$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa File: 571768c7-1a06-3657-84a4-df54cd111858.roa (raw, json) Hash identifier: 1qHYC9ErQjQjxf4NgunnHVZ5RRZJ2KbM8oWe4KkGqec= Subject key identifier: F7:D0:F9:B0:5E:AF:9E:1A:5C:51:DB:21:6A:C8:29:8E:C4:93:ED:4E Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584BBA10590CB5BE3477B5FD4060 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 54535 IP address blocks: 156.53.198.0/24 maxlen: 24 156.53.199.0/24 maxlen: 24 156.53.224.0/23 maxlen: 23 156.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:59:0c:b5:be:34:77:b5:fd:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=dd6d0431-1388-4b2c-b889-739ac32700a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:11:bf:04:f6:6b:bc:f2:5b:a4:1e:bb:88:1f: b1:93:46:d1:b9:9f:e0:7f:09:2a:ce:81:18:ef:5c: e6:5d:e4:20:3f:a9:6c:d0:66:6a:9f:73:dc:1f:ef: 62:a0:1f:c5:58:fe:4f:3c:a6:8b:b6:19:8d:97:d8: 40:7b:ff:4a:18:73:45:62:4b:04:86:d2:82:85:72: 50:0e:7d:c8:d8:3a:06:75:68:01:5c:d1:e2:65:6e: 06:cf:00:f9:8e:1c:6b:18:b0:48:41:2b:d1:ed:40: ac:69:b7:39:6b:cd:91:1d:ac:5a:85:d6:b8:ec:ba: 6a:ef:14:b5:f4:9e:30:29:c5:a2:fa:dc:38:e5:13: ed:6e:a1:e7:66:d8:9d:19:a2:d9:b3:b3:92:46:e0: d0:8c:f9:99:38:74:47:90:49:f8:11:f5:34:c7:ec: e4:00:b5:c3:ad:7d:d3:c5:a1:77:4e:df:c8:70:81: 7e:ee:35:3e:60:33:be:46:47:00:49:d8:4a:a1:51: b5:8b:31:5f:98:ad:68:40:3c:a4:df:6b:d3:11:d6: b8:c3:7a:6a:56:66:63:a5:be:b3:dc:a2:4d:a7:53: 8d:2c:e8:5f:4e:0f:a6:a4:99:fc:57:29:f2:2f:13: 29:f7:65:1b:de:9c:a0:23:89:05:a7:3d:75:8a:83: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:F9:B0:5E:AF:9E:1A:5C:51:DB:21:6A:C8:29:8E:C4:93:ED:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.198.0/23 156.53.224.0/23 156.53.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e9:3a:cd:2a:a7:15:5b:bb:4a:75:9b:58:27:34:3d:f3:0c: f1:33:7e:ba:e7:7a:ae:aa:74:4d:8d:f6:97:c5:88:30:71:db: 2a:b3:e8:ca:53:03:e4:c4:8f:c6:2a:b0:32:0f:79:40:a6:c1: 11:ce:bd:00:84:c5:20:8d:4a:2f:7e:ff:a6:4e:c6:91:46:17: 83:2c:58:6f:f4:f7:e3:17:00:f1:8f:8b:92:4a:e1:d7:2d:d4: 0b:9b:ec:e8:8f:4a:c0:b9:88:b5:1c:83:bf:fa:89:8d:14:6d: 2c:4a:cc:c6:ba:92:93:72:11:ce:cb:62:c1:7b:14:a4:13:9e: e3:d5:db:a3:9f:c8:0a:39:37:3d:b9:0b:0c:13:c0:63:c9:e1: 12:58:88:be:46:d4:35:e9:bc:8e:c6:fc:28:53:1b:6f:51:9f: 17:c0:df:1c:a2:2c:11:86:c4:ef:d8:9e:94:b6:ed:f8:7e:fa: f5:20:5b:ed:90:5b:21:b3:6a:55:45:77:f8:78:10:c3:44:4b: 6d:60:73:e4:c4:35:cf:10:8a:c1:48:95:3e:0d:88:d2:9d:a2: 9b:cf:d7:18:b8:94:00:31:6d:a2:44:28:c2:6a:46:84:06:d5: 87:02:92:5e:69:c3:9d:27:d0:bc:cf:95:33:1b:37:e7:0f:77: 6e:c7:bf:f2 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu6EFkMtb40d7X9QGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGQ2ZDA0MzEtMTM4OC00YjJjLWI4ODktNzM5YWMzMjcwMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hG/BPZrvPJbpB67iB+xk0bRuZ/gfwkqzoEY 71zmXeQgP6ls0GZqn3PcH+9ioB/FWP5PPKaLthmNl9hAe/9KGHNFYksEhtKChXJQ Dn3I2DoGdWgBXNHiZW4GzwD5jhxrGLBIQSvR7UCsabc5a82RHaxahda47Lpq7xS1 9J4wKcWi+tw45RPtbqHnZtidGaLZs7OSRuDQjPmZOHRHkEn4EfU0x+zkALXDrX3T xaF3Tt/IcIF+7jU+YDO+RkcASdhKoVG1izFfmK1oQDyk32vTEda4w3pqVmZjpb6z 3KJNp1ONLOhfTg+mpJn8VynyLxMp92Ub3pygI4kFpz11ioPCnwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPfQ+bBer54aXFHbIWrIKY7Ek+1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvNTcxNzY4YzctMWEwNi0z NjU3LTg0YTQtZGY1NGNkMTExODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXGAwQB nDXgAwQCnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAI3pOs0qpxVbu0p1m1gnND3zDPEzfrrneq6qdE2N 9pfFiDBx2yqz6MpTA+TEj8YqsDIPeUCmwRHOvQCExSCNSi9+/6ZOxpFGF4MsWG/0 9+MXAPGPi5JK4dct1Aub7OiPSsC5iLUcg7/6iY0UbSxKzMa6kpNyEc7LYsF7FKQT nuPV26OfyAo5Nz25CwwTwGPJ4RJYiL5G1DXpvI7G/ChTG29RnxfA3xyiLBGGxO/Y npS27fh++vUgW+2QWyGzalVFd/h4EMNES21gc+TENc8QisFIlT4NiNKdopvP1xi4 lAAxbaJEKMJqRoQG1YcCkl5pw50n0LzPlTMbN+cPd27Hv/I= -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:12 2025 by rpki-client