$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa File: cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json) Hash identifier: wfBbqq3Ip0Q0TB3GaLxO6qm6P8Kdz//lQG42saDB0Mo= Subject key identifier: 16:D5:98:9B:DA:AE:75:73:CC:96:72:F3:43:EE:75:97:40:9D:A6:96 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584B2A2C36BAF82C644D203D77C0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 25697 IP address blocks: 209.151.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:36:ba:f8:2c:64:4d:20:3d:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=e364ea91-c3b1-4ca9-8c08-c46e0acc47fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:dc:d3:58:c4:9b:92:02:a4:32:76:da:29: f5:11:28:86:8b:d6:bb:15:6a:7a:c7:c4:61:5f:0f: 18:3d:48:3b:44:bb:ea:07:3b:c3:8c:5e:28:4f:4f: b3:88:a9:27:b5:9e:71:14:1a:0b:45:2e:d3:fa:83: c9:30:47:40:25:31:7d:68:6b:f8:61:62:f6:08:81: 18:fc:40:fb:24:55:1e:b9:12:bc:23:c8:ec:f5:cc: ce:a4:47:87:cf:79:99:7f:26:36:65:44:01:d8:54: db:b0:92:cd:04:45:a3:8c:07:e9:34:b0:45:9e:ab: 77:97:5b:c4:cb:4e:d0:22:da:4f:f7:63:eb:e7:8b: 87:3e:af:04:b9:ee:df:73:d8:8b:64:9f:9b:77:01: c2:6f:7d:29:8a:14:80:cc:1d:c7:22:b5:3c:b3:4e: d4:85:e8:06:d1:06:3d:77:6a:3e:11:6b:b9:4a:00: 34:aa:2d:58:2f:c6:c7:d4:aa:6a:ad:05:1b:6d:c4: 53:b3:0e:66:14:a1:7d:77:3a:19:10:25:c1:9c:23: 30:ae:56:3a:15:8e:2c:3e:77:c0:b3:89:f8:d1:dd: 79:20:09:7a:02:be:48:c4:de:bc:80:3d:ea:c4:5c: b3:86:11:f7:33:c7:94:36:67:92:19:a9:f0:2e:a9: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D5:98:9B:DA:AE:75:73:CC:96:72:F3:43:EE:75:97:40:9D:A6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ea:a7:6a:1e:69:a8:71:59:7d:10:96:a6:c5:04:1b:42:dd: 7a:73:4e:63:d9:b0:bf:52:98:c9:63:5b:db:7d:09:05:52:26: fb:83:4a:6a:bf:93:86:4a:29:90:c1:c7:1d:38:c5:60:b0:50: 47:10:21:d3:bc:ed:55:0d:fa:0c:5b:ea:a6:98:f4:e4:8d:a6: 15:9a:66:b0:cb:cf:06:7e:a7:6f:d9:38:68:74:54:4d:e9:fa: 62:ae:43:98:65:d5:25:e6:d4:ec:29:94:3f:24:9a:8b:31:0a: 6d:1c:18:80:36:ca:85:ef:23:aa:e0:86:63:8e:46:6f:08:97: ad:6f:d1:60:34:d6:14:c5:5f:c6:63:ec:5a:81:a9:19:9e:93: de:72:0e:16:76:54:fe:8e:51:4a:bb:aa:05:2e:04:bb:ec:38: 37:f1:50:1d:69:88:30:5f:f3:7c:2a:01:0d:4b:00:7d:59:e1: 4b:43:bc:ce:03:7c:d8:b6:3f:56:b0:23:bf:35:a1:fa:12:c8: 60:05:1c:22:b1:d2:09:71:8a:cc:9b:0f:e4:52:3e:ff:5f:c7: 69:7b:ad:75:79:d1:48:83:55:b7:b4:ca:36:7c:df:ac:6d:3f: d1:1b:10:9b:71:46:5b:73:a6:d1:98:e7:59:55:7c:5c:63:57: 1b:bd:52:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDa6+CxkTSA9d8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTM2NGVhOTEtYzNiMS00Y2E5LThjMDgtYzQ2ZTBhY2M0N2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21bc01jEm5ICpDJ22in1ESiGi9a7FWp6x8Rh Xw8YPUg7RLvqBzvDjF4oT0+ziKkntZ5xFBoLRS7T+oPJMEdAJTF9aGv4YWL2CIEY /ED7JFUeuRK8I8js9czOpEeHz3mZfyY2ZUQB2FTbsJLNBEWjjAfpNLBFnqt3l1vE y07QItpP92Pr54uHPq8Eue7fc9iLZJ+bdwHCb30pihSAzB3HIrU8s07UhegG0QY9 d2o+EWu5SgA0qi1YL8bH1KpqrQUbbcRTsw5mFKF9dzoZECXBnCMwrlY6FY4sPnfA s4n40d15IAl6Ar5IxN68gD3qxFyzhhH3M8eUNmeSGanwLqk0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbVmJvarnVzzJZy80PudZdAnaaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvY2ZiYWMyMjYtOTY5NC0z Yjc3LTk4YjAtNzY1MjZiMzg5MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3qp2oeaahxWX0QlqbFBBtC3XpzTmPZsL9SmMljW9t9CQVSJvuDSmq/ k4ZKKZDBxx04xWCwUEcQIdO87VUN+gxb6qaY9OSNphWaZrDLzwZ+p2/ZOGh0VE3p +mKuQ5hl1SXm1OwplD8kmosxCm0cGIA2yoXvI6rghmOORm8Il61v0WA01hTFX8Zj 7FqBqRmek95yDhZ2VP6OUUq7qgUuBLvsODfxUB1piDBf83wqAQ1LAH1Z4UtDvM4D fNi2P1awI781ofoSyGAFHCKx0glxisybD+RSPv9fx2l7rXV50UiDVbe0yjZ836xt P9EbEJtxRltzptGY51lVfFxjVxu9UkI= -----END CERTIFICATE-----Generated at Fri Sep 19 16:03:20 2025 by rpki-client