$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa File: 45db1138-014a-3675-81af-627a0951dfec.roa (raw, json) Hash identifier: fiQK2CkJXFwZgJmP2H2fyNK7kYYrdCo6ACeGgbr3DW8= Subject key identifier: 03:39:64:76:3F:FD:1C:4A:78:8D:DB:11:7B:97:44:20:91:E7:0E:63 Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F4328584B987243714BE0DAABC3E064B2 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 400754 IP address blocks: 160.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:43:71:4b:e0:da:ab:c3:e0:64:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=90ec122f-5d73-47c0-81df-aeeadb283731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:75:bb:49:47:e5:e0:df:64:67:60:04:78: c3:e9:b3:a0:8a:14:2a:bc:af:86:93:62:6e:27:86: 7d:d9:a5:be:8a:46:3f:d4:3b:16:23:4e:ff:59:c8: ee:18:32:51:f5:6a:2b:20:01:19:47:83:74:8d:86: 79:b5:8a:8e:a7:62:d4:1a:9c:3f:3d:32:a2:d0:13: 7b:79:7d:b0:ce:49:cf:43:ed:fb:d3:f4:5d:66:ba: 17:2f:f7:62:b0:fd:03:f1:0a:30:16:05:d8:21:90: 4b:63:1f:61:85:8d:c0:6c:65:bb:a7:c0:c0:b8:b7: 8d:14:74:42:93:0c:33:a9:aa:a1:ef:1b:a1:06:10: d3:67:f0:57:49:2f:23:dc:85:48:ec:42:f7:2d:22: 30:71:a3:6e:61:a0:2f:2b:38:78:97:57:ec:82:65: 57:ea:ff:a2:67:9e:ab:76:58:8a:28:0c:de:90:78: 1e:e9:88:1d:a3:47:50:d8:54:eb:ce:6e:98:60:3d: e2:34:62:ed:ee:c1:80:5b:5d:2a:65:11:3b:15:94: 04:15:9c:c8:8f:c1:5d:d3:21:b5:d6:0b:5f:47:f0: ae:e4:6d:1b:31:cc:dc:ba:c6:a6:f7:e4:cf:9a:11: af:f5:cb:ba:cb:ff:03:aa:b1:62:b7:e1:7a:7d:63: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:39:64:76:3F:FD:1C:4A:78:8D:DB:11:7B:97:44:20:91:E7:0E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 160.153.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:33:1a:62:93:21:54:dc:6b:f5:ec:a5:54:a3:a5:e1:25:5a: 6d:63:23:43:1f:c3:aa:b8:58:da:f5:e2:b6:cc:41:34:bf:88: 48:41:35:53:2a:40:42:ec:74:28:d3:6f:c9:1e:d9:4a:a4:55: 1b:85:24:38:6d:b6:52:f0:44:b8:ab:9e:96:d7:27:74:a9:d3: 47:e1:16:e7:23:36:2e:6e:2b:9e:8b:e3:c3:6e:40:a6:6f:d9: 1c:f7:9c:bf:cd:0c:6d:c5:9c:8c:ab:60:58:e5:23:b8:76:f9: f4:02:2a:59:da:83:fe:2d:ba:17:ee:82:e8:6b:fe:46:d7:db: 26:d8:41:cc:a2:a2:50:cf:ad:cd:6d:fb:08:ed:a4:71:45:d8: 57:3a:09:df:fb:c7:c0:fe:67:33:69:07:5c:e5:c6:ae:f5:93: 5d:d5:a2:43:e8:3a:e0:e6:ce:ba:42:8e:ee:9d:7a:b6:aa:91: 85:fe:18:ef:4e:f0:c1:56:ab:12:92:82:c6:40:b2:6b:56:3d: ce:52:05:65:83:33:71:cf:3e:5d:c0:fe:24:c5:fe:33:ff:b6: 40:1a:3d:a3:b6:94:e7:fa:b1:a9:62:42:8d:f7:d3:e6:12:3c: eb:0b:1c:23:d6:1a:7b:35:80:45:ee:25:a0:18:62:34:a6:93: 36:40:5d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckNxS+Daq8PgZLIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OTBlYzEyMmYtNWQ3My00N2MwLTgxZGYtYWVlYWRiMjgzNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPN1u0lH5eDfZGdgBHjD6bOgihQqvK+Gk2Ju J4Z92aW+ikY/1DsWI07/WcjuGDJR9WorIAEZR4N0jYZ5tYqOp2LUGpw/PTKi0BN7 eX2wzknPQ+370/RdZroXL/disP0D8QowFgXYIZBLYx9hhY3AbGW7p8DAuLeNFHRC kwwzqaqh7xuhBhDTZ/BXSS8j3IVI7EL3LSIwcaNuYaAvKzh4l1fsgmVX6v+iZ56r dliKKAzekHge6Ygdo0dQ2FTrzm6YYD3iNGLt7sGAW10qZRE7FZQEFZzIj8Fd0yG1 1gtfR/Cu5G0bMczcusam9+TPmhGv9cu6y/8DqrFit+F6fWMqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM5ZHY//RxKeI3bEXuXRCCR5w5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvNDVkYjExMzgtMDE0YS0z Njc1LTgxYWYtNjI3YTA5NTFkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoJkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAzGmKTIVTca/XspVSjpeElWm1jI0Mfw6q4WNr14rbMQTS/iEhBNVMq QELsdCjTb8ke2UqkVRuFJDhttlLwRLirnpbXJ3Sp00fhFucjNi5uK56L48NuQKZv 2Rz3nL/NDG3FnIyrYFjlI7h2+fQCKlnag/4tuhfuguhr/kbX2ybYQcyiolDPrc1t +wjtpHFF2Fc6Cd/7x8D+ZzNpB1zlxq71k13VokPoOuDmzrpCju6deraqkYX+GO9O 8MFWqxKSgsZAsmtWPc5SBWWDM3HPPl3A/iTF/jP/tkAaPaO2lOf6saliQo330+YS POsLHCPWGns1gEXuJaAYYjSmkzZAXR0= -----END CERTIFICATE-----Generated at Mon Nov 3 08:51:42 2025 by rpki-client