$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa File: b89278a3-74c9-3ec5-a92f-44d3676f6324.roa (raw, json) Hash identifier: DXu2OHQ9NQIioTEYfQKavfCqJeiMZKypXc9roGfkVWo= Subject key identifier: E6:C0:48:9A:5E:73:D7:92:C3:36:66:4B:CB:CD:90:DE:D1:69:D2:05 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584BA9326ACD1D60EB5DB85295C0 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 53991 IP address blocks: 216.245.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6a:cd:1d:60:eb:5d:b8:52:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=2d3ee320-32fa-4207-beeb-f26d06dfb40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:fa:9c:5d:79:a0:e5:03:e5:98:85:91:a0: 77:2b:60:4d:d2:ef:4c:f4:0b:12:9b:45:23:79:66: cf:48:43:59:fb:8a:ae:92:8e:81:e7:b8:1c:62:98: 8d:6c:51:7b:58:e1:0e:0a:d8:44:17:87:bd:82:1b: 51:09:bd:36:88:00:a8:29:87:fa:70:0f:9d:5f:05: 1d:e4:44:16:da:12:02:cd:3a:b1:bd:0b:a0:e2:b8: 50:0b:d9:e7:b0:d3:48:7f:0c:ca:11:69:1d:6a:bf: d3:51:db:2e:0f:1b:40:0e:99:f1:58:ae:e4:b4:99: 47:7c:4b:d4:0a:b0:c0:e6:79:ab:83:78:d2:f5:6e: d3:3f:1e:ec:3f:6d:29:d3:df:37:b2:90:f8:86:38: 49:cf:bc:b8:dd:e8:5f:74:4f:f1:2f:af:db:f6:22: 9e:94:a4:54:b7:d9:a9:16:46:5b:ef:4f:74:8e:70: 28:5c:4a:83:ac:28:ce:15:8d:69:d2:55:43:ec:f5: a4:21:bc:c0:36:e4:bf:a1:26:90:49:2f:86:32:e4: 4d:e9:e8:6a:c4:47:e8:76:cf:cd:f8:5a:33:85:61: 63:36:4a:be:be:26:b0:84:5a:4b:7a:ac:3e:f7:cb: 63:5e:10:48:6f:a6:1c:07:35:95:84:e2:b5:69:e7: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C0:48:9A:5E:73:D7:92:C3:36:66:4B:CB:CD:90:DE:D1:69:D2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 216.245.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9e:92:fd:11:aa:22:2c:46:06:bc:95:11:1a:c3:c1:a8:49: 6f:23:45:74:8b:9e:e5:b7:46:f4:9d:81:4a:41:d4:5b:43:de: 2d:c2:f8:0b:d8:cd:c6:a0:94:88:2b:27:92:1e:a8:02:40:7d: 62:6e:91:e8:74:ae:c7:c8:22:81:f0:47:a5:a2:36:a0:23:0e: 10:91:f3:0b:e5:cc:c1:ff:ad:01:7d:68:49:69:19:45:da:95: f9:4b:b7:31:91:26:5f:03:61:69:31:8c:5c:0a:8b:3c:84:36: 4a:03:6b:fe:07:95:a3:f0:19:4f:75:9e:d1:28:20:65:c7:33: f7:a9:ce:9e:35:0a:20:a1:1c:9f:d1:8b:60:0b:43:80:b3:b8: 97:6b:34:89:dc:53:bf:d1:ef:5d:f8:fa:a6:2b:e7:2b:5e:8d: 52:5b:1c:21:5c:5e:51:bd:ca:58:9d:20:7d:dd:50:c1:3b:42: fc:3e:e7:55:c9:b2:19:37:75:63:3b:f8:e6:d6:a3:55:2b:fa: 04:30:dd:05:a4:9f:b0:a6:77:5d:29:87:73:91:81:5b:c0:b8: 46:65:ca:91:c1:d0:54:a8:56:42:3d:40:c7:b5:5c:a2:82:b0: 51:bc:96:6f:8e:21:19:e0:9a:23:0d:81:95:6f:e0:4c:2e:d8: 46:67:00:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmrNHWDrXbhSlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MmQzZWUzMjAtMzJmYS00MjA3LWJlZWItZjI2ZDA2ZGZiNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw76nF15oOUD5ZiFkaB3K2BN0u9M9AsSm0Uj eWbPSENZ+4quko6B57gcYpiNbFF7WOEOCthEF4e9ghtRCb02iACoKYf6cA+dXwUd 5EQW2hICzTqxvQug4rhQC9nnsNNIfwzKEWkdar/TUdsuDxtADpnxWK7ktJlHfEvU CrDA5nmrg3jS9W7TPx7sP20p0983spD4hjhJz7y43ehfdE/xL6/b9iKelKRUt9mp FkZb7090jnAoXEqDrCjOFY1p0lVD7PWkIbzANuS/oSaQSS+GMuRN6ehqxEfods/N +FozhWFjNkq+viawhFpLeqw+98tjXhBIb6YcBzWVhOK1aedHmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObASJpec9eSwzZmS8vNkN7RadIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjg5Mjc4YTMtNzRjOS0z ZWM1LWE5MmYtNDRkMzY3NmY2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeekv0RqiIsRga8lREaw8GoSW8jRXSLnuW3RvSdgUpB1FtD3i3C+AvY zcaglIgrJ5IeqAJAfWJukeh0rsfIIoHwR6WiNqAjDhCR8wvlzMH/rQF9aElpGUXa lflLtzGRJl8DYWkxjFwKizyENkoDa/4HlaPwGU91ntEoIGXHM/epzp41CiChHJ/R i2ALQ4CzuJdrNIncU7/R7134+qYr5ytejVJbHCFcXlG9ylidIH3dUME7Qvw+51XJ shk3dWM7+ObWo1Ur+gQw3QWkn7Cmd10ph3ORgVvAuEZlypHB0FSoVkI9QMe1XKKC sFG8lm+OIRngmiMNgZVv4Ewu2EZnALo= -----END CERTIFICATE-----Generated at Sun Nov 2 14:12:59 2025 by rpki-client