$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ec62920f-e68a-33bc-843c-10d5d67dab79.roa File: ec62920f-e68a-33bc-843c-10d5d67dab79.roa (raw, json) Hash identifier: pJmxYes1yMuYZ+abbDh02liu8Hl9uf+XEfv1ofdJGdw= Subject key identifier: 13:B6:EE:33:75:D3:D3:78:33:BF:50:AB:22:C7:9D:51:61:BB:CC:C0 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584BD3305EA44F199E4A91E50520 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ec62920f-e68a-33bc-843c-10d5d67dab79.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 18434 IP address blocks: 156.55.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:5e:a4:4f:19:9e:4a:91:e5:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=ff26c579-8549-43ab-bf2f-bb146469c317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:ec:ae:57:23:6a:a4:aa:12:d6:65:37:0e: 84:0d:78:9e:84:44:fe:75:54:97:af:e4:d7:f3:fe: d1:e5:99:a0:ea:6c:71:57:8c:12:69:9f:34:5f:1a: 9b:e9:54:06:6e:d3:ff:d8:ec:45:8d:35:cc:1e:71: 76:3d:7c:cc:0e:b6:75:cf:ce:0b:c0:0c:24:bd:af: a1:95:5b:fe:7a:81:33:c0:e8:34:32:c9:b8:ea:e6: 88:5b:58:fb:7b:44:53:20:bf:b0:8d:d6:df:7a:7b: e3:04:f9:d3:b5:7a:98:41:50:d8:40:02:60:67:75: bc:f0:0d:9b:a9:7a:94:e3:6a:54:84:40:82:17:73: 8d:5a:6a:ee:c7:1d:c7:9d:f4:2d:45:eb:9a:79:0a: 6b:be:3c:d5:a2:32:ee:c9:60:3c:d9:85:23:a4:be: 1b:63:95:b8:b4:7e:d7:3a:29:92:ce:43:66:12:18: 38:b7:94:ca:ea:b0:63:1d:80:c8:ff:a7:74:41:86: 51:1d:56:c7:6d:8a:22:d9:53:fd:04:84:2f:2b:10: 33:7d:ed:7a:35:4f:0b:10:ca:de:d5:2c:dd:dd:8b: 26:10:c7:e2:91:42:5d:f9:62:ba:bf:90:2d:c0:33: 50:ee:76:30:0e:a4:6c:58:57:66:92:25:75:23:4b: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B6:EE:33:75:D3:D3:78:33:BF:50:AB:22:C7:9D:51:61:BB:CC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ec62920f-e68a-33bc-843c-10d5d67dab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 156.55.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:76:50:be:38:b1:47:45:3a:5a:9a:b7:7e:12:e5:65:84:ea: cc:4c:62:44:c4:f7:78:4e:a9:f9:55:4c:e1:1f:3d:6a:08:c2: f7:f6:b7:3f:ed:d0:4c:5c:58:ea:7e:9f:ed:31:86:b4:fe:bb: 2a:5c:28:19:34:80:30:c1:c6:a1:96:3c:b9:67:8d:f2:cd:95: c4:f7:7c:ec:e0:35:d2:ee:a0:ef:8b:95:56:fc:f9:86:27:47: 4d:6b:43:37:79:c6:e3:a1:fd:88:45:08:f3:75:d9:15:0a:18: 97:4e:53:95:96:c0:da:1f:fb:73:ee:d6:51:65:e0:1e:d8:dd: bb:09:bb:61:2c:84:47:6f:fd:79:d5:a5:69:e6:2f:b3:b6:2f: ba:62:37:00:27:f5:b8:2b:76:d8:db:00:36:ae:3d:b4:6e:9c: 63:b2:94:79:e3:65:c4:7b:97:e7:26:5c:bb:8c:74:ae:e3:02: 37:2b:aa:0c:89:ef:49:43:fc:51:4b:c2:eb:5b:ba:69:58:1f: ef:e3:5f:e5:71:af:1e:29:d5:62:71:60:7e:60:4e:dd:a7:13: c0:6c:30:c0:05:b9:e6:17:93:20:65:19:88:b6:81:57:b1:32: 43:cf:55:84:41:9d:09:54:42:fd:b5:95:84:5e:48:9c:bc:b1: a1:a7:d0:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMF6kTxmeSpHlBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZmYyNmM1NzktODU0OS00M2FiLWJmMmYtYmIxNDY0NjljMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXXsrlcjaqSqEtZlNw6EDXiehET+dVSXr+TX 8/7R5Zmg6mxxV4wSaZ80Xxqb6VQGbtP/2OxFjTXMHnF2PXzMDrZ1z84LwAwkva+h lVv+eoEzwOg0Msm46uaIW1j7e0RTIL+wjdbfenvjBPnTtXqYQVDYQAJgZ3W88A2b qXqU42pUhECCF3ONWmruxx3HnfQtReuaeQprvjzVojLuyWA82YUjpL4bY5W4tH7X OimSzkNmEhg4t5TK6rBjHYDI/6d0QYZRHVbHbYoi2VP9BIQvKxAzfe16NU8LEMre 1Szd3YsmEMfikUJd+WK6v5AtwDNQ7nYwDqRsWFdmkiV1I0sWuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO27jN109N4M79QqyLHnVFhu8zAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZWM2MjkyMGYtZTY4YS0z M2JjLTg0M2MtMTBkNWQ2N2RhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnDeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN2UL44sUdFOlqat34S5WWE6sxMYkTE93hOqflVTOEfPWoIwvf2tz/t 0ExcWOp+n+0xhrT+uypcKBk0gDDBxqGWPLlnjfLNlcT3fOzgNdLuoO+LlVb8+YYn R01rQzd5xuOh/YhFCPN12RUKGJdOU5WWwNof+3Pu1lFl4B7Y3bsJu2EshEdv/XnV pWnmL7O2L7piNwAn9bgrdtjbADauPbRunGOylHnjZcR7l+cmXLuMdK7jAjcrqgyJ 70lD/FFLwutbumlYH+/jX+Vxrx4p1WJxYH5gTt2nE8BsMMAFueYXkyBlGYi2gVex MkPPVYRBnQlUQv21lYReSJy8saGn0Gk= -----END CERTIFICATE-----Generated at Tue Nov 11 19:40:02 2025 by rpki-client