$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa File: 0409d953-fb93-3031-9957-e0cd196421fa.roa (raw, json) Hash identifier: Oy1hUOVVbEzAlrk9xyPJjva9zMqhd1pOHYmNEpOJCbs= Subject key identifier: 51:9B:D9:FA:A2:D6:6D:FA:F6:48:C7:40:90:D3:01:24:5E:9B:90:D3 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584B99D7A0FF7EF753723A97A000 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 159.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a0:ff:7e:f7:53:72:3a:97:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=bcf32c72-9645-47e3-944a-8f8ba67b6077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:fc:1b:cb:e2:36:58:25:88:b5:72:76:12: 4c:1d:3f:4e:71:06:de:20:c9:5f:af:63:cf:d6:d9: d7:6e:2e:09:92:b5:5f:79:e5:15:2e:ea:81:58:70: ee:37:ef:84:9c:2c:53:0a:e4:05:36:33:b9:02:0d: cf:fe:a1:d5:3f:60:5c:58:7e:d6:03:71:d3:6e:47: 36:51:ea:58:f2:5a:b7:b4:82:c6:84:a7:7d:e4:21: 5a:f2:1b:f3:ac:5f:11:15:63:dc:b7:80:b4:ab:05: 4c:73:a8:49:ae:c7:40:70:97:1e:3a:5f:fa:2c:b9: e7:6e:9a:26:33:70:0e:71:03:99:aa:e1:4b:34:12: 79:09:43:ed:2b:26:63:d5:b9:88:1f:71:a8:d5:48: 38:66:23:da:14:65:6d:80:0c:b6:59:e7:6d:1c:59: a2:b8:4e:9b:f5:97:a4:4c:19:63:9e:b9:cb:ad:cb: 57:ae:af:77:53:7c:2f:b8:db:ef:ff:04:c7:50:ea: 3c:07:3e:d0:cd:31:5c:84:94:90:79:e3:75:a5:d5: 3f:08:8e:59:82:53:d4:ca:a1:3f:7c:fe:7c:3d:fe: 54:14:2b:0b:8a:bf:d4:f8:24:f8:8a:00:a5:50:8d: 5f:c6:ac:34:3c:16:af:a6:76:15:b5:83:5f:09:1d: ad:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:D9:FA:A2:D6:6D:FA:F6:48:C7:40:90:D3:01:24:5E:9B:90:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:43:81:e5:ec:2f:da:04:9d:d4:3b:17:1c:ef:6f:b4:d8:78: 5f:37:c4:98:33:c6:91:8b:17:8b:84:53:ee:ef:c3:00:42:44: b5:22:de:e2:81:de:6f:10:da:40:ed:fe:72:1a:58:7c:c7:0b: e6:c0:75:8f:64:f0:dd:42:13:70:4f:4d:17:e6:8c:9c:2c:f0: e4:11:b7:60:c3:33:50:fd:a5:ce:36:1f:29:f3:6e:bc:79:cb: e7:f2:d3:75:b6:b4:fb:4c:77:d2:f5:05:ed:60:5d:62:9c:fa: 89:a5:a6:fa:7e:ef:49:b1:76:52:03:f5:21:0a:55:93:21:1c: b9:25:66:e3:ad:51:b8:d1:39:ea:5d:84:7e:cc:a1:e0:56:71: ab:29:8d:92:ea:00:7c:ac:95:48:24:ec:5a:7f:cb:4b:0a:a5: d2:fc:b9:c9:95:55:98:e6:4f:94:4c:f8:13:ef:14:d9:27:b0: 30:61:8b:b5:88:1f:54:39:a7:ca:8b:fa:18:a5:8a:b9:2d:28: bc:24:40:2c:a1:47:0c:6d:fc:89:da:91:4a:93:1d:a8:18:96: 5a:28:0c:cf:1a:a1:b8:af:19:39:1d:dc:b2:b2:fa:46:69:be: 5d:d7:b7:b1:8e:9f:b1:ee:a9:99:9d:eb:67:f2:05:fc:bc:57: 04:d7:96:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuZ16D/fvdTcjqXoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YmNmMzJjNzItOTY0NS00N2UzLTk0NGEtOGY4YmE2N2I2MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFb8G8viNlgliLVydhJMHT9OcQbeIMlfr2PP 1tnXbi4JkrVfeeUVLuqBWHDuN++EnCxTCuQFNjO5Ag3P/qHVP2BcWH7WA3HTbkc2 UepY8lq3tILGhKd95CFa8hvzrF8RFWPct4C0qwVMc6hJrsdAcJceOl/6LLnnbpom M3AOcQOZquFLNBJ5CUPtKyZj1bmIH3Go1Ug4ZiPaFGVtgAy2WedtHFmiuE6b9Zek TBljnrnLrctXrq93U3wvuNvv/wTHUOo8Bz7QzTFchJSQeeN1pdU/CI5ZglPUyqE/ fP58Pf5UFCsLir/U+CT4igClUI1fxqw0PBavpnYVtYNfCR2tbQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFGb2fqi1m369kjHQJDTASRem5DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMDQwOWQ5NTMtZmI5My0z MDMxLTk5NTctZTBjZDE5NjQyMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANUOB5ewv2gSd1DsXHO9vtNh4XzfEmDPGkYsXi4RT7u/DAEJEtSLe4oHe bxDaQO3+chpYfMcL5sB1j2Tw3UITcE9NF+aMnCzw5BG3YMMzUP2lzjYfKfNuvHnL 5/LTdba0+0x30vUF7WBdYpz6iaWm+n7vSbF2UgP1IQpVkyEcuSVm461RuNE56l2E fsyh4FZxqymNkuoAfKyVSCTsWn/LSwql0vy5yZVVmOZPlEz4E+8U2SewMGGLtYgf VDmnyov6GKWKuS0ovCRALKFHDG38idqRSpMdqBiWWigMzxqhuK8ZOR3csrL6Rmm+ Xde3sY6fse6pmZ3rZ/IF/LxXBNeWMg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:21 2025 by rpki-client