$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa File: f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa (raw, json) Hash identifier: QKba8MkWMcCKGTTsWNQUTmH70p1V0vigzeNSAL7RTxo= Subject key identifier: BE:29:BF:A9:C2:7C:99:74:DC:3B:B5:5A:A8:5C:1A:BD:ED:F4:9D:48 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B99D78F1ABC269EA338C4DD00 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26658 IP address blocks: 172.87.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8f:1a:bc:26:9e:a3:38:c4:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=06306a84-9b59-467c-ac69-465858fce514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:64:a0:ee:da:dc:28:a3:38:7e:4e:7a:9f:f1: cb:3c:7d:13:0d:7b:3f:bb:02:53:4f:9a:bd:e1:4d: a5:1a:e5:d6:50:d5:8a:c8:7f:16:3f:c8:82:cc:34: 59:6c:c1:be:43:6b:20:6c:46:08:08:10:05:d4:d8: e9:ee:10:35:11:1d:d7:3c:69:46:32:cf:43:a8:0b: 63:45:c3:3d:48:7a:32:90:dc:19:c5:8c:47:6f:f7: 45:d9:20:38:74:29:7c:08:ad:fb:3e:4c:39:7f:79: 21:e4:7e:d1:1f:b7:f6:bf:c9:79:57:f5:e2:58:b5: 24:08:e9:1a:fb:4a:46:d4:0e:c8:ae:67:e8:e8:57: 1f:6a:e4:15:90:53:2f:4d:69:4b:b8:35:84:6c:8c: ec:b1:51:89:8c:16:28:91:fc:5e:9b:8d:70:6c:3d: c5:ca:67:fa:28:a7:ab:e0:68:ea:67:59:17:d8:0e: 1f:7a:04:31:55:e6:62:69:2d:80:26:6e:65:90:19: c6:9c:08:fa:46:45:c1:b6:6f:78:f9:3e:52:f3:c2: 5e:12:2b:6d:1b:7e:85:5f:0a:a0:4e:9f:33:1b:4b: 02:b3:a6:5a:27:92:9c:38:f7:5a:15:84:23:ff:cf: 0d:fb:75:d8:ad:bb:11:8f:48:5e:db:8e:b8:eb:b0: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:BF:A9:C2:7C:99:74:DC:3B:B5:5A:A8:5C:1A:BD:ED:F4:9D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:eb:15:e1:59:f6:a6:b7:d3:ce:ad:38:72:90:6f:61:9d:12: 19:32:71:9c:4b:b0:25:aa:0f:d0:5b:51:a2:de:00:7f:02:38: f9:20:c8:0c:c9:8f:aa:f3:a8:9b:31:5a:b9:b4:52:1d:2a:4d: 75:87:c2:71:6c:5b:47:71:41:3f:bd:88:3c:de:fd:5c:f9:1d: 32:b3:86:9e:a7:64:2a:73:3a:4b:87:49:3e:cf:c1:34:e0:5c: 0c:66:e2:54:12:10:9d:40:bb:12:c7:e5:3e:c9:9e:14:45:59: 3f:9e:e9:d4:5a:77:d8:d4:cf:ce:2a:1e:f7:e7:50:55:b2:18: 11:5f:7e:50:f1:e7:6c:34:fa:16:df:73:c4:47:4c:b0:2f:83: ca:f2:bc:59:b3:fd:91:79:53:36:7f:4d:89:d9:27:b2:bf:bb: 88:23:c1:af:9d:5d:bc:c9:d1:b9:dc:f5:e7:2e:79:b9:5d:21: 72:38:47:bc:5e:d0:d8:a7:48:39:b2:49:a4:08:b1:b3:29:ed: 1e:e7:d8:f8:15:22:a4:7c:e2:3a:1c:ab:1f:08:51:9c:18:02: 0a:14:05:d5:e6:bc:df:1a:00:16:2b:67:8c:71:9b:3d:ab:7a: 01:e5:c4:a1:90:82:af:da:a0:f6:0d:73:67:5c:d1:1f:29:09: db:d4:ef:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ148avCaeozjE3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDYzMDZhODQtOWI1OS00NjdjLWFjNjktNDY1ODU4ZmNlNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmSg7trcKKM4fk56n/HLPH0TDXs/uwJTT5q9 4U2lGuXWUNWKyH8WP8iCzDRZbMG+Q2sgbEYICBAF1Njp7hA1ER3XPGlGMs9DqAtj RcM9SHoykNwZxYxHb/dF2SA4dCl8CK37Pkw5f3kh5H7RH7f2v8l5V/XiWLUkCOka +0pG1A7Irmfo6FcfauQVkFMvTWlLuDWEbIzssVGJjBYokfxem41wbD3Fymf6KKer 4GjqZ1kX2A4fegQxVeZiaS2AJm5lkBnGnAj6RkXBtm94+T5S88JeEittG36FXwqg Tp8zG0sCs6ZaJ5KcOPdaFYQj/88N+3XYrbsRj0he246467C6OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4pv6nCfJl03Du1WqhcGr3t9J1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZjI1ZjQyZWQtNzEzNy0z YjA1LTlhOWEtNTljYmZmODJiOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjrFeFZ9qa3086tOHKQb2GdEhkycZxLsCWqD9BbUaLeAH8COPkgyAzJ j6rzqJsxWrm0Uh0qTXWHwnFsW0dxQT+9iDze/Vz5HTKzhp6nZCpzOkuHST7PwTTg XAxm4lQSEJ1AuxLH5T7JnhRFWT+e6dRad9jUz84qHvfnUFWyGBFfflDx52w0+hbf c8RHTLAvg8ryvFmz/ZF5UzZ/TYnZJ7K/u4gjwa+dXbzJ0bnc9ecuebldIXI4R7xe 0NinSDmySaQIsbMp7R7n2PgVIqR84jocqx8IUZwYAgoUBdXmvN8aABYrZ4xxmz2r egHlxKGQgq/aoPYNc2dc0R8pCdvU70s= -----END CERTIFICATE-----Generated at Mon Oct 27 09:59:14 2025 by rpki-client