$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2094310a-57e0-3be0-b083-7d01cd54fb75.roa File: 2094310a-57e0-3be0-b083-7d01cd54fb75.roa (raw, json) Hash identifier: z9IYFdEYNRQa5Wbfn7tfQqkZ06bWr5JXSz0mndEBanY= Subject key identifier: 95:3E:BF:52:D5:57:AD:92:E8:EE:73:AC:D2:1E:01:62:AB:99:C9:75 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BC2D64AE42AC75F566139D27E Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2094310a-57e0-3be0-b083-7d01cd54fb75.roa Signing time: Wed 05 Nov 2025 17:26:18 +0000 ROA not before: Wed 05 Nov 2025 17:26:18 +0000 ROA not after: Tue 03 Feb 2026 17:26:18 +0000 asID: 18731 IP address blocks: 157.238.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:d6:4a:e4:2a:c7:5f:56:61:39:d2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 5 17:26:18 2025 GMT Not After : Feb 3 17:26:18 2026 GMT Subject: CN=0071ed8d-d778-4b62-b473-bb43be710358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:7d:b4:ec:be:7f:92:ac:d3:fd:24:bb:fd: 19:03:33:89:84:46:8d:fd:cc:bc:45:81:b9:76:86: 27:8a:bd:60:99:04:fc:94:67:88:56:32:34:7c:60: 1a:2e:49:24:2f:f9:13:9d:d8:ab:c0:33:d3:04:2a: 8e:bd:1b:24:26:e8:64:85:fa:32:f0:e7:f4:9b:08: 14:3b:a2:db:b7:20:39:90:b1:f3:77:de:4d:5e:96: 5e:e4:ec:96:75:37:f4:3f:b5:48:6b:ae:f1:14:2e: 79:0b:f4:2b:20:bb:d7:fb:ec:ae:1d:4b:eb:98:6f: f9:c4:98:97:d6:0f:9f:66:62:28:a5:22:e8:fb:aa: fb:73:1f:5a:d8:a4:bf:9c:2e:34:5f:29:29:93:a1: 78:06:72:2d:3c:de:66:62:87:c9:58:b3:9d:23:49: f4:8a:a6:0e:44:d0:c8:07:19:00:29:5d:32:f9:ad: 26:c6:8a:36:4f:19:61:11:ef:89:bd:84:31:06:ad: 06:00:e3:a8:97:12:4f:9d:2a:9e:3c:31:27:50:e3: 33:15:cc:1a:d9:3b:a5:10:43:50:20:1c:b5:f9:95: 47:ec:3f:e8:ec:6f:c9:01:7b:01:f7:33:b9:da:cb: 1b:cd:bc:80:a8:1c:39:db:48:4e:37:05:61:0c:6a: e5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:BF:52:D5:57:AD:92:E8:EE:73:AC:D2:1E:01:62:AB:99:C9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2094310a-57e0-3be0-b083-7d01cd54fb75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bf:d8:85:0f:bc:68:c2:ba:0b:ee:16:8a:58:d7:19:55:3a: 86:93:34:f9:9d:1c:e3:2f:bd:14:f2:17:80:4a:bc:16:09:11: 2b:12:a9:93:5a:1a:64:fd:0b:a3:ac:04:ef:e6:ea:b3:4a:66: ee:47:2e:f4:64:e7:55:ed:e9:66:a0:14:b6:c5:d9:1b:72:e3: e5:59:1f:c9:21:6d:04:c4:a0:ae:26:cb:5a:1d:12:9d:07:1c: 6e:35:51:fb:4c:dc:3a:7d:0c:67:77:c6:3e:f8:05:b2:3e:02: 65:b9:2a:0b:65:ec:4c:ee:07:f6:10:f8:96:d9:74:12:d0:31: 5c:22:24:cd:a6:f5:b7:7f:1e:10:1a:fd:c8:f2:8b:62:e7:74: 6c:c1:d4:a3:c7:e0:c4:e8:b9:aa:43:7c:96:73:21:59:b6:96: 66:f8:12:2e:bd:fc:cc:fc:f6:b1:43:db:5b:9a:73:45:c4:7a: 1f:bd:4b:bd:91:1a:d9:60:2c:bb:98:e7:d7:4b:35:e8:46:52: 19:75:66:ad:c1:8d:36:37:b0:b0:56:b2:82:33:24:26:1d:b7: d5:9e:30:39:d5:a5:69:cb:f3:91:69:29:1d:34:29:12:94:74: 80:1a:8e:82:0b:96:2b:92:08:93:4e:e4:ca:5d:f5:34:77:ed: 62:82:9a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvC1krkKsdfVmE50n4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNTE3MjYxOFoXDTI2MDIwMzE3MjYxOFowLzEtMCsGA1UEAxMk MDA3MWVkOGQtZDc3OC00YjYyLWI0NzMtYmI0M2JlNzEwMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6h9tOy+f5Ks0/0ku/0ZAzOJhEaN/cy8RYG5 doYnir1gmQT8lGeIVjI0fGAaLkkkL/kTndirwDPTBCqOvRskJuhkhfoy8Of0mwgU O6LbtyA5kLHzd95NXpZe5OyWdTf0P7VIa67xFC55C/QrILvX++yuHUvrmG/5xJiX 1g+fZmIopSLo+6r7cx9a2KS/nC40Xykpk6F4BnItPN5mYofJWLOdI0n0iqYORNDI BxkAKV0y+a0mxoo2TxlhEe+JvYQxBq0GAOOolxJPnSqePDEnUOMzFcwa2TulEENQ IBy1+ZVH7D/o7G/JAXsB9zO52ssbzbyAqBw520hONwVhDGrlgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU+v1LVV62S6O5zrNIeAWKrmcl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjA5NDMxMGEtNTdlMC0z YmUwLWIwODMtN2QwMWNkNTRmYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEne5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2/2IUPvGjCugvuFopY1xlVOoaTNPmdHOMvvRTyF4BKvBYJESsSqZNa GmT9C6OsBO/m6rNKZu5HLvRk51Xt6WagFLbF2Rty4+VZH8khbQTEoK4my1odEp0H HG41UftM3Dp9DGd3xj74BbI+AmW5Kgtl7EzuB/YQ+JbZdBLQMVwiJM2m9bd/HhAa /cjyi2LndGzB1KPH4MTouapDfJZzIVm2lmb4Ei69/Mz89rFD21uac0XEeh+9S72R GtlgLLuY59dLNehGUhl1Zq3BjTY3sLBWsoIzJCYdt9WeMDnVpWnL85FpKR00KRKU dIAajoILliuSCJNO5Mpd9TR37WKCmg0= -----END CERTIFICATE-----Generated at Sat Nov 15 08:26:30 2025 by rpki-client