$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0fb8d185-8807-3545-b937-e9d0bbfc0285.roa File: 0fb8d185-8807-3545-b937-e9d0bbfc0285.roa (raw, json) Hash identifier: C+sftrGuF0xiz7M4NNnJ6HTPTqaYXUGVibX0mtbDvR0= Subject key identifier: 32:69:7D:04:E7:F9:2E:07:30:9B:A2:67:AA:6C:03:03:87:F2:D0:C1 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7F9584AF399ADE52FF60 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0fb8d185-8807-3545-b937-e9d0bbfc0285.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 158.247.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7f:95:84:af:39:9a:de:52:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=9a7b4ccf-b553-410f-bb8d-47a3810004d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:f7:ae:e1:e2:26:22:78:2f:a8:0e:e7:f1: db:d7:e1:f9:09:02:1d:64:81:0f:d1:b4:44:e6:12: d9:63:27:1c:44:73:dd:fb:03:fd:3b:c2:21:94:93: a3:34:75:4e:20:ed:05:c6:52:75:4f:aa:75:b1:e3: 4d:08:0b:d4:dd:d5:ed:82:4b:53:a0:64:06:96:e0: fd:c8:c9:88:62:a0:ac:e2:9b:78:36:6a:6c:f6:bb: 82:de:2a:83:a3:1f:e1:1e:75:ec:91:2a:a1:e7:e3: 63:aa:d6:d0:00:c6:cc:56:38:4a:47:20:1b:43:0c: 35:ae:43:55:a1:86:47:ad:ce:89:80:e7:2a:63:a1: 83:a9:5f:be:af:d3:a4:bb:d2:1a:d7:dd:45:dc:37: 06:d9:f6:74:91:c8:e2:1f:ef:6d:b7:81:47:f5:48: 16:3d:8d:4e:e1:61:d9:e6:cb:7c:16:2a:37:2c:40: 65:e4:01:9d:38:8c:af:6d:2f:68:e1:19:3f:fb:99: e0:d7:f7:78:91:d7:71:f3:af:84:a8:f3:12:66:e6: f3:03:46:ca:f0:ed:2b:ad:45:da:27:42:ad:27:c6: 29:07:e3:e2:fe:40:c4:54:72:4c:f6:9d:86:f7:89: 50:47:75:da:f2:9f:a1:9f:63:18:9e:c4:fb:d9:8d: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:69:7D:04:E7:F9:2E:07:30:9B:A2:67:AA:6C:03:03:87:F2:D0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0fb8d185-8807-3545-b937-e9d0bbfc0285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 158.247.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c5:10:dc:96:5d:97:da:ed:57:87:e3:68:a3:44:a4:99:40: 6d:55:38:e2:bb:ac:bf:b3:c6:5e:de:82:03:0e:d5:54:bf:68: d9:38:10:43:e6:f3:b5:01:58:ec:60:e3:37:6e:8d:f9:c0:76: 16:a4:a2:6e:40:f9:d5:34:82:55:7a:67:99:b0:45:e9:e8:26: 0d:de:2c:a0:64:65:ee:cd:97:90:fa:03:b5:4c:d9:4e:6b:05: 0d:3d:c8:55:9c:9c:0c:4f:82:d8:5b:d8:a2:98:80:aa:bc:97: 08:10:ff:a1:c8:34:5c:85:7b:ea:41:08:eb:7a:7e:d7:6d:63: 10:46:1e:4c:a1:bf:cc:9d:bc:8a:5d:4e:79:46:fd:49:ea:c1: 77:a8:9b:51:5b:fe:54:4c:10:bd:25:eb:3c:35:bb:f3:a0:40: 6f:ba:36:a4:6c:0b:6c:5d:49:90:2d:62:0e:bb:7c:1b:5d:8b: fa:c4:bb:2d:ee:a4:7b:b3:21:79:1f:78:5f:7e:34:a6:d1:e5: 78:9b:04:0f:a0:3a:26:48:3a:f2:f0:8a:f6:c1:e1:be:fa:53: 5c:df:57:e1:46:a2:33:ca:4f:62:13:fc:73:8f:72:da:6f:25: cf:4c:e4:e5:8a:11:89:20:f1:b3:59:bf:47:bf:52:c6:77:b4: 9e:09:2c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H+VhK85mt5S/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWE3YjRjY2YtYjU1My00MTBmLWJiOGQtNDdhMzgxMDAwNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVv3ruHiJiJ4L6gO5/Hb1+H5CQIdZIEP0bRE 5hLZYyccRHPd+wP9O8IhlJOjNHVOIO0FxlJ1T6p1seNNCAvU3dXtgktToGQGluD9 yMmIYqCs4pt4Nmps9ruC3iqDox/hHnXskSqh5+NjqtbQAMbMVjhKRyAbQww1rkNV oYZHrc6JgOcqY6GDqV++r9Oku9Ia191F3DcG2fZ0kcjiH+9tt4FH9UgWPY1O4WHZ 5st8Fio3LEBl5AGdOIyvbS9o4Rk/+5ng1/d4kddx86+EqPMSZubzA0bK8O0rrUXa J0KtJ8YpB+Pi/kDEVHJM9p2G94lQR3Xa8p+hn2MYnsT72Y30jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJpfQTn+S4HMJuiZ6psAwOH8tDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMGZiOGQxODUtODgwNy0z NTQ1LWI5MzctZTlkMGJiZmMwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnvdOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDFENyWXZfa7VeH42ijRKSZQG1VOOK7rL+zxl7eggMO1VS/aNk4EEPm 87UBWOxg4zdujfnAdhakom5A+dU0glV6Z5mwRenoJg3eLKBkZe7Nl5D6A7VM2U5r BQ09yFWcnAxPgthb2KKYgKq8lwgQ/6HINFyFe+pBCOt6ftdtYxBGHkyhv8ydvIpd TnlG/UnqwXeom1Fb/lRMEL0l6zw1u/OgQG+6NqRsC2xdSZAtYg67fBtdi/rEuy3u pHuzIXkfeF9+NKbR5XibBA+gOiZIOvLwivbB4b76U1zfV+FGojPKT2IT/HOPctpv Jc9M5OWKEYkg8bNZv0e/UsZ3tJ4JLCs= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:31 2025 by rpki-client