$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa File: 9d20ee29-516f-3930-b849-ad0ee8b7e392.roa (raw, json) Hash identifier: 0DfaiGq9CyBdNKZ4JQ9hA1zeiFs2bTizpbUBfrn5J04= Subject key identifier: 58:4E:11:37:4D:04:70:03:80:E5:54:C8:1D:BE:77:53:8D:0C:3D:12 Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F4328584B715CB0BCD34E2A8671128F60 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 33362 IP address blocks: 158.222.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b0:bc:d3:4e:2a:86:71:12:8f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=221674b2-45fb-4410-9350-dad4a43f2abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fd:35:75:e1:34:27:1a:9a:03:5f:c3:2f:08: f5:81:81:49:f0:ea:e2:14:09:c8:91:1a:6d:48:64: 3b:ab:22:f0:56:a5:96:e5:9c:3b:48:32:9b:22:21: ad:05:58:ec:43:8f:64:82:b1:00:18:f3:de:7f:c4: 77:86:1b:fa:db:5f:9f:14:95:46:90:67:f2:ad:e8: 10:ed:24:10:6f:5f:7c:3f:92:01:de:52:f9:10:bc: 2a:cf:84:c2:f2:54:32:7e:26:d7:08:53:77:5d:12: 00:53:79:8a:6c:56:f0:40:d9:ae:fc:1d:f9:a0:f0: e2:9e:8d:02:a1:7c:3d:ac:be:58:78:ca:97:74:64: ab:8d:bc:bb:88:fe:58:0f:fb:9c:eb:de:a1:25:87: 0c:c0:d9:d8:e5:23:4f:79:9d:1b:4e:e3:a9:6c:80: e4:e5:a8:fc:6a:49:b7:2f:7b:ac:3c:87:d7:ae:c2: d9:60:75:d8:07:85:bf:e1:e0:75:3d:73:42:51:e0: cb:be:b3:56:0c:63:4c:87:29:c8:81:3a:c0:93:2c: ab:78:98:a4:3a:60:a1:1f:9c:f0:cc:20:3f:ff:97: 20:30:9a:c9:ed:4b:76:f5:da:f8:7a:14:7e:f3:90: 13:c9:eb:29:33:35:0e:8a:f6:bb:ec:62:bf:ca:45: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4E:11:37:4D:04:70:03:80:E5:54:C8:1D:BE:77:53:8D:0C:3D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cd:cf:1d:2a:b0:9c:b3:8a:81:9f:f2:d0:d7:07:19:ad:3f: f0:83:ac:48:e2:84:ed:d1:0d:c5:17:fa:b8:52:de:b5:f8:a2: 11:08:f3:01:5b:d4:bb:fa:84:5f:73:b5:f9:6f:5d:0c:fe:fc: 01:47:0e:02:d3:b8:09:3b:4a:50:2c:df:22:e4:40:a0:66:52: f0:6b:64:91:06:cc:23:1a:60:24:06:6d:76:5c:dc:b4:a9:13: f2:95:79:44:79:ee:08:85:76:48:44:65:22:fd:c1:56:fd:fd: 15:a5:b2:30:75:7c:e3:68:0d:5a:1f:0e:ea:16:8f:7e:d0:57: cb:a4:54:da:40:df:ce:90:66:ae:d4:5c:aa:35:70:7e:0d:6e: 30:ef:57:32:7d:e5:93:19:58:7f:bc:03:c7:e4:c5:db:48:bb: a8:52:1e:87:b6:10:2a:6b:c9:2a:fc:12:ff:25:ad:25:d7:73: 79:6d:e1:b7:94:71:a8:a6:b4:76:dd:53:7c:ac:5d:2c:f3:e4: e5:15:dc:ac:6f:a2:02:34:e4:98:2f:db:3a:cd:cd:2b:40:16: 4a:e7:61:7e:5b:18:29:e4:ce:b0:81:32:6e:6a:9f:9d:df:0b: 65:f4:15:36:80:0b:27:ca:c2:c9:de:75:96:81:d0:bb:60:5e: fa:17:be:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLC8004qhnESj2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjIxNjc0YjItNDVmYi00NDEwLTkzNTAtZGFkNGE0M2YyYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f01deE0JxqaA1/DLwj1gYFJ8OriFAnIkRpt SGQ7qyLwVqWW5Zw7SDKbIiGtBVjsQ49kgrEAGPPef8R3hhv621+fFJVGkGfyregQ 7SQQb198P5IB3lL5ELwqz4TC8lQyfibXCFN3XRIAU3mKbFbwQNmu/B35oPDino0C oXw9rL5YeMqXdGSrjby7iP5YD/uc696hJYcMwNnY5SNPeZ0bTuOpbIDk5aj8akm3 L3usPIfXrsLZYHXYB4W/4eB1PXNCUeDLvrNWDGNMhynIgTrAkyyreJikOmChH5zw zCA//5cgMJrJ7Ut29dr4ehR+85ATyespMzUOiva77GK/ykVMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhOETdNBHADgOVUyB2+d1ONDD0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvOWQyMGVlMjktNTE2Zi0z OTMwLWI4NDktYWQwZWU4YjdlMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnt5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHNzx0qsJyzioGf8tDXBxmtP/CDrEjihO3RDcUX+rhS3rX4ohEI8wFb 1Lv6hF9ztflvXQz+/AFHDgLTuAk7SlAs3yLkQKBmUvBrZJEGzCMaYCQGbXZc3LSp E/KVeUR57giFdkhEZSL9wVb9/RWlsjB1fONoDVofDuoWj37QV8ukVNpA386QZq7U XKo1cH4NbjDvVzJ95ZMZWH+8A8fkxdtIu6hSHoe2ECprySr8Ev8lrSXXc3lt4beU caimtHbdU3ysXSzz5OUV3KxvogI05Jgv2zrNzStAFkrnYX5bGCnkzrCBMm5qn53f C2X0FTaACyfKwsnedZaB0LtgXvoXvnI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:09:53 2025 by rpki-client