$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa File: a31fe149-f14e-36f1-82c6-a4875e810e1b.roa (raw, json) Hash identifier: QzqxJw4EXmmkRXL6XsEPYz+5mf7cdYneehMZ1l26CTg= Subject key identifier: AF:E5:B6:A3:4D:D6:32:53:D0:AE:12:A8:DE:6D:72:B9:C0:CB:A1:D5 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584BBA1058F8A737F929F61543C0 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 54535 IP address blocks: 156.37.202.0/24 maxlen: 24 156.37.203.0/24 maxlen: 24 156.37.250.0/24 maxlen: 24 156.37.251.0/24 maxlen: 24 156.37.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:58:f8:a7:37:f9:29:f6:15:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=3507b2be-66c9-40b4-b49f-7cc37e1f440b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:3e:3e:ef:0b:41:bc:cc:9e:e6:b8:47:7f: 6b:a1:be:6d:18:3c:e4:11:ff:c2:fa:c6:c0:08:07: df:c5:52:03:21:09:bb:47:45:96:16:67:e9:03:f5: 04:b2:96:5d:7d:d4:e9:cd:e3:a0:46:66:b8:c4:c1: ac:4d:05:a9:fd:17:d2:ed:12:47:51:b1:f9:32:05: 7c:42:89:60:e1:a1:5c:32:8f:03:ef:0b:5b:52:ed: 90:a7:15:4a:46:28:83:0e:5f:b6:35:c3:29:a1:76: 16:6e:e4:0a:9f:29:16:9c:56:59:5b:0b:7c:0c:ce: 88:fe:87:68:c0:11:87:dc:fb:7e:90:78:b8:81:90: bf:a8:62:2b:49:d3:38:8e:55:c8:ad:99:5d:b7:de: bb:39:73:ae:f0:97:1a:ea:c0:52:d5:85:6e:ef:c0: 6b:46:82:f5:b3:dd:fc:25:bf:1c:d0:ee:d1:32:8f: 1e:bb:51:a8:66:89:dd:da:04:79:9b:62:6b:18:65: de:11:05:b4:b3:9e:6f:47:17:6d:d1:07:ec:37:2c: 06:fd:47:c3:1f:4e:9b:b7:bd:bf:d0:fa:5f:c5:25: 78:01:61:19:a5:b2:d6:59:27:3d:9c:ea:3b:31:ed: 59:e7:21:59:6c:da:a5:d1:95:ca:5d:fd:c3:fa:38: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E5:B6:A3:4D:D6:32:53:D0:AE:12:A8:DE:6D:72:B9:C0:CB:A1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.202.0/23 156.37.250.0/23 156.37.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e2:1b:5b:3a:4a:33:89:27:3e:ac:a9:05:d4:dc:06:30:1c: 25:3a:59:e3:0e:8e:53:e7:f1:d1:97:c8:d5:24:91:a4:61:95: c2:c0:63:17:56:08:7a:18:5d:7d:42:90:0c:14:44:61:db:d6: b1:47:85:98:a8:24:93:fc:0a:24:aa:52:3e:cf:3f:bd:8d:f0: 5b:16:a8:03:26:e7:e4:fb:66:fb:47:a8:da:85:27:10:61:ea: fd:e5:53:6a:70:2b:86:62:3f:08:8d:39:2d:e4:5b:51:39:a8: 0b:fe:19:99:6f:fd:87:6e:85:96:ba:a7:a8:48:5a:03:df:ce: c7:41:ee:6a:bb:9b:14:1e:e2:ca:d3:93:21:e0:dc:2b:10:f2: 86:fc:6b:9f:cd:b5:d3:df:f4:1d:db:1b:d6:ff:f6:b2:8d:5f: b6:cb:d1:03:87:39:65:24:23:32:1c:60:db:b6:98:28:f7:0b: f9:3b:c5:56:97:fc:91:ac:87:cd:41:32:46:63:29:73:ea:59: 31:03:a3:54:4f:61:3e:ee:8d:04:6e:bf:cb:14:86:b9:a5:a5: 3a:73:59:ff:23:c4:b0:cd:5e:24:67:87:63:da:3d:92:f2:05: c5:4d:ed:cd:50:ef:27:31:08:41:60:e8:b8:39:59:92:9e:aa: 7b:49:0b:be -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu6EFj4pzf5KfYVQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MzUwN2IyYmUtNjZjOS00MGI0LWI0OWYtN2NjMzdlMWY0NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCU+Pu8LQbzMnua4R39rob5tGDzkEf/C+sbA CAffxVIDIQm7R0WWFmfpA/UEspZdfdTpzeOgRma4xMGsTQWp/RfS7RJHUbH5MgV8 Qolg4aFcMo8D7wtbUu2QpxVKRiiDDl+2NcMpoXYWbuQKnykWnFZZWwt8DM6I/odo wBGH3Pt+kHi4gZC/qGIrSdM4jlXIrZldt967OXOu8Jca6sBS1YVu78BrRoL1s938 Jb8c0O7RMo8eu1GoZond2gR5m2JrGGXeEQW0s55vRxdt0QfsNywG/UfDH06bt72/ 0PpfxSV4AWEZpbLWWSc9nOo7Me1Z5yFZbNql0ZXKXf3D+jjliwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFK/ltqNN1jJT0K4SqN5tcrnAy6HVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYTMxZmUxNDktZjE0ZS0z NmYxLTgyYzYtYTQ4NzVlODEwZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnCXKAwQB nCX6AwQAnCX9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADHiG1s6SjOJJz6sqQXU3AYwHCU6WeMOjlPn8dGX yNUkkaRhlcLAYxdWCHoYXX1CkAwURGHb1rFHhZioJJP8CiSqUj7PP72N8FsWqAMm 5+T7ZvtHqNqFJxBh6v3lU2pwK4ZiPwiNOS3kW1E5qAv+GZlv/YduhZa6p6hIWgPf zsdB7mq7mxQe4srTkyHg3CsQ8ob8a5/NtdPf9B3bG9b/9rKNX7bL0QOHOWUkIzIc YNu2mCj3C/k7xVaX/JGsh81BMkZjKXPqWTEDo1RPYT7ujQRuv8sUhrmlpTpzWf8j xLDNXiRnh2PaPZLyBcVN7c1Q7ycxCEFg6Lg5WZKeqntJC74= -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:14 2025 by rpki-client