$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa File: 7400a854-9ce1-369f-9bd1-4b942cd0108f.roa (raw, json) Hash identifier: 4f3cc8nMV1C1ocZ5Z4Gz7U8BwzhqSWpHutC/7sEm8Rw= Subject key identifier: 86:93:86:D1:2F:7C:E6:D2:A3:79:28:47:1D:84:2D:48:6F:FB:1C:2D Certificate issuer: /CN=85befeae-24b8-4c74-a4dc-19e1382944ad Certificate serial: 010D0C9F4328584B5F37241C0D19C0D23B95E400 Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 156.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:24:1c:0d:19:c0:d2:3b:95:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=1a6e509b-9c12-434e-8313-269904e04be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:95:6a:00:69:41:03:55:ff:37:a2:54:1e: a1:d9:24:77:6e:86:b8:f7:4f:36:82:3a:15:ec:3d: c9:8d:96:5a:23:53:c2:bf:56:b6:50:76:f6:54:a4: 10:5c:a2:38:36:a3:c3:4c:8d:1f:9e:b7:d9:3f:ab: 78:e4:9e:eb:d0:59:88:6b:99:db:9c:d9:a8:b1:18: 80:9c:ee:9f:5f:87:a3:94:f3:12:5e:84:bb:4b:26: 99:9d:57:90:1c:ea:f2:bd:ec:bb:c5:83:55:6a:f8: f1:b5:3c:29:3f:9e:52:7b:55:67:28:c6:59:f1:71: 3a:2f:95:11:95:ea:b2:03:5e:9b:86:df:e8:1b:d3: c6:a5:e2:5a:3d:63:88:8d:7e:ee:59:d7:87:86:50: ee:92:72:14:04:1f:f5:0b:d4:65:e3:41:93:30:3b: 14:76:83:d1:9c:96:0d:8a:2f:47:b5:59:1a:35:04: 27:0b:c9:74:7d:f3:9b:a5:10:7b:a1:5a:37:ab:4c: 61:19:18:4a:f3:0f:9c:59:65:af:3f:fc:8e:67:69: f9:a8:d7:72:d4:69:0f:16:7d:bd:52:8d:3a:95:41: 4b:9f:76:2f:0f:a3:9e:41:13:13:d9:63:b1:40:82: 28:08:1b:e3:a1:9c:05:1d:59:da:90:06:f4:87:f7: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:93:86:D1:2F:7C:E6:D2:A3:79:28:47:1D:84:2D:48:6F:FB:1C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl X509v3 Authority Key Identifier: keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer sbgp-ipAddrBlock: critical IPv4: 156.154.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:72:32:78:d6:12:50:53:0a:59:18:54:a6:85:77:2b:44:b9: 3b:20:91:4f:a6:69:c5:6e:83:78:f7:5b:fe:f6:53:c6:ef:91: 46:60:a8:f8:dc:56:aa:71:11:6f:9a:31:d0:3a:ea:5e:2b:4d: 8f:c0:c8:50:87:67:6c:30:0f:86:39:79:8c:52:e3:0e:3f:5d: 6a:64:29:d6:7d:19:93:0e:c3:f3:6b:49:9b:24:32:15:aa:18: 0b:23:10:f1:8c:80:cc:fb:e4:81:af:7f:83:55:81:51:e3:2e: cb:f5:a7:77:dd:cd:42:92:2a:d6:53:1e:52:95:83:7c:95:eb: a7:5a:51:c5:3a:3d:de:9c:31:f1:32:98:2d:f2:5c:db:41:09: 3f:3f:a6:5c:9e:eb:c7:18:1f:78:43:be:54:78:7a:79:3d:f1: b6:82:cd:3b:92:62:dc:dd:c3:7d:59:a2:2c:6e:57:16:25:63: 80:d5:53:1a:78:cb:2d:56:c8:8b:de:aa:b5:83:93:93:0c:a5: 0f:1b:90:28:9e:23:de:32:a4:b1:e3:f6:92:2f:e0:07:b8:6f: 77:3f:47:83:22:9d:6f:85:4b:a0:a7:ee:b4:f0:b1:eb:96:d2: 18:de:95:d9:75:0a:b7:83:66:eb:d7:95:3c:ed:6f:f1:94:f6: 49:40:b4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyQcDRnA0juV5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZWZlYWUtMjRiOC00Yzc0LWE0ZGMtMTllMTM4Mjk0 NGFkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MWE2ZTUwOWItOWMxMi00MzRlLTgzMTMtMjY5OTA0ZTA0YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfuVagBpQQNV/zeiVB6h2SR3boa49082gjoV 7D3JjZZaI1PCv1a2UHb2VKQQXKI4NqPDTI0fnrfZP6t45J7r0FmIa5nbnNmosRiA nO6fX4ejlPMSXoS7SyaZnVeQHOryvey7xYNVavjxtTwpP55Se1VnKMZZ8XE6L5UR leqyA16bht/oG9PGpeJaPWOIjX7uWdeHhlDuknIUBB/1C9Rl40GTMDsUdoPRnJYN ii9HtVkaNQQnC8l0ffObpRB7oVo3q0xhGRhK8w+cWWWvP/yOZ2n5qNdy1GkPFn29 Uo06lUFLn3YvD6OeQRMT2WOxQIIoCBvjoZwFHVnakAb0h/eEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaThtEvfObSo3koRx2ELUhv+xwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJl ZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUxMzgyOTQ0YWQvNzQwMGE4NTQtOWNlMS0z NjlmLTliZDEtNGI5NDJjZDAxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODViZWZlYWUtMjRiOC00Yzc0LWE0 ZGMtMTllMTM4Mjk0NGFkLzg1YmVmZWFlLTI0YjgtNGM3NC1hNGRjLTE5ZTEzODI5 NDRhZC5jcmwwHwYDVR0jBBgwFoAUwzVtrRq38XwWjDErZQ/V5Z/BvSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJlZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUx MzgyOTQ0YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJoTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxyMnjWElBTClkYVKaFdytEuTsgkU+macVug3j3W/72U8bvkUZgqPjc VqpxEW+aMdA66l4rTY/AyFCHZ2wwD4Y5eYxS4w4/XWpkKdZ9GZMOw/NrSZskMhWq GAsjEPGMgMz75IGvf4NVgVHjLsv1p3fdzUKSKtZTHlKVg3yV66daUcU6Pd6cMfEy mC3yXNtBCT8/plye68cYH3hDvlR4enk98baCzTuSYtzdw31ZoixuVxYlY4DVUxp4 yy1WyIveqrWDk5MMpQ8bkCieI94ypLHj9pIv4Ae4b3c/R4MinW+FS6Cn7rTwseuW 0hjeldl1CreDZuvXlTztb/GU9klAtCI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:36:56 2025 by rpki-client