$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d7271296-6190-328c-b419-75acc3fc495a.roa File: d7271296-6190-328c-b419-75acc3fc495a.roa (raw, json) Hash identifier: pdWrEKenzGflqDq93w2eZnJHCaRKRttScPSSe8eexk0= Subject key identifier: A1:74:B7:AE:67:B7:99:85:DD:B3:92:59:A7:65:2E:83:64:0D:21:29 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584BAA97B4A451D0564ADD8A3300 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d7271296-6190-328c-b419-75acc3fc495a.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396982 IP address blocks: 157.239.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b4:a4:51:d0:56:4a:dd:8a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=53b98d6c-9a0c-46dc-bc2e-82b8db1962eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:2d:a5:d6:c2:9e:5d:10:09:74:63:97:9f: 50:1d:ca:7c:45:27:06:99:5c:f3:cd:65:be:c3:d3: 92:b4:c3:8b:2a:ea:07:d3:0c:33:2d:18:f5:1f:bf: a6:05:3d:85:f4:3f:25:62:bf:49:e3:ab:8f:91:08: 3b:9d:e4:3c:5c:9b:d0:03:0b:09:04:6e:55:86:65: cf:b4:e4:0e:45:31:32:50:05:12:bd:49:34:24:9a: aa:a3:08:b0:28:b1:b2:af:0e:4c:01:47:92:d9:46: 50:9f:62:7d:20:f6:88:20:58:ea:73:7e:ec:9b:b1: 14:49:55:ab:23:3f:e8:29:72:8f:1d:86:7c:58:ef: 32:6a:d0:2a:21:40:60:f9:7b:15:e3:6c:ea:e0:2f: c9:d1:5c:74:ba:9c:a0:58:f9:c9:de:98:11:75:73: dd:c9:12:bf:c8:19:a1:43:1b:98:00:b3:00:1c:a0: d8:f1:4e:3a:48:45:64:52:1a:35:0c:34:94:f9:71: a3:ca:72:c0:d3:d6:2f:75:f7:d9:34:3e:15:c0:01: ca:56:7b:98:7c:bc:52:26:19:21:04:05:36:07:7d: dd:57:17:3a:13:91:e0:62:94:31:96:ba:5d:11:82: b3:56:1a:95:6e:7b:d0:43:ca:3a:8f:e2:a3:a7:ca: 50:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:74:B7:AE:67:B7:99:85:DD:B3:92:59:A7:65:2E:83:64:0D:21:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d7271296-6190-328c-b419-75acc3fc495a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b0:aa:f9:08:e1:b0:bd:fe:4b:83:56:6c:21:cf:db:20:a3: 1b:4e:38:96:ef:23:6d:2f:c0:1f:88:ed:d2:e5:11:6d:32:f5: fe:17:fb:56:ef:75:b6:f6:d3:21:d3:7b:5a:45:61:47:cf:4f: 6f:92:41:19:d8:e8:25:16:f5:c8:1c:cf:0c:bd:2b:c2:8e:d6: 09:3c:66:18:e3:46:b3:b5:52:da:d4:11:d7:25:e0:4a:4e:e6: 8f:51:85:7e:0f:dc:52:4c:69:6f:f3:f0:44:e8:dc:a7:1f:73: d3:79:93:88:bf:55:8a:a6:d7:58:df:ce:33:14:c7:24:23:69: c4:ff:8d:4e:56:64:83:fb:a0:49:7a:50:2e:d1:62:19:de:53: 79:5a:ad:ed:24:4b:76:29:5b:e4:7f:67:f9:32:a8:e1:5c:01: b7:22:ca:9c:56:88:3f:db:6c:f5:6e:4a:01:ad:28:ad:d9:4d: 9e:1a:99:c2:ee:89:34:9a:bb:0c:8f:42:83:2c:f6:bf:07:f7: a8:a9:ee:b2:a4:ff:05:f5:5f:11:91:c5:34:68:b4:a7:a7:4e: 3c:0d:b5:88:a4:fe:01:80:2c:31:30:5c:e2:ea:66:83:6f:c0: f5:38:01:22:a6:f1:bc:b9:57:aa:2a:5c:d6:c9:8e:36:cf:dd: b4:08:ee:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7SkUdBWSt2KMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NTNiOThkNmMtOWEwYy00NmRjLWJjMmUtODJiOGRiMTk2MmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggwtpdbCnl0QCXRjl59QHcp8RScGmVzzzWW+ w9OStMOLKuoH0wwzLRj1H7+mBT2F9D8lYr9J46uPkQg7neQ8XJvQAwsJBG5VhmXP tOQORTEyUAUSvUk0JJqqowiwKLGyrw5MAUeS2UZQn2J9IPaIIFjqc37sm7EUSVWr Iz/oKXKPHYZ8WO8yatAqIUBg+XsV42zq4C/J0Vx0upygWPnJ3pgRdXPdyRK/yBmh QxuYALMAHKDY8U46SEVkUho1DDSU+XGjynLA09YvdffZND4VwAHKVnuYfLxSJhkh BAU2B33dVxc6E5HgYpQxlrpdEYKzVhqVbnvQQ8o6j+Kjp8pQ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF0t65nt5mF3bOSWadlLoNkDSEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZDcyNzEyOTYtNjE5MC0z MjhjLWI0MTktNzVhY2MzZmM0OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADewqvkI4bC9/kuDVmwhz9sgoxtOOJbvI20vwB+I7dLlEW0y9f4X+1bv dbb20yHTe1pFYUfPT2+SQRnY6CUW9cgczwy9K8KO1gk8ZhjjRrO1UtrUEdcl4EpO 5o9RhX4P3FJMaW/z8ETo3Kcfc9N5k4i/VYqm11jfzjMUxyQjacT/jU5WZIP7oEl6 UC7RYhneU3lare0kS3YpW+R/Z/kyqOFcAbciypxWiD/bbPVuSgGtKK3ZTZ4amcLu iTSauwyPQoMs9r8H96ip7rKk/wX1XxGRxTRotKenTjwNtYik/gGALDEwXOLqZoNv wPU4ASKm8by5V6oqXNbJjjbP3bQI7mI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:09 2025 by rpki-client