$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa File: dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa (raw, json) Hash identifier: 0ZlKjCFNC8j/5J1weXAPpZHBUHVwkpOOWyoP0yBOkWo= Subject key identifier: A4:CA:FF:63:52:8D:1D:26:A8:16:A1:7E:FC:02:51:6C:2C:E3:52:46 Certificate issuer: /CN=37d65fc0-6e4c-4477-9488-812657d0d39e Certificate serial: 010D0C9F4328584B56D74DE26CEE3E32EE4F3DA0 Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 153.45.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4d:e2:6c:ee:3e:32:ee:4f:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=5feb7a47-253c-4d18-90a0-1b3d406abc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:59:e4:55:1f:11:d3:d0:4f:b2:af:d0:46: 20:14:71:31:7c:a1:6f:2e:25:3b:c1:41:c1:18:85: 91:0f:32:cd:9d:65:24:f2:78:4a:d7:6a:2c:07:0e: 99:27:00:25:27:21:fc:07:b0:45:1a:a1:16:ee:30: d2:cd:4d:43:3a:0a:71:30:78:9f:0c:46:7d:fe:13: f5:f4:51:89:09:90:cb:5b:a8:83:a6:55:96:e5:33: ad:7e:f9:2a:88:c8:67:c2:ed:07:81:64:0d:a2:f4: f8:d0:4a:78:6b:4d:43:ac:43:61:a0:3a:85:aa:cc: 51:b2:c8:47:b3:e6:6b:a0:ea:8b:f9:cf:4d:f8:a5: c0:3f:96:e7:51:1a:5f:63:ca:fd:4a:ae:8f:64:3e: 5f:88:56:26:a3:8a:70:3c:5e:e4:27:83:1c:51:a6: f7:09:24:19:7b:a4:1b:96:c2:51:65:37:4e:bb:af: f8:d4:ba:8f:ac:7e:7c:e7:75:b1:8f:9d:fb:0c:d0: b1:d2:3a:31:86:73:6c:fc:9a:ea:19:6b:5a:68:75: b1:37:bb:89:3d:41:ca:01:12:b4:aa:56:50:b4:f5: f2:fa:c9:91:15:aa:0d:64:b0:39:41:50:03:3e:7d: 06:f7:2e:ef:f9:4a:11:8d:a7:87:0c:17:7a:40:26: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CA:FF:63:52:8D:1D:26:A8:16:A1:7E:FC:02:51:6C:2C:E3:52:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl X509v3 Authority Key Identifier: keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer sbgp-ipAddrBlock: critical IPv4: 153.45.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6e:a4:cc:67:e6:6e:4f:e1:7b:95:aa:61:e2:3b:48:e1:69: b5:30:5c:db:c9:0e:1b:2f:d4:ed:c2:ab:4a:6b:cc:f9:44:1e: 18:41:7f:2d:27:1e:73:6d:71:02:ac:71:79:d7:c2:b3:5b:ce: c3:02:27:24:54:3f:f2:3d:ad:cd:01:93:0e:a3:39:63:bc:79: 80:74:35:2b:83:aa:9f:a9:71:fe:f5:95:19:f7:a6:5e:9d:ac: f4:33:e6:08:3b:bd:42:ae:ed:17:48:0d:53:94:7c:9c:7e:fc: 25:be:6f:c6:65:67:14:ff:1e:87:aa:37:30:94:f3:34:dd:0b: 83:c4:91:85:20:2a:cf:03:da:9f:2d:25:06:0b:2e:25:f7:06: bd:0f:15:bc:59:51:b4:67:38:45:32:95:ad:45:99:fd:e4:fe: ad:78:e9:56:40:55:c7:49:40:40:d5:a7:72:3d:7a:35:cf:ac: f3:1a:4b:3c:2e:62:ec:f4:ea:40:ed:b3:19:2a:10:6e:89:2e: 36:d9:3a:fd:ad:0c:d6:99:4b:6f:ed:e0:47:57:52:c2:d5:91: cf:aa:05:84:4e:70:cf:10:e0:fb:e1:db:ca:9d:1b:0b:fe:17: 07:58:2c:81:4d:6c:6d:f1:b5:0a:a5:49:e4:da:ec:70:a3:07: 3e:fa:c0:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW103ibO4+Mu5PPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBk MzllMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NWZlYjdhNDctMjUzYy00ZDE4LTkwYTAtMWIzZDQwNmFiYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwABZ5FUfEdPQT7Kv0EYgFHExfKFvLiU7wUHB GIWRDzLNnWUk8nhK12osBw6ZJwAlJyH8B7BFGqEW7jDSzU1DOgpxMHifDEZ9/hP1 9FGJCZDLW6iDplWW5TOtfvkqiMhnwu0HgWQNovT40Ep4a01DrENhoDqFqsxRsshH s+ZroOqL+c9N+KXAP5bnURpfY8r9Sq6PZD5fiFYmo4pwPF7kJ4McUab3CSQZe6Qb lsJRZTdOu6/41LqPrH5853Wxj537DNCx0joxhnNs/JrqGWtaaHWxN7uJPUHKARK0 qlZQtPXy+smRFaoNZLA5QVADPn0G9y7v+UoRjaeHDBd6QCbLZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTK/2NSjR0mqBahfvwCUWws41JGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2 NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvZGNiNjQ3YTctNDZhNi0z ZTFhLWEzNjgtZmI0NmUwZWU5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzdkNjVmYzAtNmU0Yy00NDc3LTk0 ODgtODEyNjU3ZDBkMzllLzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05NDg4LTgxMjY1N2Qw ZDM5ZS5jcmwwHwYDVR0jBBgwFoAUkdjp9T5JxZ1idRxD5UGjuuSdPGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2 NTdkMGQzOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmS0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpupMxn5m5P4XuVqmHiO0jhabUwXNvJDhsv1O3Cq0przPlEHhhBfy0n HnNtcQKscXnXwrNbzsMCJyRUP/I9rc0Bkw6jOWO8eYB0NSuDqp+pcf71lRn3pl6d rPQz5gg7vUKu7RdIDVOUfJx+/CW+b8ZlZxT/HoeqNzCU8zTdC4PEkYUgKs8D2p8t JQYLLiX3Br0PFbxZUbRnOEUyla1Fmf3k/q146VZAVcdJQEDVp3I9ejXPrPMaSzwu Yuz06kDtsxkqEG6JLjbZOv2tDNaZS2/t4EdXUsLVkc+qBYROcM8Q4Pvh28qdGwv+ FwdYLIFNbG3xtQqlSeTa7HCjBz76wPk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:52 2025 by rpki-client