$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa File: f3449d09-d701-35da-bb14-a8ab89190e72.roa (raw, json) Hash identifier: Lfsmes4mVttjrnD0Y19cEleYBj916NqKpGt/P6kRXag= Subject key identifier: 72:6A:07:B4:88:F1:14:F0:8C:5D:E8:3A:D1:F7:5D:65:0B:E6:23:C1 Certificate issuer: /CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Certificate serial: 010D0C9F4328584B9E07AD0ECD864AD0E856A080 Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 168.151.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ad:0e:cd:86:4a:d0:e8:56:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2a1acde8-1985-4787-a4ef-777b7fb1a6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:80:e4:06:e6:c7:60:a9:6d:5c:26:48:e0: d0:3d:50:46:97:08:30:a9:40:2e:36:e7:f6:a1:ce: 7c:27:da:6d:57:ab:27:8e:d5:39:f2:4a:8b:8e:54: ec:6e:74:88:2f:78:87:fa:d3:89:ce:5d:66:93:e8: 2f:5c:fe:1b:f3:cb:8c:91:42:d3:67:92:30:80:6e: 38:02:f9:7f:50:3f:3b:54:b3:db:57:bf:c5:3c:ab: f7:f0:00:e2:ad:a5:e1:81:7b:08:26:ae:45:96:b3: de:f4:f1:5d:aa:a0:b3:ed:87:0d:e4:6a:f9:9b:d0: d0:57:a6:c9:62:0e:e2:ca:93:6d:72:e9:16:34:e2: 36:26:2c:fd:1e:74:0a:97:63:f8:42:bf:44:b6:46: be:72:34:31:fa:73:f4:e9:b9:56:4c:5a:fa:a4:ac: 44:14:2e:a7:f7:96:05:9d:62:5d:81:e0:4b:70:16: fd:26:79:22:58:7e:05:9c:e5:97:8a:95:57:c5:eb: 53:ee:cf:6f:77:e8:81:86:ff:6e:57:65:f2:c1:3c: a3:85:5a:7a:2c:b4:18:6c:3c:5f:49:34:67:f6:cd: 0e:89:66:bd:43:5c:ea:47:24:6e:c2:21:c8:a4:95: b6:a5:69:d4:95:c5:e0:d5:e5:5b:a6:18:b8:bb:32: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6A:07:B4:88:F1:14:F0:8C:5D:E8:3A:D1:F7:5D:65:0B:E6:23:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl X509v3 Authority Key Identifier: keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer sbgp-ipAddrBlock: critical IPv4: 168.151.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:8a:f6:59:9d:82:7b:c1:fc:19:af:bd:90:53:63:78:b6:03: 09:6a:46:28:01:5b:b2:6c:af:1f:26:c8:80:a3:57:f1:32:44: 89:1e:b4:74:25:29:ce:65:a8:8e:47:52:33:20:b8:26:3a:67: 4b:2f:67:1b:54:58:ee:1d:24:bb:da:52:4c:8e:ae:8f:ef:44: 7e:23:91:fa:f5:44:75:49:d3:cd:50:08:c0:e5:55:c9:b2:43: 33:27:b9:cf:20:12:ca:6d:ae:c5:f8:a3:a6:e2:f5:45:09:85: 3c:28:1c:d8:48:3d:0d:3e:ca:be:80:00:3a:c2:9b:c1:8f:64: b8:a5:39:53:9f:ce:f6:ca:d8:c5:6e:52:b9:2b:04:80:89:7e: f8:78:6f:b9:0a:c1:b4:34:93:71:be:ee:70:9e:fa:be:3a:37: 0e:22:63:58:ad:4c:db:ee:a3:57:2e:c6:13:ee:e8:81:d7:78: f7:df:73:86:7e:15:d4:88:a8:aa:dd:03:6f:6a:66:a9:a6:a4: f5:cd:98:a3:f6:7b:8e:91:22:3d:94:9f:e1:dc:7f:e4:9e:9b: 3b:4a:2a:d0:6d:1d:ac:e9:96:b9:a1:05:b3:54:70:34:67:3b: 3c:f5:08:ab:e0:d5:0b:fc:18:3f:b7:60:db:1e:ea:af:cb:b8: 2b:c9:19:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB60OzYZK0OhWoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5 M2E4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmExYWNkZTgtMTk4NS00Nzg3LWE0ZWYtNzc3YjdmYjFhNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndmA5Abmx2CpbVwmSODQPVBGlwgwqUAuNuf2 oc58J9ptV6snjtU58kqLjlTsbnSIL3iH+tOJzl1mk+gvXP4b88uMkULTZ5IwgG44 Avl/UD87VLPbV7/FPKv38ADiraXhgXsIJq5FlrPe9PFdqqCz7YcN5Gr5m9DQV6bJ Yg7iypNtcukWNOI2Jiz9HnQKl2P4Qr9Etka+cjQx+nP06blWTFr6pKxEFC6n95YF nWJdgeBLcBb9JnkiWH4FnOWXipVXxetT7s9vd+iBhv9uV2XywTyjhVp6LLQYbDxf STRn9s0OiWa9Q1zqRyRuwiHIpJW2pWnUlcXg1eVbphi4uzJmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJqB7SI8RTwjF3oOtH3XWUL5iPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvZjM0NDlkMDktZDcwMS0z NWRhLWJiMTQtYThhYjg5MTkwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4 ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWK9lmdgnvB/BmvvZBTY3i2AwlqRigBW7Jsrx8myICjV/EyRIketHQl Kc5lqI5HUjMguCY6Z0svZxtUWO4dJLvaUkyOro/vRH4jkfr1RHVJ081QCMDlVcmy QzMnuc8gEsptrsX4o6bi9UUJhTwoHNhIPQ0+yr6AADrCm8GPZLilOVOfzvbK2MVu UrkrBICJfvh4b7kKwbQ0k3G+7nCe+r46Nw4iY1itTNvuo1cuxhPu6IHXePffc4Z+ FdSIqKrdA29qZqmmpPXNmKP2e46RIj2Un+Hcf+SemztKKtBtHazplrmhBbNUcDRn Ozz1CKvg1Qv8GD+3YNse6q/LuCvJGWo= -----END CERTIFICATE-----Generated at Tue Nov 4 09:40:26 2025 by rpki-client