$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa File: a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa (raw, json) Hash identifier: SGR49hu3gLbEzhAp2E/meIQMHYAxkW0N9zr6Ixo2Y7k= Subject key identifier: 73:86:DB:A9:06:49:89:68:8D:D3:C1:C5:D7:37:34:57:02:E9:64:C7 Certificate issuer: /CN=c1ca327a-71b9-47e5-b718-53788c38e86c Certificate serial: 010D0C9F4328584BC270429E673A6B3D003E3940 Authority key identifier: CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 399821 IP address blocks: 159.112.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:42:9e:67:3a:6b:3d:00:3e:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ca327a-71b9-47e5-b718-53788c38e86c Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=3b425005-645a-4f08-9ec7-528fb9419b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:3e:dc:0b:ce:3d:dd:47:43:b8:ce:2a:5b: 18:b7:13:be:91:b8:8c:62:a3:59:c9:7b:0d:76:b8: a1:19:bb:d2:78:82:a8:26:1e:b3:29:94:30:e0:f6: 9d:a5:74:cc:b3:81:de:5c:98:ab:80:bb:ee:73:bd: 29:67:b3:49:d4:6d:c1:65:82:79:a8:1c:dc:85:4f: 6a:df:85:d0:47:96:2a:5a:fd:25:63:26:f3:7f:d6: 62:21:53:92:79:10:5e:bb:55:5b:26:5b:1a:6e:c3: 5f:46:86:43:f5:91:54:ae:a6:c3:cb:88:68:96:31: f5:be:76:f5:1c:69:ac:d9:03:9c:d0:e6:a9:08:a5: 41:76:c3:8b:7c:da:a3:54:19:ae:44:58:5a:16:93: ee:02:b7:9e:ec:86:9a:ab:f4:f8:b7:36:bc:0c:2c: ea:ce:73:94:98:78:6d:b1:53:cf:53:86:f7:c5:2a: ba:35:7c:8c:b4:1e:fc:d4:4e:32:11:38:30:3d:a7: 21:eb:52:50:b5:a2:f7:e1:c3:1f:2f:0b:c0:10:34: bb:a4:6d:b4:1a:30:29:a4:96:05:6b:4f:83:b2:4a: eb:56:68:d7:22:70:a7:f6:e7:1d:e8:1d:75:10:54: 31:b1:6d:72:d2:02:17:15:24:9b:fe:6d:42:cf:14: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:86:DB:A9:06:49:89:68:8D:D3:C1:C5:D7:37:34:57:02:E9:64:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl X509v3 Authority Key Identifier: keyid:CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer sbgp-ipAddrBlock: critical IPv4: 159.112.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:79:2b:1f:0c:18:0b:4b:9e:e1:d5:96:8b:50:c6:46:67:2f: 92:1d:87:7a:e6:da:66:ba:34:b0:0a:2d:df:56:5d:18:79:fd: 79:22:66:1d:82:6c:c7:12:32:a8:30:f0:08:08:21:1a:72:92: 77:a6:b8:fd:d9:82:60:57:29:6b:c6:91:52:04:42:97:3d:07: 8c:5b:cf:1e:fb:cd:97:f0:2c:07:78:e8:5c:f5:df:8b:c8:02: d4:17:09:c8:b8:e1:37:f5:43:3a:17:23:db:2d:c5:d4:57:56: 41:96:fb:9e:c9:8c:f8:50:af:50:e5:77:ec:69:7c:ee:8e:c8: 81:e0:91:f2:df:32:fe:1b:e3:0a:91:77:4f:d5:a9:d7:2e:05: 25:71:68:5d:37:31:11:76:f6:0c:07:ef:b9:82:aa:26:d9:03: 66:58:9d:94:db:0b:53:96:17:df:ca:19:be:76:b2:74:47:26: 12:70:55:8d:1f:31:61:83:d7:f2:67:ed:cd:fe:ab:0f:fa:e5: 1d:5f:cb:be:1c:ca:17:d1:1b:b5:1f:2a:d4:cd:23:43:e1:76: 2f:4b:9b:0d:f6:66:c8:1e:89:d0:66:86:bf:ab:a0:a6:8a:b4: 9e:16:21:9f:6e:58:6d:44:37:41:85:2a:26:a7:1b:ab:99:6a: ae:81:06:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcEKeZzprPQA+OUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjYTMyN2EtNzFiOS00N2U1LWI3MTgtNTM3ODhjMzhl ODZjMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk M2I0MjUwMDUtNjQ1YS00ZjA4LTllYzctNTI4ZmI5NDE5YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxw+3AvOPd1HQ7jOKlsYtxO+kbiMYqNZyXsN drihGbvSeIKoJh6zKZQw4PadpXTMs4HeXJirgLvuc70pZ7NJ1G3BZYJ5qBzchU9q 34XQR5YqWv0lYybzf9ZiIVOSeRBeu1VbJlsabsNfRoZD9ZFUrqbDy4holjH1vnb1 HGms2QOc0OapCKVBdsOLfNqjVBmuRFhaFpPuAree7Iaaq/T4tza8DCzqznOUmHht sVPPU4b3xSq6NXyMtB781E4yETgwPach61JQtaL34cMfLwvAEDS7pG20GjAppJYF a0+DskrrVmjXInCn9ucd6B11EFQxsW1y0gIXFSSb/m1CzxRRrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOG26kGSYlojdPBxdc3NFcC6WTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jMWNh MzI3YS03MWI5LTQ3ZTUtYjcxOC01Mzc4OGMzOGU4NmMvYTZjMzE0YmMtZTg4OS0z Y2NlLTlmNjktZGRhY2ViYjBkMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzFjYTMyN2EtNzFiOS00N2U1LWI3 MTgtNTM3ODhjMzhlODZjL2MxY2EzMjdhLTcxYjktNDdlNS1iNzE4LTUzNzg4YzM4 ZTg2Yy5jcmwwHwYDVR0jBBgwFoAUzEihtiYbHxx9y9mplUuuEsc/mZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jMWNhMzI3YS03MWI5LTQ3ZTUtYjcxOC01Mzc4 OGMzOGU4NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3DqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR5Kx8MGAtLnuHVlotQxkZnL5Idh3rm2ma6NLAKLd9WXRh5/XkiZh2C bMcSMqgw8AgIIRpyknemuP3ZgmBXKWvGkVIEQpc9B4xbzx77zZfwLAd46Fz134vI AtQXCci44Tf1QzoXI9stxdRXVkGW+57JjPhQr1Dld+xpfO6OyIHgkfLfMv4b4wqR d0/VqdcuBSVxaF03MRF29gwH77mCqibZA2ZYnZTbC1OWF9/KGb52snRHJhJwVY0f MWGD1/Jn7c3+qw/65R1fy74cyhfRG7UfKtTNI0Phdi9Lmw32ZsgeidBmhr+roKaK tJ4WIZ9uWG1EN0GFKianG6uZaq6BBp8= -----END CERTIFICATE-----Generated at Thu Nov 6 00:24:38 2025 by rpki-client