPgezfPTRU/UdPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpvYnwqWdC7S/UxQAQhcX4VdlWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lY2Vl NTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNmNWQ2MmNiZjMvZjYzNTExYzUtN2ZkOC0z MzQ0LWJjOTUtZDU5MTQ5NTNhODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWNlZTU2OGQtZWIwMC00NzhjLWI0 ODYtZGIzZjVkNjJjYmYzL2VjZWU1NjhkLWViMDAtNDc4Yy1iNDg2LWRiM2Y1ZDYy Y2JmMy5jcmwwHwYDVR0jBBgwFoAU3ezBYmsWKE4/m1LGgwTF1nWApUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lY2VlNTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNm NWQ2MmNiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn96iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+ijH2BkuUw8yK5mTGgjH9gDM8LQw0iz7ydyXZ3Lly6G2EjJnvvhvQe oBe6Imzl5E/0Yg8c0EMcvApUWkTZiL0kc7VWCoGVIotgNXkjyGaHwcq6EN0EI/4C qJGOaUM9fQAfL86HcBrWCU1Wj1POdj6zwzoUTICL/ms4ZOwgotsJbwfDwYhFnUed +z6vlhh12+HZw59VyO5qcOy1QEGQlyFAljGbxY+BQOhhJaVIY8e91fMZ47mq12hc bzTGpYRHMc2VlcRm05mtyB6ltK7QApZ/MZAGTxC7/JIcwDQmeMvJtoGGnHzUuF3B WGom5kTHmJMXhI03LSmWw6gVoF2FR/k= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:03 2025 by rpki-client