$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa File: f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa (raw, json) Hash identifier: 6BnDMNmxONJBU6WYkZn6OFkIHt2aXpJQJIXoU0YO1IU= Subject key identifier: 2E:37:E4:10:BF:B5:51:68:87:E1:BF:97:4E:85:64:3C:57:0F:D0:1D Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Certificate serial: 010D0C9F4328584B2496C70661F5D9F55ABF24C0 Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 399076 IP address blocks: 149.234.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c7:06:61:f5:d9:f5:5a:bf:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=333f47fd-2436-47d2-944c-a1ee73fa2912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:3f:ce:86:f0:1b:cd:db:82:2b:fe:3b:8e: ca:6b:0e:8f:c5:37:e3:28:a6:21:f6:f7:66:22:06: 7b:f7:74:1e:46:31:e7:cb:1c:98:b2:6b:c3:69:66: 21:cf:c5:92:f8:07:17:ee:82:3a:f6:67:14:05:05: de:d6:41:0b:d1:3b:34:e5:77:b4:88:bf:6b:05:67: d1:7e:be:9d:8e:34:17:6c:f6:26:15:27:98:c2:93: cf:ea:23:2a:e2:4b:98:29:d6:a5:02:2c:5f:7d:03: d1:7b:86:a2:eb:80:5c:4d:3c:a5:38:53:ba:2d:8b: d7:77:c5:af:e5:d7:22:4a:76:4e:39:fd:8f:f7:19: 8b:00:0a:d7:66:a2:a4:bd:07:9f:cb:a1:1c:35:c1: c7:61:bf:b1:18:8a:08:89:70:e0:f0:34:65:0e:77: 94:43:43:2f:d4:3d:ac:76:c0:9b:37:9e:e8:73:1f: c5:cc:96:a6:a2:e9:0e:44:bd:9b:eb:30:52:0b:bd: 3d:33:b1:7c:a7:ab:c1:bc:0a:a2:e6:21:93:1e:42: a4:d8:57:3b:5d:77:07:f0:b8:77:67:5c:0a:9d:08: 70:ec:c8:e4:64:3e:0e:dd:bd:e7:b4:aa:29:94:bb: 6f:4e:79:bd:9c:2d:d6:22:fb:57:31:79:8c:cc:cf: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:37:E4:10:BF:B5:51:68:87:E1:BF:97:4E:85:64:3C:57:0F:D0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl X509v3 Authority Key Identifier: keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer sbgp-ipAddrBlock: critical IPv4: 149.234.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fb:60:50:11:fd:9c:0b:91:9f:40:28:0e:34:dc:f3:80:78: 5a:ab:47:34:3f:15:68:1d:c4:3e:cc:05:22:69:1f:35:98:1e: e2:a4:55:49:14:52:bf:c9:bc:5b:48:55:be:53:a7:72:f9:c1: 09:98:81:2b:89:1d:bc:56:89:fa:00:63:d8:ff:bf:4c:05:2a: 8e:41:96:7c:c0:ce:99:92:2f:d0:67:87:01:eb:a9:79:6b:3d: b8:0b:02:f4:58:65:14:36:ba:de:6a:b8:ef:23:46:a3:78:77: 24:b9:93:e5:92:79:63:54:67:4d:f2:79:be:31:0c:1e:29:ff: e5:2d:b8:55:7c:f0:ec:df:65:60:90:ec:ea:06:8d:46:28:cf: ed:57:3b:c9:8a:7a:65:c4:15:68:93:23:44:20:32:9e:bf:87: 9f:7c:8f:ec:f5:1f:14:fa:2d:2d:5f:fe:71:ca:f8:e7:fd:d3: b2:7f:ab:14:17:2a:d4:77:f7:b1:6f:db:4d:77:ee:bd:11:2b: 46:80:c5:3b:6b:46:0d:9f:fa:17:36:b5:d9:0d:f3:f3:47:03: bf:0b:2d:f3:0f:57:e0:74:8e:d6:13:21:95:65:b6:14:25:df: b2:ea:fe:43:f9:7f:16:12:65:f6:03:3f:51:57:5e:8a:3c:b6: 51:aa:4f:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklscGYfXZ9Vq/JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3 NzA4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MzMzZjQ3ZmQtMjQzNi00N2QyLTk0NGMtYTFlZTczZmEyOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM4/zobwG83bgiv+O47Kaw6PxTfjKKYh9vdm IgZ793QeRjHnyxyYsmvDaWYhz8WS+AcX7oI69mcUBQXe1kEL0Ts05Xe0iL9rBWfR fr6djjQXbPYmFSeYwpPP6iMq4kuYKdalAixffQPRe4ai64BcTTylOFO6LYvXd8Wv 5dciSnZOOf2P9xmLAArXZqKkvQefy6EcNcHHYb+xGIoIiXDg8DRlDneUQ0Mv1D2s dsCbN57ocx/FzJamoukORL2b6zBSC709M7F8p6vBvAqi5iGTHkKk2Fc7XXcH8Lh3 Z1wKnQhw7MjkZD4O3b3ntKoplLtvTnm9nC3WIvtXMXmMzM979QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC435BC/tVFoh+G/l06FZDxXD9AdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvZjVmNTQxOTktY2QxYi0z NmU5LTk2NTctOGVlZWRmYjdlN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlerkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr7YFAR/ZwLkZ9AKA403POAeFqrRzQ/FWgdxD7MBSJpHzWYHuKkVUkU Ur/JvFtIVb5Tp3L5wQmYgSuJHbxWifoAY9j/v0wFKo5BlnzAzpmSL9BnhwHrqXlr PbgLAvRYZRQ2ut5quO8jRqN4dyS5k+WSeWNUZ03yeb4xDB4p/+UtuFV88OzfZWCQ 7OoGjUYoz+1XO8mKemXEFWiTI0QgMp6/h598j+z1HxT6LS1f/nHK+Of907J/qxQX KtR397Fv20137r0RK0aAxTtrRg2f+hc2tdkN8/NHA78LLfMPV+B0jtYTIZVlthQl 37Lq/kP5fxYSZfYDP1FXXoo8tlGqTyU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:49 2025 by rpki-client