$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa File: 79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa (raw, json) Hash identifier: yFH2v1/oiMGabxLp/SKgJceoNRIdq+xCZ+EaMbIEO24= Subject key identifier: 52:EF:F0:17:0C:5F:D2:48:D0:E4:5D:2D:6D:E6:F5:9E:D8:2A:12:E9 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F4328584B99D77E1CE58522A402ECD580 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 164.55.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7e:1c:e5:85:22:a4:02:ec:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0ce22206-27a2-432e-ae4e-94fea892e53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:fa:a4:fd:fd:29:45:ae:4f:0b:3b:96:43: be:b0:11:ad:2e:0b:32:f1:4f:bb:06:22:a0:b2:48: 28:6e:59:3b:d1:24:64:02:2d:8c:6b:d5:53:b3:5e: f3:d2:83:1b:24:dd:d4:a3:df:c1:71:ca:14:56:a5: a2:2f:92:fb:ac:0c:58:55:a1:ab:aa:2a:8e:96:17: e5:b8:a2:c3:da:75:f4:e8:f4:e7:85:06:c9:c0:41: 58:a2:ee:8d:90:35:01:ab:c7:16:4f:ad:23:7c:41: ef:8a:7f:39:f6:cc:b2:05:91:a7:d8:4f:e3:e5:73: 56:65:16:11:f6:23:e5:d9:48:b2:65:da:fc:ec:9a: 56:bd:55:56:48:f9:a8:c0:7d:fa:ef:f9:f5:02:e8: 9c:bb:c0:31:f0:32:c8:0a:4c:1a:43:e6:04:c8:07: 0e:9e:6e:ae:3a:3a:18:17:30:46:c9:bd:a2:98:d4: 53:39:21:d1:d2:bd:ab:ea:d9:a2:1d:83:04:ec:80: a0:55:66:96:d6:10:3a:39:a1:dd:ef:e5:62:da:88: 99:10:74:15:b6:65:00:da:b6:9b:a4:f4:90:02:39: 82:b3:bd:f6:3d:10:4a:a8:63:1e:77:bb:b8:44:cb: 90:39:b5:4d:54:23:7c:02:d8:67:cc:4e:2e:b6:b8: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EF:F0:17:0C:5F:D2:48:D0:E4:5D:2D:6D:E6:F5:9E:D8:2A:12:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/79e1c864-eccb-3a12-a226-f343e6b4d8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 164.55.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:51:2b:1d:0f:51:57:f4:7f:91:c0:90:01:26:c8:f3:a6:20: b4:39:e0:e6:db:95:ee:15:d3:21:ad:7a:b9:49:fa:e7:12:71: 48:23:ea:28:89:41:ed:96:2c:f9:4d:83:de:ab:0d:47:69:29: 82:c1:1b:77:e1:e5:40:45:93:b3:95:d1:63:f5:fe:76:2a:5b: 67:f8:7a:ff:db:59:62:d7:5c:b9:46:5c:c0:a5:b1:58:69:bc: f1:81:11:9c:2b:db:5b:cf:42:0f:f9:56:55:c3:55:e2:89:60: 74:1c:3f:1b:4a:a6:73:53:36:4b:b9:19:ad:22:f5:83:33:bc: de:f0:15:97:9e:98:ac:c5:5c:67:93:13:b4:70:ee:67:72:84: a1:91:68:da:37:d5:1d:f0:08:ff:64:5d:97:c1:ac:58:57:d4: f8:a1:3e:36:a3:d7:6e:d1:13:70:85:82:6d:e4:46:df:22:90: af:88:66:70:8b:81:df:71:07:3b:b8:39:d0:39:05:02:09:0f: 7e:ad:b7:b6:cf:a2:16:0b:70:32:e4:cc:92:be:b5:83:07:43: d1:da:59:bb:66:e8:e2:c3:db:9d:19:76:1a:10:d4:1e:e4:3e: 1f:13:75:34:69:7e:0b:eb:20:84:34:43:38:a5:2d:a5:e9:a0: 67:64:03:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ134c5YUipALs1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGNlMjIyMDYtMjdhMi00MzJlLWFlNGUtOTRmZWE4OTJlNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDD6pP39KUWuTws7lkO+sBGtLgsy8U+7BiKg skgoblk70SRkAi2Ma9VTs17z0oMbJN3Uo9/BccoUVqWiL5L7rAxYVaGrqiqOlhfl uKLD2nX06PTnhQbJwEFYou6NkDUBq8cWT60jfEHvin859syyBZGn2E/j5XNWZRYR 9iPl2UiyZdr87JpWvVVWSPmowH367/n1Auicu8Ax8DLICkwaQ+YEyAcOnm6uOjoY FzBGyb2imNRTOSHR0r2r6tmiHYME7ICgVWaW1hA6OaHd7+Vi2oiZEHQVtmUA2rab pPSQAjmCs732PRBKqGMed7u4RMuQObVNVCN8AthnzE4utrj2iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLv8BcMX9JI0ORdLW3m9Z7YKhLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvNzllMWM4NjQtZWNjYi0z YTEyLWEyMjYtZjM0M2U2YjRkOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9RKx0PUVf0f5HAkAEmyPOmILQ54Obble4V0yGterlJ+ucScUgj6iiJ Qe2WLPlNg96rDUdpKYLBG3fh5UBFk7OV0WP1/nYqW2f4ev/bWWLXXLlGXMClsVhp vPGBEZwr21vPQg/5VlXDVeKJYHQcPxtKpnNTNku5Ga0i9YMzvN7wFZeemKzFXGeT E7Rw7mdyhKGRaNo31R3wCP9kXZfBrFhX1PihPjaj127RE3CFgm3kRt8ikK+IZnCL gd9xBzu4OdA5BQIJD36tt7bPohYLcDLkzJK+tYMHQ9HaWbtm6OLD250ZdhoQ1B7k Ph8TdTRpfgvrIIQ0QzilLaXpoGdkA9A= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:58 2025 by rpki-client