$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa File: d931f223-a5e0-357c-9df4-646112c7d5fd.roa (raw, json) Hash identifier: brW51pMN9gt44pSgjDQ4dnBNMaMF9n9M5Wi86RvwWGw= Subject key identifier: D1:D8:55:38:E8:7A:4B:13:CC:15:49:D9:CD:6E:75:46:0B:4A:2A:A7 Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Certificate serial: 010D0C9F4328584B6338B2F3B216CB551B837CB0 Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa Signing time: Thu 02 Oct 2025 10:24:31 +0000 ROA not before: Thu 02 Oct 2025 10:24:31 +0000 ROA not after: Wed 31 Dec 2025 11:24:31 +0000 asID: 26395 IP address blocks: 159.222.160.0/23 maxlen: 23 159.222.160.0/24 maxlen: 24 159.222.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:38:b2:f3:b2:16:cb:55:1b:83:7c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Validity Not Before: Oct 2 10:24:31 2025 GMT Not After : Dec 31 11:24:31 2025 GMT Subject: CN=0fbb4c5f-3675-4d8b-bcd2-027db585c4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:16:4c:3c:bc:2a:fd:c0:c1:8b:88:10:d8:e7: 82:61:64:4a:f5:d5:27:fd:aa:5a:e8:b6:eb:dd:21: d3:18:b9:60:e1:bc:78:26:8e:49:0f:b0:f6:71:d3: 44:f0:a0:8b:3a:ee:65:ca:68:96:b9:96:c9:82:1e: f4:5e:35:8e:83:61:6f:e6:ff:07:f6:92:86:48:35: b6:36:4a:76:d7:7c:df:8e:fa:23:30:96:ac:16:21: 65:7f:8d:1a:33:4b:a9:e9:9d:48:2e:26:9d:3d:92: 39:cd:48:11:64:95:f6:6b:47:b3:f3:f9:e2:05:cd: cd:f7:10:33:ce:4b:c3:ae:6b:26:fa:d6:cd:f3:d1: 6d:00:de:bf:08:44:42:a8:ac:97:75:3d:87:b3:a2: 0a:06:fd:72:74:52:5c:dc:c3:29:cb:d9:95:cb:49: fb:c9:7a:f4:af:c3:f8:58:ad:2f:dc:c5:89:be:61: d7:5d:b0:86:84:27:a6:9b:cb:c6:2b:e1:83:9c:31: 35:e2:eb:c5:df:3b:01:24:af:9b:8f:e4:9f:b0:4e: 0e:07:2a:f5:bd:46:f6:48:88:3f:b6:ff:c6:8e:97: 83:f4:b1:6e:49:ad:f3:5c:cf:d4:4a:e7:4c:bb:0f: 9b:20:95:0f:7e:1c:86:85:f2:bf:d7:0b:55:32:b3: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D8:55:38:E8:7A:4B:13:CC:15:49:D9:CD:6E:75:46:0B:4A:2A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl X509v3 Authority Key Identifier: keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer sbgp-ipAddrBlock: critical IPv4: 159.222.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c8:a0:6e:be:39:81:98:21:f5:c9:ed:b2:97:26:17:42:02: 0d:64:d8:03:f1:bf:d8:d0:dc:cc:e4:85:23:26:8f:df:3c:24: 3b:75:eb:b4:80:db:59:de:84:f2:01:ef:89:00:68:60:7e:86: 69:de:a3:48:ea:45:7d:a8:24:47:cf:a0:ee:6f:be:18:78:01: 57:4a:94:27:24:c2:85:a5:f1:05:b8:b6:c9:dd:66:2a:7f:b0: 54:aa:fb:fe:5b:2b:da:ae:17:6d:d3:6d:f6:3c:99:bf:26:dd: e4:8b:ce:2f:92:4c:83:c6:cc:3b:51:6e:44:33:06:97:10:d1: 20:8b:99:91:2e:67:20:ec:dc:f1:9d:cc:09:db:b7:b5:a8:d6: c3:fa:21:1d:ae:12:ea:b6:8b:e0:69:95:f7:ba:9f:1f:b1:e1: 65:5a:5a:6d:d1:5a:7d:a8:cc:7c:f0:60:79:b8:80:55:9e:d2: ba:dc:99:46:1e:5a:0a:4b:37:17:71:3d:a6:22:23:9d:05:a2: 5b:a0:ce:66:e7:41:58:0d:3e:2b:b5:2c:d6:5e:b9:f4:2d:42: 51:c1:d9:2a:ef:72:83:9b:90:e3:33:57:a9:74:37:a3:06:b2: 42:e0:2a:7e:f7:9e:6b:3e:42:1c:7c:bb:75:0d:70:8f:53:96: f8:11:0d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjOLLzshbLVRuDfLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNlZTU2OGQtZWIwMC00NzhjLWI0ODYtZGIzZjVkNjJj YmYzMB4XDTI1MTAwMjEwMjQzMVoXDTI1MTIzMTExMjQzMVowLzEtMCsGA1UEAxMk MGZiYjRjNWYtMzY3NS00ZDhiLWJjZDItMDI3ZGI1ODVjNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghZMPLwq/cDBi4gQ2OeCYWRK9dUn/apa6Lbr 3SHTGLlg4bx4Jo5JD7D2cdNE8KCLOu5lymiWuZbJgh70XjWOg2Fv5v8H9pKGSDW2 Nkp213zfjvojMJasFiFlf40aM0up6Z1ILiadPZI5zUgRZJX2a0ez8/niBc3N9xAz zkvDrmsm+tbN89FtAN6/CERCqKyXdT2Hs6IKBv1ydFJc3MMpy9mVy0n7yXr0r8P4 WK0v3MWJvmHXXbCGhCemm8vGK+GDnDE14uvF3zsBJK+bj+SfsE4OByr1vUb2SIg/ tv/GjpeD9LFuSa3zXM/USudMuw+bIJUPfhyGhfK/1wtVMrOzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHYVTjoeksTzBVJ2c1udUYLSiqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lY2Vl NTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNmNWQ2MmNiZjMvZDkzMWYyMjMtYTVlMC0z NTdjLTlkZjQtNjQ2MTEyYzdkNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWNlZTU2OGQtZWIwMC00NzhjLWI0 ODYtZGIzZjVkNjJjYmYzL2VjZWU1NjhkLWViMDAtNDc4Yy1iNDg2LWRiM2Y1ZDYy Y2JmMy5jcmwwHwYDVR0jBBgwFoAU3ezBYmsWKE4/m1LGgwTF1nWApUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lY2VlNTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNm NWQ2MmNiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn96gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/IoG6+OYGYIfXJ7bKXJhdCAg1k2APxv9jQ3MzkhSMmj988JDt167SA 21nehPIB74kAaGB+hmneo0jqRX2oJEfPoO5vvhh4AVdKlCckwoWl8QW4tsndZip/ sFSq+/5bK9quF23TbfY8mb8m3eSLzi+STIPGzDtRbkQzBpcQ0SCLmZEuZyDs3PGd zAnbt7Wo1sP6IR2uEuq2i+Bplfe6nx+x4WVaWm3RWn2ozHzwYHm4gFWe0rrcmUYe WgpLNxdxPaYiI50FolugzmbnQVgNPiu1LNZeufQtQlHB2SrvcoObkOMzV6l0N6MG skLgKn73nms+Qhx8u3UNcI9TlvgRDTg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:52 2025 by rpki-client