$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa File: ca317456-25af-3fdb-a49a-8f45c170696c.roa (raw, json) Hash identifier: QdDFaNe2t1q1vNvbKl2vw4bDxHzhTav72I0DdJvpHow= Subject key identifier: 89:A0:FB:55:A6:2F:95:BB:93:0F:77:7E:CE:13:9F:24:2E:7B:1E:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B07379F6BECA1184AD19A00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 162.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:37:9f:6b:ec:a1:18:4a:d1:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=eb563d3b-51b5-4b4d-a0f6-ec2316bacf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:03:b7:6d:b9:7e:30:aa:e2:29:49:48:bd: 4d:3a:d1:53:f4:69:02:bf:db:e3:a0:d9:37:db:0a: 9f:11:8d:97:14:58:19:32:a0:61:3e:99:b4:26:0e: 6a:73:1e:2b:54:b8:99:ec:9c:fb:d1:74:31:fe:04: 5f:bb:16:7a:3b:49:f6:55:fe:91:17:69:21:99:a5: fe:9f:7c:5e:6a:73:61:05:6a:ee:99:fd:8f:dc:74: 32:8b:59:33:83:6f:47:2d:90:5e:7c:c4:75:3c:16: 77:3c:8f:72:15:62:60:43:16:9e:40:42:7a:67:da: a5:51:8b:4a:08:ab:22:b9:6e:2e:a6:10:67:65:41: 91:89:90:87:29:4f:ea:a6:91:ac:a6:83:25:8e:4c: 5f:d3:b2:6b:5b:ba:78:95:8c:e3:b6:b1:c2:d6:44: 2d:8a:81:50:fc:0f:d5:84:c9:40:d9:67:53:8e:84: a8:f7:fc:55:74:d4:21:50:f6:c4:ea:3f:71:7a:03: a3:68:31:22:48:bd:b3:38:e0:34:6c:e2:73:66:14: e3:87:65:7a:91:f2:1c:16:c5:9d:0c:0d:98:17:bb: 57:df:50:c8:8b:a6:34:e7:e6:48:72:76:74:f4:b9: fc:5d:02:b5:27:8a:31:e2:e4:19:a7:51:12:74:02: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A0:FB:55:A6:2F:95:BB:93:0F:77:7E:CE:13:9F:24:2E:7B:1E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 162.156.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:8f:1f:79:00:3f:2a:6e:b9:b0:cc:78:15:bc:59:df:6c:d3: 84:4a:8d:51:a2:61:40:d0:ed:9d:18:da:fc:bd:3d:3c:15:8e: 3b:95:fc:78:4b:70:78:33:f3:fd:44:10:24:ad:fc:b7:6b:bb: f4:f6:44:05:c6:08:00:80:74:61:04:be:7b:81:a8:5e:15:f4: 0d:af:9a:e4:a2:95:50:b3:1b:4c:e1:fd:29:a9:d6:c0:e8:81: 78:1a:69:6e:f7:ef:3f:f1:71:60:ae:e8:6d:5d:d0:b4:0c:61: 22:13:52:ac:01:1e:a7:09:be:1b:90:31:e0:ab:bf:19:df:03: ef:1c:64:88:ef:32:44:11:fc:58:34:48:c6:60:36:bd:4f:08: 49:c2:2b:b5:7c:45:d8:4d:81:e1:19:96:1c:f6:41:01:67:e4: e6:20:58:e2:61:69:f0:00:a4:7c:5d:6d:0e:81:18:a8:a7:6a: e9:f7:14:2a:7e:f4:bc:93:15:c9:1c:01:25:d5:27:57:88:b6: c2:ee:1e:79:91:f4:e6:1d:0c:f4:a1:4a:93:32:bf:1d:6f:b7: 99:ab:fc:d0:7c:ff:9d:4b:96:b9:bd:40:9e:eb:85:dd:68:fd: 2b:d3:85:c8:74:d3:da:a4:4e:28:0f:81:c3:79:11:57:e7:ea: 39:a5:2c:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzefa+yhGErRmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZWI1NjNkM2ItNTFiNS00YjRkLWEwZjYtZWMyMzE2YmFjZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIIDt225fjCq4ilJSL1NOtFT9GkCv9vjoNk3 2wqfEY2XFFgZMqBhPpm0Jg5qcx4rVLiZ7Jz70XQx/gRfuxZ6O0n2Vf6RF2khmaX+ n3xeanNhBWrumf2P3HQyi1kzg29HLZBefMR1PBZ3PI9yFWJgQxaeQEJ6Z9qlUYtK CKsiuW4uphBnZUGRiZCHKU/qppGspoMljkxf07JrW7p4lYzjtrHC1kQtioFQ/A/V hMlA2WdTjoSo9/xVdNQhUPbE6j9xegOjaDEiSL2zOOA0bOJzZhTjh2V6kfIcFsWd DA2YF7tX31DIi6Y05+ZIcnZ09Ln8XQK1J4ox4uQZp1ESdAJANwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFImg+1WmL5W7kw93fs4TnyQuex4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2EzMTc0NTYtMjVhZi0z ZmRiLWE0OWEtOGY0NWMxNzA2OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAopwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA1Y8feQA/Km65sMx4FbxZ32zThEqNUaJhQNDtnRja/L09PBWOO5X8eEtw eDPz/UQQJK38t2u79PZEBcYIAIB0YQS+e4GoXhX0Da+a5KKVULMbTOH9KanWwOiB eBppbvfvP/FxYK7obV3QtAxhIhNSrAEepwm+G5Ax4Ku/Gd8D7xxkiO8yRBH8WDRI xmA2vU8IScIrtXxF2E2B4RmWHPZBAWfk5iBY4mFp8ACkfF1tDoEYqKdq6fcUKn70 vJMVyRwBJdUnV4i2wu4eeZH05h0M9KFKkzK/HW+3mav80Hz/nUuWub1AnuuF3Wj9 K9OFyHTT2qROKA+Bw3kRV+fqOaUsMA== -----END CERTIFICATE-----Generated at Fri Oct 24 08:19:41 2025 by rpki-client