$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/157081c6-ca44-329b-a4d9-e830bc9358aa.roa File: 157081c6-ca44-329b-a4d9-e830bc9358aa.roa (raw, json) Hash identifier: XLo9zZP60waVR+qClsxYb7zbasA+YnaLdKyvkjF7OgM= Subject key identifier: DA:19:D9:29:83:75:09:ED:86:9D:A9:91:7F:FB:53:75:87:DD:2D:FC Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F4328584B9E07BFDCA71011B3555D0328 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/157081c6-ca44-329b-a4d9-e830bc9358aa.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 400773 IP address blocks: 209.135.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bf:dc:a7:10:11:b3:55:5d:03:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d90c6306-2e40-4490-ac3a-a63d5bab0747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:f7:fd:81:90:28:7c:45:2c:50:c4:80:40: 27:b1:56:64:5e:a7:4f:cd:f7:7e:5a:d3:cf:e9:30: 47:0a:f4:7c:d9:12:ab:cf:22:2a:41:df:ad:02:bf: 4e:14:05:61:47:81:11:5a:34:54:d8:15:48:c2:67: 73:bb:2e:35:10:2f:f4:2b:4d:af:3f:20:8e:06:89: 1c:33:7c:81:ef:24:9a:32:70:8f:cd:47:d5:5d:dd: 47:fc:c9:e1:6c:e9:31:4d:74:88:65:e0:d8:ef:91: 14:fe:44:3b:09:8c:1b:d8:50:3b:7d:24:19:10:00: e8:f2:17:74:fd:b4:48:f3:df:5f:b8:c1:51:60:a8: d3:36:1e:42:68:19:44:6a:2d:17:53:13:72:d0:8f: 77:77:78:79:01:19:93:88:5d:2e:9f:79:88:b6:bb: e0:f5:ce:5d:e9:51:74:8a:38:b2:be:24:16:16:96: d2:da:f4:46:6d:c8:da:41:ac:50:87:b5:d1:dc:d0: 18:94:46:df:1f:3e:c4:58:12:44:24:3c:93:c9:8b: 93:35:7a:ba:13:45:a7:17:f5:42:7e:fa:b8:4a:ff: b8:b8:7a:b0:26:c2:a5:c3:e7:87:39:29:5a:26:fe: 10:e2:29:50:23:fa:08:0e:12:b6:fb:81:9d:8e:c5: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:19:D9:29:83:75:09:ED:86:9D:A9:91:7F:FB:53:75:87:DD:2D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/157081c6-ca44-329b-a4d9-e830bc9358aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 209.135.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8a:39:4f:7f:ec:05:ed:20:9c:6f:b9:e7:e7:93:33:e0:ff: 11:62:09:3c:c1:77:20:1d:a5:e5:30:20:1e:c8:54:1d:30:8c: fd:dd:c6:59:ec:63:d1:b8:f9:1d:91:91:58:98:4a:0f:3c:8c: 3f:75:3a:3a:88:14:43:3b:9d:32:b4:51:af:bd:04:ad:ea:77: 64:a6:11:ac:8c:9c:7f:48:46:ab:d9:f1:1e:00:ad:70:86:1e: 66:2a:6e:5c:c8:3b:39:7e:c9:a3:39:bf:47:6e:34:66:b4:00: 92:2f:7f:44:43:b2:b6:03:86:75:f6:5a:d5:14:18:13:a5:87: 53:c8:19:b7:f8:fa:0c:28:26:cd:99:e6:75:42:10:a4:ef:36: 4b:18:1c:8f:7b:db:4f:d6:91:ea:08:fe:0f:a1:88:be:11:67: fe:71:2a:ea:8e:88:bf:c4:f5:06:bb:20:95:ea:e7:e0:d6:e5: bb:45:b0:f0:e4:98:cb:8b:ed:f5:9b:92:11:1c:cc:b2:76:c5: cb:51:6b:80:d6:d7:5b:bc:5d:7c:67:e9:a6:99:e9:db:bb:15: 16:6c:bd:09:be:56:5d:bf:df:df:d9:f2:8c:23:aa:ef:f9:26: ce:28:1d:bf:3c:5e:9c:5b:c5:47:e3:25:58:91:70:bb:a7:62: ff:81:ee:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7/cpxARs1VdAygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDkwYzYzMDYtMmU0MC00NDkwLWFjM2EtYTYzZDViYWIwNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimv3/YGQKHxFLFDEgEAnsVZkXqdPzfd+WtPP 6TBHCvR82RKrzyIqQd+tAr9OFAVhR4ERWjRU2BVIwmdzuy41EC/0K02vPyCOBokc M3yB7ySaMnCPzUfVXd1H/MnhbOkxTXSIZeDY75EU/kQ7CYwb2FA7fSQZEADo8hd0 /bRI899fuMFRYKjTNh5CaBlEai0XUxNy0I93d3h5ARmTiF0un3mItrvg9c5d6VF0 ijiyviQWFpbS2vRGbcjaQaxQh7XR3NAYlEbfHz7EWBJEJDyTyYuTNXq6E0WnF/VC fvq4Sv+4uHqwJsKlw+eHOSlaJv4Q4ilQI/oIDhK2+4GdjsXv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoZ2SmDdQnthp2pkX/7U3WH3S38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvMTU3MDgxYzYtY2E0NC0z MjliLWE0ZDktZTgzMGJjOTM1OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0YekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCKOU9/7AXtIJxvuefnkzPg/xFiCTzBdyAdpeUwIB7IVB0wjP3dxlns Y9G4+R2RkViYSg88jD91OjqIFEM7nTK0Ua+9BK3qd2SmEayMnH9IRqvZ8R4ArXCG HmYqblzIOzl+yaM5v0duNGa0AJIvf0RDsrYDhnX2WtUUGBOlh1PIGbf4+gwoJs2Z 5nVCEKTvNksYHI9720/WkeoI/g+hiL4RZ/5xKuqOiL/E9Qa7IJXq5+DW5btFsPDk mMuL7fWbkhEczLJ2xctRa4DW11u8XXxn6aaZ6du7FRZsvQm+Vl2/39/Z8owjqu/5 Js4oHb88XpxbxUfjJViRcLunYv+B7n8= -----END CERTIFICATE-----Generated at Tue Nov 4 09:45:26 2025 by rpki-client