$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa File: d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa (raw, json) Hash identifier: ClQYmrlIGLasQaQJx4xp8hKdkMDmNFA6MBI5T+h+KS8= Subject key identifier: CE:29:E8:68:9F:0F:65:99:26:EE:23:1B:FC:81:27:BD:AC:44:44:3B Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584BA7CCE384DA77BC84A71EC180 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 157.239.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e3:84:da:77:bc:84:a7:1e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=cec30ac0-5056-4d78-ad21-0d2b9398e8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:68:1e:69:0f:33:73:7a:99:e1:5c:d1:2e: 06:3c:b3:3a:7b:a7:15:3e:0f:ef:cf:0e:24:58:1b: de:cf:b0:c3:fc:70:8d:53:86:03:dd:ab:25:5b:30: 53:ec:ae:bf:00:fb:b9:82:35:f0:5a:d6:9c:b6:80: 50:23:11:0c:03:70:23:80:c7:07:ec:12:b5:86:3f: 5a:f1:8f:ae:c3:d4:57:f7:f5:9a:02:d7:4c:b6:c8: a7:b3:c0:fd:c6:f0:5a:66:28:ea:63:56:82:d6:e9: 60:5f:78:f7:da:1e:a9:4d:39:20:cb:d0:2b:12:c1: 74:ef:01:c5:bb:19:a6:6c:b0:ec:75:7f:2b:55:39: 63:c2:79:32:fe:57:8b:e3:b1:98:51:07:7e:06:ce: ef:a5:41:87:9f:3c:c9:0d:45:ba:b1:4d:70:c2:7f: 13:99:ee:b4:d0:41:8d:aa:4a:da:d5:56:29:36:e0: bd:e4:e7:b1:06:b4:52:69:d9:52:2c:3f:63:4f:2a: a7:67:af:e7:a1:d2:fa:f6:bc:27:3c:43:55:75:ca: 53:1f:6b:cc:38:7a:c0:75:04:b9:f3:88:c1:f8:ef: a6:23:1a:4b:14:a5:ee:16:9d:89:bc:87:69:cc:23: 71:9a:3d:ed:05:04:e4:1c:e0:82:8d:eb:e6:31:5d: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:29:E8:68:9F:0F:65:99:26:EE:23:1B:FC:81:27:BD:AC:44:44:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a4:93:19:e0:2a:bf:8e:c2:45:7b:70:8b:43:53:c1:ac:ef: 33:ec:6d:67:d0:04:df:3e:60:24:16:77:62:b1:75:5c:e8:1f: 0c:d3:e4:80:65:c2:e2:2e:b1:85:dc:c1:2e:60:76:a5:d0:8b: ae:85:a8:10:57:43:e2:a2:b8:20:25:c3:fd:90:0d:3d:68:9c: 28:88:c4:c6:46:a9:93:60:01:b9:e5:cc:d4:6e:cc:58:67:cf: c8:61:c9:88:c0:8a:cd:0c:5a:e3:0e:1d:60:fe:b9:aa:2b:f5: a3:50:e6:84:55:8e:ac:8d:06:ce:ed:2c:42:ad:bf:36:aa:0f: c0:3b:bc:52:34:9a:09:39:34:05:d7:78:e8:7b:54:d3:a9:28: 4c:68:35:19:67:2a:c0:f2:19:be:9d:de:e7:c3:11:56:4a:17: d7:e6:58:e7:bc:11:79:9c:8d:5a:9e:1e:37:02:1f:4a:d8:dd: 21:a0:fa:6d:69:93:7f:af:50:43:b6:a4:c3:21:bb:2b:bf:aa: 4b:fa:48:67:55:ba:b4:aa:95:2d:86:0b:9a:80:f0:2b:ce:b2: 00:5d:f5:64:ca:fa:99:15:ab:b3:6a:fd:5a:aa:b5:bc:ef:2b: 54:df:08:3c:83:90:df:c9:4e:bc:5c:5d:2f:52:8b:70:d3:87: 8f:95:12:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOOE2ne8hKcewYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Y2VjMzBhYzAtNTA1Ni00ZDc4LWFkMjEtMGQyYjkzOThlOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OloHmkPM3N6meFc0S4GPLM6e6cVPg/vzw4k WBvez7DD/HCNU4YD3aslWzBT7K6/APu5gjXwWtactoBQIxEMA3AjgMcH7BK1hj9a 8Y+uw9RX9/WaAtdMtsins8D9xvBaZijqY1aC1ulgX3j32h6pTTkgy9ArEsF07wHF uxmmbLDsdX8rVTljwnky/leL47GYUQd+Bs7vpUGHnzzJDUW6sU1wwn8Tme600EGN qkra1VYpNuC95OexBrRSadlSLD9jTyqnZ6/nodL69rwnPENVdcpTH2vMOHrAdQS5 84jB+O+mIxpLFKXuFp2JvIdpzCNxmj3tBQTkHOCCjevmMV0BfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4p6GifD2WZJu4jG/yBJ72sREQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZDJjOGFiZjEtZTM2My0z ZjlmLTg4MDgtYmY2ODdiYzU5ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFikkxngKr+OwkV7cItDU8Gs7zPsbWfQBN8+YCQWd2KxdVzoHwzT5IBl wuIusYXcwS5gdqXQi66FqBBXQ+KiuCAlw/2QDT1onCiIxMZGqZNgAbnlzNRuzFhn z8hhyYjAis0MWuMOHWD+uaor9aNQ5oRVjqyNBs7tLEKtvzaqD8A7vFI0mgk5NAXX eOh7VNOpKExoNRlnKsDyGb6d3ufDEVZKF9fmWOe8EXmcjVqeHjcCH0rY3SGg+m1p k3+vUEO2pMMhuyu/qkv6SGdVurSqlS2GC5qA8CvOsgBd9WTK+pkVq7Nq/Vqqtbzv K1TfCDyDkN/JTrxcXS9Si3DTh4+VEtE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:53 2025 by rpki-client