$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa File: bef358d3-0363-30e8-aa38-d97259f0f8bc.roa (raw, json) Hash identifier: S7Du0JJT5NizegpEL8lZrOvxeruKTWmlDu1dx8tjNuA= Subject key identifier: 44:70:A8:45:02:9E:E1:21:4B:4A:FC:56:76:69:01:2A:CA:59:FA:7B Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B6D2C95EEE0ABF6FECE2AB100 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 33442 IP address blocks: 157.235.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:95:ee:e0:ab:f6:fe:ce:2a:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=71174d70-b191-4d5f-9001-a56549c06457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:6e:e0:ba:e6:57:d6:75:7c:cf:3a:ee:c4: e9:e3:cd:58:0c:4d:36:8b:7d:55:39:2d:a3:e0:3a: 70:9e:64:51:8d:0d:5a:33:4a:98:04:03:19:fa:16: f4:8e:f2:ec:95:ec:8f:be:fc:b7:cf:45:8a:14:d9: 0d:bc:05:ea:71:3e:03:1b:e3:ee:ff:b4:02:74:8c: ee:6f:4d:95:4a:fb:23:25:24:80:1a:78:bd:2b:0f: d2:cb:88:27:fd:31:e2:50:e2:63:62:7e:d7:ee:54: 51:65:c7:22:c3:30:50:98:b2:30:69:e7:df:67:8e: 12:f8:79:ab:88:77:49:89:e9:05:98:28:4c:bb:0c: f6:2a:2e:b4:c3:f9:a7:dd:15:1e:7c:30:9f:3a:20: d7:56:68:35:84:fe:7e:49:09:07:a0:12:1c:5f:21: 62:0e:7e:c5:70:ca:10:63:4b:39:4d:25:24:62:b6: cf:9e:3d:a5:7a:9e:45:33:aa:7d:fa:57:fe:30:a3: e4:3b:0b:10:a7:a5:b6:9c:24:aa:2e:f1:fc:5c:56: db:6b:24:58:de:4d:1c:77:0d:5b:77:b1:81:da:29: 84:eb:3b:4f:76:63:b8:6d:77:ed:69:14:c7:2f:33: f1:93:8b:ac:43:c5:4f:73:5b:12:eb:67:91:0d:53: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:A8:45:02:9E:E1:21:4B:4A:FC:56:76:69:01:2A:CA:59:FA:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:6d:02:10:2d:05:c4:c5:08:52:c5:1f:4a:37:d0:b5:76:61: 7f:57:8e:cc:0e:88:d9:1c:a8:90:10:6a:97:70:14:03:56:39: 77:ea:49:b9:ca:bf:95:7e:e3:fe:91:23:e6:5e:72:4b:02:5e: 69:52:5e:de:54:d8:fe:ba:7b:ef:52:2f:41:ab:6e:68:22:6a: 9b:a9:cf:58:01:e8:d7:14:6b:4a:19:3a:09:58:dc:f6:08:b8: 81:5a:83:5a:65:a5:e6:62:75:d3:71:88:33:16:c5:37:7f:14: 95:59:09:0c:03:1d:67:14:af:10:0f:2d:8d:06:f5:f4:29:ff: 70:15:c7:53:05:ca:77:be:cc:01:85:cf:4f:a6:f3:f5:a1:25: 40:87:c6:1c:c6:9d:33:32:15:fb:f4:9b:71:72:89:cf:e0:2b: 8f:38:f5:f0:96:23:2d:ba:50:e7:7c:23:86:b4:99:5c:91:07: 9c:e3:50:86:21:79:73:4b:14:ca:fa:73:5f:a5:bc:b1:63:81: ed:7f:3b:fe:7e:f6:99:93:e9:c2:e9:4d:f1:fc:72:52:ad:0c: 02:10:a4:b2:57:c1:2c:fd:46:9d:6d:60:e5:21:f3:09:06:5c: 22:89:9c:e1:bb:f4:6f:ac:b0:78:4a:9b:61:28:94:9a:84:fc: e8:79:24:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJXu4Kv2/s4qsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzExNzRkNzAtYjE5MS00ZDVmLTkwMDEtYTU2NTQ5YzA2NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcZu4LrmV9Z1fM867sTp481YDE02i31VOS2j 4DpwnmRRjQ1aM0qYBAMZ+hb0jvLsleyPvvy3z0WKFNkNvAXqcT4DG+Pu/7QCdIzu b02VSvsjJSSAGni9Kw/Sy4gn/THiUOJjYn7X7lRRZcciwzBQmLIwaeffZ44S+Hmr iHdJiekFmChMuwz2Ki60w/mn3RUefDCfOiDXVmg1hP5+SQkHoBIcXyFiDn7FcMoQ Y0s5TSUkYrbPnj2lep5FM6p9+lf+MKPkOwsQp6W2nCSqLvH8XFbbayRY3k0cdw1b d7GB2imE6ztPdmO4bXftaRTHLzPxk4usQ8VPc1sS62eRDVO8qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERwqEUCnuEhS0r8VnZpASrKWfp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYmVmMzU4ZDMtMDM2My0z MGU4LWFhMzgtZDk3MjU5ZjBmOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAneuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZtAhAtBcTFCFLFH0o30LV2YX9XjswOiNkcqJAQapdwFANWOXfqSbnK v5V+4/6RI+ZecksCXmlSXt5U2P66e+9SL0Grbmgiapupz1gB6NcUa0oZOglY3PYI uIFag1plpeZiddNxiDMWxTd/FJVZCQwDHWcUrxAPLY0G9fQp/3AVx1MFyne+zAGF z0+m8/WhJUCHxhzGnTMyFfv0m3Fyic/gK4849fCWIy26UOd8I4a0mVyRB5zjUIYh eXNLFMr6c1+lvLFjge1/O/5+9pmT6cLpTfH8clKtDAIQpLJXwSz9Rp1tYOUh8wkG XCKJnOG79G+ssHhKm2EolJqE/Oh5JIA= -----END CERTIFICATE-----Generated at Thu Oct 9 01:30:33 2025 by rpki-client