$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/a3f4fb2f-92fe-3135-a20c-395c460f1b28.roa File: a3f4fb2f-92fe-3135-a20c-395c460f1b28.roa (raw, json) Hash identifier: WfZR+hh4F+5vu/SIMfzssek/Zdy1eIIw40m+BFjs0yE= Subject key identifier: FC:C8:DC:49:86:41:AC:1A:53:F0:36:7B:00:AD:37:36:64:6E:D4:68 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584B4AD58732EE1ECAB341755740 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/a3f4fb2f-92fe-3135-a20c-395c460f1b28.roa Signing time: Tue 23 Sep 2025 17:47:45 +0000 ROA not before: Tue 23 Sep 2025 17:47:45 +0000 ROA not after: Mon 22 Dec 2025 18:47:45 +0000 asID: 40934 IP address blocks: 159.48.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:d5:87:32:ee:1e:ca:b3:41:75:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Sep 23 17:47:45 2025 GMT Not After : Dec 22 18:47:45 2025 GMT Subject: CN=f95bc2b6-42f3-4729-aa36-4053e8d7ae62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:75:ed:e0:93:db:16:2b:a1:d0:48:9a:41: 23:21:c8:6e:76:3c:cc:43:eb:3f:5f:86:c8:9d:f0: 6e:c4:6d:ed:b8:49:6b:fd:a6:c5:4e:de:d8:89:80: 2c:c3:13:50:94:6b:77:22:4d:28:48:8e:20:95:06: e8:ec:4b:0b:b3:3f:88:17:83:f8:f2:1f:5d:ca:48: a3:4a:8d:e0:96:b2:dc:cb:19:fe:c3:e0:48:a5:cd: 9e:6a:96:fe:41:3b:c1:aa:c9:e5:c1:76:ca:92:66: bf:87:48:f3:cb:24:43:25:a0:fb:79:6a:f3:3e:5e: 65:2b:7d:70:c7:38:3b:bd:bc:9b:03:c3:e8:05:5d: f7:68:85:a8:a9:bf:3b:db:82:76:b4:ce:7e:78:f7: 26:42:18:57:f2:46:e9:12:a6:e0:59:f7:5d:9f:ea: 56:35:e1:00:67:43:96:a0:39:c0:fa:81:4f:85:11: 19:54:f2:03:a5:c9:ac:99:3e:88:bb:6f:b1:d8:7b: 18:31:16:b2:79:a1:ba:17:9d:7f:14:6c:8e:1a:73: 07:2c:f4:cf:5f:f8:11:b8:55:82:33:79:f7:44:9e: b6:f2:39:f3:8d:16:cf:98:51:52:0f:da:78:63:b0: dc:f3:2a:5a:d7:20:6a:41:82:96:48:7f:05:f0:c0: 62:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C8:DC:49:86:41:AC:1A:53:F0:36:7B:00:AD:37:36:64:6E:D4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/a3f4fb2f-92fe-3135-a20c-395c460f1b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 159.48.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f2:2b:09:ab:64:80:21:37:6c:8b:22:00:9d:05:89:52:91: 33:95:c3:9f:29:eb:e9:3d:f0:1d:06:58:4b:d9:1f:48:c0:f6: c6:df:b5:f4:59:13:60:d7:13:97:69:43:a1:3f:45:e5:70:f1: a7:da:53:25:0b:24:88:5e:8a:d9:7f:27:01:f0:df:7e:cd:ad: ff:48:65:d6:dc:17:4d:a3:2f:fd:fb:98:59:3e:c1:8e:55:39: c8:56:80:57:a4:9b:bc:59:98:c2:c1:48:28:09:c3:9f:ac:1d: 17:ce:67:66:86:7c:ee:d9:5b:36:f0:a0:a1:cb:b0:23:7d:fa: a9:68:60:f0:17:83:ca:73:65:04:56:f7:9c:f2:e2:d7:fb:08: 8f:a1:27:ce:99:0f:21:61:16:c4:3c:b6:98:8b:84:70:df:cc: a0:00:66:ea:2e:01:da:ad:87:7e:2a:43:f3:1d:a7:35:7d:77: 7d:9f:51:4a:f7:12:b3:b1:66:37:fe:0a:d1:19:64:5a:53:16: 3d:78:62:7f:2d:63:47:24:53:fa:19:e6:bf:9b:7e:4b:00:14: 35:85:f3:3a:21:ac:1b:f0:27:01:5b:d4:5c:25:11:4b:32:71: 9f:f9:45:5e:fc:b3:a1:24:72:e4:73:dd:a4:c3:a4:96:b6:07: a4:50:49:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtK1Ycy7h7Ks0F1V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MDkyMzE3NDc0NVoXDTI1MTIyMjE4NDc0NVowLzEtMCsGA1UEAxMk Zjk1YmMyYjYtNDJmMy00NzI5LWFhMzYtNDA1M2U4ZDdhZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld117eCT2xYrodBImkEjIchudjzMQ+s/X4bI nfBuxG3tuElr/abFTt7YiYAswxNQlGt3Ik0oSI4glQbo7EsLsz+IF4P48h9dykij So3glrLcyxn+w+BIpc2eapb+QTvBqsnlwXbKkma/h0jzyyRDJaD7eWrzPl5lK31w xzg7vbybA8PoBV33aIWoqb8724J2tM5+ePcmQhhX8kbpEqbgWfddn+pWNeEAZ0OW oDnA+oFPhREZVPIDpcmsmT6Iu2+x2HsYMRayeaG6F51/FGyOGnMHLPTPX/gRuFWC M3n3RJ628jnzjRbPmFFSD9p4Y7Dc8ypa1yBqQYKWSH8F8MBiUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzI3EmGQawaU/A2ewCtNzZkbtRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvYTNmNGZiMmYtOTJmZS0z MTM1LWEyMGMtMzk1YzQ2MGYxYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnzCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHyKwmrZIAhN2yLIgCdBYlSkTOVw58p6+k98B0GWEvZH0jA9sbftfRZ E2DXE5dpQ6E/ReVw8afaUyULJIheitl/JwHw337Nrf9IZdbcF02jL/37mFk+wY5V OchWgFekm7xZmMLBSCgJw5+sHRfOZ2aGfO7ZWzbwoKHLsCN9+qloYPAXg8pzZQRW 95zy4tf7CI+hJ86ZDyFhFsQ8tpiLhHDfzKAAZuouAdqth34qQ/MdpzV9d32fUUr3 ErOxZjf+CtEZZFpTFj14Yn8tY0ckU/oZ5r+bfksAFDWF8zohrBvwJwFb1FwlEUsy cZ/5RV78s6EkcuRz3aTDpJa2B6RQSds= -----END CERTIFICATE-----Generated at Sat Oct 11 02:23:47 2025 by rpki-client