$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa File: 8943ba76-2440-3676-bc94-655519f6b1ba.roa (raw, json) Hash identifier: KWi9NzearhGQrp/NmtindKI8/wK6w3tztEgKrUy4xdU= Subject key identifier: B7:C7:CD:0D:1D:BA:83:06:66:71:77:AB:C5:87:5D:CC:FD:53:BE:0C Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584B63673A2D5B9066507A3B2500 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 10384 IP address blocks: 152.85.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3a:2d:5b:90:66:50:7a:3b:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=971b160f-813a-4a5f-b1ae-e8f8080a8ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:75:a5:ba:6e:0c:8e:10:8d:82:48:5f:c5: 5b:c5:29:54:88:45:37:14:9b:92:da:b9:ab:79:ef: f5:1b:3c:35:d2:6e:16:be:46:54:81:01:61:0f:50: 9e:6f:a7:6b:92:75:ce:28:1f:79:b8:c6:1c:da:af: 35:36:ba:db:08:b0:59:d4:8c:05:d0:31:f3:86:7f: fe:15:2a:c6:13:e1:ad:98:9b:75:4c:a4:39:95:d1: 49:9e:c7:a4:f9:4c:ce:ba:64:4d:0d:77:48:42:3d: 0c:36:3c:19:77:14:4a:d4:a1:13:d8:be:13:fd:cf: 3f:88:3e:df:b4:90:9c:23:68:c9:6b:1d:f0:64:37: 47:08:64:17:75:66:5d:6a:52:4a:dc:5c:9e:a0:17: 44:b8:54:04:fa:6e:73:61:06:53:e6:e9:dc:37:be: 14:96:07:df:25:e0:51:54:15:13:22:2f:4e:13:6b: 47:42:84:38:55:b8:b4:6b:18:56:ce:75:49:3a:db: af:04:57:88:8c:f6:c0:17:ab:f1:bd:d3:b9:e0:99: fa:b3:52:1b:c6:f3:ec:fa:69:ca:56:a6:32:4e:6a: 6e:a6:fb:dc:4e:93:0f:12:70:1c:8f:f8:77:98:d1: 23:b1:c3:f3:a8:a8:14:0c:9a:78:0a:e7:8c:8f:11: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C7:CD:0D:1D:BA:83:06:66:71:77:AB:C5:87:5D:CC:FD:53:BE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9e:94:c3:ce:c3:29:2e:3b:a0:5b:ca:38:3a:a9:eb:a2:11: d9:06:5a:25:d7:f3:5e:ed:71:2c:1d:5c:74:81:6c:0c:94:ec: 63:b2:e5:81:76:eb:b7:0a:64:f8:bd:90:d1:34:91:2e:a1:0c: bb:8b:00:f5:fe:2b:2e:6e:47:d5:42:b6:e8:80:73:a1:f9:8c: 85:64:93:97:83:98:15:0c:39:be:30:b2:2c:3d:2f:b6:1a:65: 60:e2:87:a6:9e:88:7c:b7:cb:fb:7c:36:a9:14:6e:21:27:7a: 8f:4e:a1:cd:0b:41:c4:a0:f1:3f:46:1e:e2:6c:5c:d2:fb:dd: 36:6d:ac:bf:3e:ff:48:b3:54:b0:a4:d1:32:ab:2b:d9:e7:e3: 19:ce:93:08:3a:20:ed:c7:0b:f5:80:ba:e9:f8:f7:00:99:65: 6f:fb:9d:1a:75:f0:77:a4:e5:ca:09:3c:d8:ae:91:88:bd:4c: 68:1a:62:ee:b5:f4:ed:b9:93:aa:34:b2:83:44:68:b0:30:6d: bc:19:61:b2:fc:ce:56:55:69:ae:47:30:12:4f:d3:48:75:30: 46:ca:08:ca:4c:84:3b:bf:69:51:d0:69:10:4b:18:db:0b:ce: fe:5f:22:40:2c:0a:f0:d7:2a:52:d2:15:b3:dc:35:d5:e2:cb: c8:c2:b1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzotW5BmUHo7JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OTcxYjE2MGYtODEzYS00YTVmLWIxYWUtZThmODA4MGE4ZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliB1pbpuDI4QjYJIX8VbxSlUiEU3FJuS2rmr ee/1Gzw10m4WvkZUgQFhD1Ceb6drknXOKB95uMYc2q81NrrbCLBZ1IwF0DHzhn/+ FSrGE+GtmJt1TKQ5ldFJnsek+UzOumRNDXdIQj0MNjwZdxRK1KET2L4T/c8/iD7f tJCcI2jJax3wZDdHCGQXdWZdalJK3FyeoBdEuFQE+m5zYQZT5uncN74UlgffJeBR VBUTIi9OE2tHQoQ4Vbi0axhWznVJOtuvBFeIjPbAF6vxvdO54Jn6s1IbxvPs+mnK VqYyTmpupvvcTpMPEnAcj/h3mNEjscPzqKgUDJp4CueMjxHczQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfHzQ0duoMGZnF3q8WHXcz9U74MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvODk0M2JhNzYtMjQ0MC0z Njc2LWJjOTQtNjU1NTE5ZjZiMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKelMPOwykuO6Bbyjg6qeuiEdkGWiXX817tcSwdXHSBbAyU7GOy5YF2 67cKZPi9kNE0kS6hDLuLAPX+Ky5uR9VCtuiAc6H5jIVkk5eDmBUMOb4wsiw9L7Ya ZWDih6aeiHy3y/t8NqkUbiEneo9Ooc0LQcSg8T9GHuJsXNL73TZtrL8+/0izVLCk 0TKrK9nn4xnOkwg6IO3HC/WAuun49wCZZW/7nRp18Hek5coJPNiukYi9TGgaYu61 9O25k6o0soNEaLAwbbwZYbL8zlZVaa5HMBJP00h1MEbKCMpMhDu/aVHQaRBLGNsL zv5fIkAsCvDXKlLSFbPcNdXiy8jCsao= -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:24 2025 by rpki-client