$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa File: d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa (raw, json) Hash identifier: xo/gAPW6W2Q5tSWl+ECkTvosoU2fkRT+zdZpAZRYTRg= Subject key identifier: 67:1E:04:9F:1A:FC:DE:51:A5:04:11:B2:C5:D4:4A:D4:45:FF:2D:14 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584BB88D148F1C430A2D4165AB60 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 134.224.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:14:8f:1c:43:0a:2d:41:65:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=f431052e-8013-4831-9115-5ddc4a92d488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:da:a1:27:b7:c9:ae:e3:37:00:f3:56:a2: ec:c1:f6:78:e4:84:22:ce:22:b0:f4:89:9c:0b:49: f5:1a:36:79:24:65:8a:db:38:ca:1f:df:7e:02:e2: 05:06:c2:da:58:dc:e2:0e:06:78:e6:d9:ca:cb:6e: ca:11:f6:0b:39:d0:ad:cb:1b:7f:12:a0:e6:1a:62: 45:f8:36:ce:e1:cd:89:95:8e:d0:65:29:53:25:33: 8c:73:cc:bf:1c:66:5e:fa:b3:70:37:59:88:07:d5: ff:0a:ec:79:9b:2e:cf:22:cf:cb:ac:d5:4c:ee:44: b4:08:a4:3a:7a:be:19:fc:df:0f:3f:9a:50:bc:5a: 91:04:7d:4e:76:dc:e1:59:a6:24:04:46:b8:55:85: 54:9d:8e:18:91:3a:e4:48:94:0f:68:98:23:e8:55: 52:6e:b9:7b:b0:df:73:3b:12:af:31:6a:c2:8d:aa: 44:11:be:cd:ef:03:db:a3:2d:4c:b2:71:be:3f:db: 81:2e:d4:51:9a:1b:da:8d:01:3d:e8:08:f6:89:93: b2:dc:e8:36:47:43:27:ab:a3:b3:27:f8:b4:bc:7b: b4:c2:40:06:3a:97:73:95:a5:f7:0e:8b:68:52:72: d2:cc:62:89:6b:70:ea:2b:84:e0:93:a4:8d:b0:df: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1E:04:9F:1A:FC:DE:51:A5:04:11:B2:C5:D4:4A:D4:45:FF:2D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8e88cc0-5a37-3edf-beef-3ef1c61495b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:62:4f:b3:6e:6a:61:d6:c2:89:95:95:31:01:5d:df:f6:dd: 1f:40:90:92:f7:23:e7:30:8a:af:4d:b4:98:7c:7b:39:d8:d4: bf:ad:93:e1:b7:b5:38:46:85:8e:0a:1f:8f:3a:17:ca:f3:05: f6:7d:26:d8:d5:bd:d6:1d:82:ad:cc:71:ba:f9:eb:b3:34:6f: e1:98:7f:77:bd:e3:ab:fd:31:5b:1f:73:80:0e:24:d7:a7:f9: ac:bc:2b:45:ac:f8:3a:8e:4d:b4:4e:b4:9b:39:4d:cc:88:9b: f2:3c:88:6e:9b:8e:70:a7:df:23:07:34:70:c2:ca:03:11:cc: 9f:fb:2b:c7:de:9c:6d:b2:7e:1d:9f:69:7e:6a:c1:fc:c5:f2: e9:ab:c7:79:3b:41:a7:2c:4b:ba:0e:a0:b9:c0:6f:75:27:98: e1:e3:c3:20:32:e8:00:3a:22:f0:da:6c:b6:85:be:35:91:b4: 6b:92:d7:80:f1:7e:55:2b:34:02:a3:e9:d0:87:1d:bb:34:6f: fe:a3:f0:53:b5:df:61:82:99:7f:b9:d4:a6:73:37:f0:79:58: c6:5e:d3:5f:a0:ea:60:8f:24:02:72:7b:4e:0e:65:fd:90:81: 5b:aa:14:7d:40:03:63:24:29:cc:2f:d5:36:d5:3e:d5:90:f4: 9a:a3:7c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRSPHEMKLUFlq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjQzMTA1MmUtODAxMy00ODMxLTkxMTUtNWRkYzRhOTJkNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE/aoSe3ya7jNwDzVqLswfZ45IQiziKw9Imc C0n1GjZ5JGWK2zjKH99+AuIFBsLaWNziDgZ45tnKy27KEfYLOdCtyxt/EqDmGmJF +DbO4c2JlY7QZSlTJTOMc8y/HGZe+rNwN1mIB9X/Cux5my7PIs/LrNVM7kS0CKQ6 er4Z/N8PP5pQvFqRBH1OdtzhWaYkBEa4VYVUnY4YkTrkSJQPaJgj6FVSbrl7sN9z OxKvMWrCjapEEb7N7wPboy1MsnG+P9uBLtRRmhvajQE96Aj2iZOy3Og2R0Mnq6Oz J/i0vHu0wkAGOpdzlaX3DotoUnLSzGKJa3DqK4Tgk6SNsN8YWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGceBJ8a/N5RpQQRssXUStRF/y0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDhlODhjYzAtNWEzNy0z ZWRmLWJlZWYtM2VmMWM2MTQ5NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNiT7NuamHWwomVlTEBXd/23R9AkJL3I+cwiq9NtJh8eznY1L+tk+G3 tThGhY4KH486F8rzBfZ9JtjVvdYdgq3Mcbr567M0b+GYf3e946v9MVsfc4AOJNen +ay8K0Ws+DqOTbROtJs5TcyIm/I8iG6bjnCn3yMHNHDCygMRzJ/7K8fenG2yfh2f aX5qwfzF8umrx3k7QacsS7oOoLnAb3UnmOHjwyAy6AA6IvDabLaFvjWRtGuS14Dx flUrNAKj6dCHHbs0b/6j8FO132GCmX+51KZzN/B5WMZe01+g6mCPJAJye04OZf2Q gVuqFH1AA2MkKcwv1TbVPtWQ9JqjfNg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:45:07 2025 by rpki-client