$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa File: 2aa91757-41a3-3878-bde1-4f11a5d770af.roa (raw, json) Hash identifier: 5Imy+rzTSJ4fzwm05XSXlpykDLmo10cT3nOdLXJFH68= Subject key identifier: F1:B4:06:09:89:00:0C:F4:F6:E8:2B:2D:1D:BD:1E:DD:FE:AD:E4:33 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B6D2C95A85DF3996A6C69EB20 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 33442 IP address blocks: 157.235.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:95:a8:5d:f3:99:6a:6c:69:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=940f2bb0-5432-4c5e-9436-5d7a6e620180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:75:8d:c0:c5:b1:dd:49:a3:39:b5:97:7a: 84:ea:48:dd:63:c2:1f:a7:cb:5e:c3:d1:79:d9:0b: af:74:f3:33:29:ec:59:b0:fd:f5:43:67:e1:ef:74: 14:88:a5:e8:f5:18:d9:66:b8:0b:18:1b:11:ff:4c: 11:71:26:b0:52:35:26:00:fc:43:85:c9:c2:01:9a: 84:d1:e2:c5:fa:5b:4c:cb:2f:fe:87:31:3f:79:17: 07:58:fc:16:f2:5a:6a:2f:30:52:f6:de:d3:08:e1: b0:80:9c:bb:9e:90:60:da:e2:95:f6:ba:b2:89:ac: 20:8b:cc:38:86:26:2f:5e:78:67:45:32:a1:a7:b5: 46:4c:5f:4d:43:d7:31:38:d9:2b:9f:50:a4:70:76: 0e:1c:3e:88:ce:5f:5d:77:5d:d5:cd:34:76:2a:a0: 4c:d6:e4:2d:04:94:d5:65:2d:00:7f:e7:73:b9:b6: 78:10:2e:12:c1:45:36:19:cc:c2:c6:36:27:dc:d7: f8:0b:55:a1:72:7c:5c:00:d9:29:7d:cb:c2:51:1c: ab:10:d2:99:4a:71:87:54:7e:e9:ab:3a:23:b0:f6: 55:4c:e4:f2:be:21:f9:84:ec:20:d4:17:64:45:de: ef:a3:03:cc:5c:b0:32:07:e5:5c:6f:89:a2:12:ca: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B4:06:09:89:00:0C:F4:F6:E8:2B:2D:1D:BD:1E:DD:FE:AD:E4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:da:6a:9a:87:f8:fb:4c:63:32:b9:9e:fd:9c:ef:23:37:4f: 1e:ac:16:45:7c:35:4b:17:72:70:45:1f:c3:1e:88:c8:b7:58: 7d:b2:21:2e:44:fa:2b:a9:9a:5d:64:9e:4d:23:5f:74:5e:e9: 35:33:19:ee:44:86:34:76:0c:ed:98:87:26:c0:b3:b8:72:75: a6:15:e6:ef:42:be:87:5d:a2:e6:eb:c3:d5:11:ea:9a:a8:4c: 88:bb:80:f4:aa:70:ff:99:35:d9:24:8a:cb:ef:e0:9e:ea:05: 20:06:ff:58:0f:a4:88:19:15:8b:5c:84:45:5e:da:cc:79:c3: 7f:36:8c:39:20:ab:2d:19:99:59:1d:bf:9f:03:5f:b3:47:b2: 62:2e:7d:30:f5:a1:32:fd:e4:2e:ba:cb:2c:a7:17:67:66:98: cb:8b:c7:cf:fb:50:ac:c8:ae:5e:84:fb:0b:bf:c3:90:fd:5b: 14:6b:43:9f:1c:ca:95:60:a8:05:3c:13:d3:fa:25:76:fc:95: 67:da:94:76:65:0b:b0:11:90:00:46:70:d0:59:9c:9c:53:41: ae:e3:1d:ee:3e:18:8b:c8:11:20:67:66:11:4c:a2:5b:cc:66: 76:53:22:90:43:f7:c7:b8:94:f8:2b:c2:7a:c2:18:7a:7a:d9: 0b:65:cc:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJWoXfOZamxp6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTQwZjJiYjAtNTQzMi00YzVlLTk0MzYtNWQ3YTZlNjIwMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZR1jcDFsd1Jozm1l3qE6kjdY8Ifp8tew9F5 2QuvdPMzKexZsP31Q2fh73QUiKXo9RjZZrgLGBsR/0wRcSawUjUmAPxDhcnCAZqE 0eLF+ltMyy/+hzE/eRcHWPwW8lpqLzBS9t7TCOGwgJy7npBg2uKV9rqyiawgi8w4 hiYvXnhnRTKhp7VGTF9NQ9cxONkrn1CkcHYOHD6Izl9dd13VzTR2KqBM1uQtBJTV ZS0Af+dzubZ4EC4SwUU2GczCxjYn3Nf4C1WhcnxcANkpfcvCURyrENKZSnGHVH7p qzojsPZVTOTyviH5hOwg1BdkRd7vowPMXLAyB+Vcb4miEsr3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG0BgmJAAz09ugrLR29Ht3+reQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMmFhOTE3NTctNDFhMy0z ODc4LWJkZTEtNGYxMWE1ZDc3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnesnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvaapqH+PtMYzK5nv2c7yM3Tx6sFkV8NUsXcnBFH8MeiMi3WH2yIS5E +iupml1knk0jX3Re6TUzGe5EhjR2DO2YhybAs7hydaYV5u9Cvoddoubrw9UR6pqo TIi7gPSqcP+ZNdkkisvv4J7qBSAG/1gPpIgZFYtchEVe2sx5w382jDkgqy0ZmVkd v58DX7NHsmIufTD1oTL95C66yyynF2dmmMuLx8/7UKzIrl6E+wu/w5D9WxRrQ58c ypVgqAU8E9P6JXb8lWfalHZlC7ARkABGcNBZnJxTQa7jHe4+GIvIESBnZhFMolvM ZnZTIpBD98e4lPgrwnrCGHp62QtlzBU= -----END CERTIFICATE-----Generated at Thu Oct 9 01:30:30 2025 by rpki-client