$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa File: 9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa (raw, json) Hash identifier: Ut5HEtZuBvnx3lOAAbobA99m18yMwPl4ZedRR6vGFKQ= Subject key identifier: A6:40:97:71:CF:D8:45:99:D3:94:DA:9E:95:6E:CA:BA:EE:C0:6A:EB Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F4328584B74B2C2A2B0DB692899298600 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa Signing time: Wed 08 Oct 2025 17:41:39 +0000 ROA not before: Wed 08 Oct 2025 17:41:39 +0000 ROA not after: Tue 06 Jan 2026 18:41:39 +0000 asID: 18526 IP address blocks: 158.51.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:b2:c2:a2:b0:db:69:28:99:29:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Oct 8 17:41:39 2025 GMT Not After : Jan 6 18:41:39 2026 GMT Subject: CN=9baf3264-5d34-40a4-ad67-bc5bb74e00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:ab:1c:bc:d2:37:51:5a:46:ed:67:03:26: 38:17:e3:c9:e5:12:ca:37:b9:16:7c:25:6f:5e:0f: 51:13:23:fa:76:b8:ae:7c:4e:e2:86:59:7f:61:16: 26:c3:86:6a:c4:c8:5c:35:fa:15:3b:6a:81:70:94: 46:a7:ca:44:2c:58:59:b7:a9:ba:66:be:94:12:29: 0f:18:73:5c:6a:28:f0:0d:27:7c:5a:49:87:dd:75: 8f:e5:7a:40:31:0b:62:8a:bf:4f:cb:f5:36:c1:23: a7:5c:5b:2b:69:6b:ce:37:68:f5:e2:7a:51:08:fa: be:65:f8:2d:8c:71:03:e0:ff:37:c2:2c:f9:80:a4: fd:9e:2d:48:69:f7:c1:d4:cc:11:ae:40:1d:f9:0b: dc:30:6b:50:44:d4:bc:cf:06:dc:79:e1:5b:6f:9c: 29:c9:ae:53:c1:ca:39:f1:51:f7:b7:b4:81:6d:fc: 83:7d:d7:01:d8:91:8b:0e:f6:6a:76:0f:85:07:22: f8:a0:1a:7f:d2:43:55:79:c7:27:c0:b3:10:5f:d7: d9:6f:e6:e1:94:15:b2:fb:93:77:17:d9:fe:07:9a: 0c:14:a1:b7:97:7b:83:f8:32:30:f9:d2:58:60:d3: 25:a5:36:f3:9f:bb:a4:de:60:d8:7b:84:38:52:94: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:40:97:71:CF:D8:45:99:D3:94:DA:9E:95:6E:CA:BA:EE:C0:6A:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9b3e0231-c9f5-3510-af2a-465cb2c9e68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d0:34:21:2c:e4:54:4a:42:3f:88:f0:05:e2:71:66:34:5c: 92:1a:94:59:b1:82:7c:b9:38:22:75:08:2f:f4:57:b9:a6:23: 16:3a:29:e3:8d:1e:7b:1d:4d:c3:43:6f:1b:fa:9a:bb:65:77: c3:33:57:6e:1d:a0:fb:a7:0b:21:f4:17:2a:a2:e9:c7:58:29: 21:97:1c:a8:f2:d2:55:95:76:ac:14:95:80:da:76:3e:0b:cd: 89:96:98:cc:f2:d9:6d:b5:d6:0f:32:8b:a6:f1:3e:c8:67:06: 05:92:55:ba:83:e5:7d:31:03:ee:e6:25:a0:3e:25:97:39:e1: d1:9c:84:3d:b6:86:d4:99:c6:8b:f7:d0:46:16:97:16:49:13: 88:64:61:dd:ca:e1:f9:c5:86:6b:71:66:8e:12:be:b9:07:26: bf:2b:9a:ef:44:04:e8:36:7f:6f:49:87:7b:bd:ed:10:60:49: b4:20:bb:24:d8:1c:a5:8e:33:da:ce:07:ac:c4:a0:74:4a:dc: 3b:46:3b:fa:3a:57:a1:8c:2f:f7:65:0d:e6:4f:71:73:87:7b: 01:e1:01:ee:e5:fa:a4:2a:1d:2b:ba:fd:4d:3a:e5:22:de:1a: d0:3f:a3:e6:f0:27:3f:c4:0d:1b:09:8c:8d:ca:a1:b0:f1:4a: 07:55:28:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0ssKisNtpKJkphgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI1MTAwODE3NDEzOVoXDTI2MDEwNjE4NDEzOVowLzEtMCsGA1UEAxMk OWJhZjMyNjQtNWQzNC00MGE0LWFkNjctYmM1YmI3NGUwMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAurHLzSN1FaRu1nAyY4F+PJ5RLKN7kWfCVv Xg9REyP6driufE7ihll/YRYmw4ZqxMhcNfoVO2qBcJRGp8pELFhZt6m6Zr6UEikP GHNcaijwDSd8WkmH3XWP5XpAMQtiir9Py/U2wSOnXFsraWvON2j14npRCPq+Zfgt jHED4P83wiz5gKT9ni1IaffB1MwRrkAd+QvcMGtQRNS8zwbceeFbb5wpya5Twco5 8VH3t7SBbfyDfdcB2JGLDvZqdg+FByL4oBp/0kNVeccnwLMQX9fZb+bhlBWy+5N3 F9n+B5oMFKG3l3uD+DIw+dJYYNMlpTbzn7uk3mDYe4Q4UpTEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZAl3HP2EWZ05TanpVuyrruwGrrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvOWIzZTAyMzEtYzlmNS0z NTEwLWFmMmEtNDY1Y2IyYzllNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInQNCEs5FRKQj+I8AXicWY0XJIalFmxgny5OCJ1CC/0V7mmIxY6KeON HnsdTcNDbxv6mrtld8MzV24doPunCyH0Fyqi6cdYKSGXHKjy0lWVdqwUlYDadj4L zYmWmMzy2W211g8yi6bxPshnBgWSVbqD5X0xA+7mJaA+JZc54dGchD22htSZxov3 0EYWlxZJE4hkYd3K4fnFhmtxZo4SvrkHJr8rmu9EBOg2f29Jh3u97RBgSbQguyTY HKWOM9rOB6zEoHRK3DtGO/o6V6GML/dlDeZPcXOHewHhAe7l+qQqHSu6/U065SLe GtA/o+bwJz/EDRsJjI3KobDxSgdVKAg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:55:51 2025 by rpki-client