$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/058edd1a-30df-3d68-aecf-592a9cdc1c57.roa File: 058edd1a-30df-3d68-aecf-592a9cdc1c57.roa (raw, json) Hash identifier: J3sPA+Ovhh4oomw4z8c2IYWTzq9mnVkF7VtpKE3dSUY= Subject key identifier: E2:D9:0F:77:A9:88:65:B1:47:AB:8E:DC:F2:5E:64:C5:EB:49:1E:B2 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B970CD573EEFE223F369F7880 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/058edd1a-30df-3d68-aecf-592a9cdc1c57.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 40364 IP address blocks: 164.153.17.0/24 maxlen: 24 164.153.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d5:73:ee:fe:22:3f:36:9f:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=89987f4d-3915-40fc-92a6-478479e8684b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:bc:92:49:a9:d4:1c:fd:35:38:1b:fe:a6: 9d:5b:21:f1:47:7f:12:95:3b:ea:f3:77:40:a8:4f: 10:32:be:7d:d3:3f:58:79:18:3b:e5:21:3c:1c:65: 5b:23:78:45:6e:00:b2:bf:36:ff:79:de:c7:c3:17: 4e:ff:bd:09:fc:94:2b:78:d3:07:d1:bb:f9:50:78: 9f:80:11:c9:4b:63:e9:4b:db:eb:76:87:fe:4a:bf: 15:c7:3d:b3:b5:ea:68:10:71:3d:85:86:ec:aa:e6: e5:df:8e:d5:27:6c:99:82:2c:e9:a5:70:ee:87:67: 3b:d1:aa:66:b0:85:25:4c:9e:6e:c2:3a:b3:27:7e: 76:30:5f:5f:0a:70:aa:57:db:3f:8a:88:be:0b:3f: 3b:0f:3f:a2:c5:0b:ae:78:ca:6f:cf:da:19:01:b7: 1c:10:22:07:7c:6a:ec:81:82:57:b7:6e:22:30:8b: 1d:cf:ea:7b:dd:a7:da:a7:31:5f:f3:42:fe:f5:37: 5c:f7:a6:bd:a9:ce:30:15:68:84:2f:b0:da:3d:01: 8b:d3:4c:12:d4:62:91:b7:ed:37:35:f0:9e:8f:1a: 8e:d8:44:2b:84:56:f8:db:51:cc:8d:48:cc:dc:09: f6:7b:31:85:f3:6c:ea:f8:4d:ce:0c:3f:f8:0f:ff: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D9:0F:77:A9:88:65:B1:47:AB:8E:DC:F2:5E:64:C5:EB:49:1E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/058edd1a-30df-3d68-aecf-592a9cdc1c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 164.153.17.0-164.153.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e8:4c:52:ae:c6:a2:f0:87:4f:5a:8c:d8:21:1d:1e:99:76: 04:43:e4:a7:d1:b4:39:56:75:f7:62:62:8c:6e:2c:9f:e0:bb: 30:bd:ab:8b:df:04:78:18:bc:d9:47:a3:5f:d2:6c:ed:30:a5: c2:0b:e6:06:7b:ec:57:e5:72:c8:75:fc:2b:33:b6:d6:d5:bb: 28:83:22:cb:d2:f0:cf:37:de:81:81:c7:24:28:0d:e3:34:77: c5:37:84:f5:f9:b4:33:72:89:ab:81:eb:23:fc:28:7d:51:1d: 93:2a:68:18:b6:f1:fd:24:fc:d2:b9:e0:ab:a2:a6:d7:11:51: 04:eb:b1:e8:fc:2a:02:98:9b:da:4d:5b:80:ec:84:4d:23:7d: 2c:78:0e:52:74:89:cb:62:c8:2f:81:53:5e:1c:4c:e5:45:c4: 84:7f:81:2c:b2:97:8d:8e:0e:d9:fc:b2:8a:92:d6:ac:2c:73: 45:35:68:b0:62:64:c3:3f:0a:4f:30:c4:cb:4e:b2:0b:41:5d: 97:55:17:49:e2:12:b2:14:51:d8:60:93:ed:99:b8:e2:88:d0: e1:a2:ce:87:14:a5:29:c2:3e:99:66:d8:a0:23:b9:e2:23:54: 2d:df:4d:57:a8:fb:7e:92:d6:b4:70:82:9b:75:06:38:44:26: 28:38:18:56 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuXDNVz7v4iPzafeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODk5ODdmNGQtMzkxNS00MGZjLTkyYTYtNDc4NDc5ZTg2ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1y8kkmp1Bz9NTgb/qadWyHxR38SlTvq83dA qE8QMr590z9YeRg75SE8HGVbI3hFbgCyvzb/ed7HwxdO/70J/JQreNMH0bv5UHif gBHJS2PpS9vrdof+Sr8Vxz2ztepoEHE9hYbsqubl347VJ2yZgizppXDuh2c70apm sIUlTJ5uwjqzJ352MF9fCnCqV9s/ioi+Cz87Dz+ixQuueMpvz9oZAbccECIHfGrs gYJXt24iMIsdz+p73afapzFf80L+9Tdc96a9qc4wFWiEL7DaPQGL00wS1GKRt+03 NfCejxqO2EQrhFb421HMjUjM3An2ezGF82zq+E3ODD/4D/+KeQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOLZD3epiGWxR6uO3PJeZMXrSR6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMDU4ZWRkMWEtMzBkZi0z ZDY4LWFlY2YtNTkyYTljZGMxYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACkmRED BAKkmRAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAduhMUq7GovCHT1qM2CEdHpl2BEPkp9G0OVZ192JijG4s n+C7ML2ri98EeBi82UejX9Js7TClwgvmBnvsV+VyyHX8KzO21tW7KIMiy9Lwzzfe gYHHJCgN4zR3xTeE9fm0M3KJq4HrI/wofVEdkypoGLbx/ST80rngq6Km1xFRBOux 6PwqApib2k1bgOyETSN9LHgOUnSJy2LIL4FTXhxM5UXEhH+BLLKXjY4O2fyyipLW rCxzRTVosGJkwz8KTzDEy06yC0Fdl1UXSeISshRR2GCT7Zm44ojQ4aLOhxSlKcI+ mWbYoCO54iNULd9NV6j7fpLWtHCCm3UGOEQmKDgYVg== -----END CERTIFICATE-----Generated at Tue Nov 4 13:20:37 2025 by rpki-client