$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa File: 85393fe7-712a-3e81-ab68-4d49a239e152.roa (raw, json) Hash identifier: IYXfIzcgqqE8Gt6spw0QwzCeUHBV5XY6wHm7ZRCjUFc= Subject key identifier: 0A:29:4F:30:8E:94:A7:DF:14:BB:6C:0A:27:91:0D:A5:01:A8:18:17 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584B5B07458F8C0C4AD31090C780 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:45:8f:8c:0c:4a:d3:10:90:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=4ed32620-09e9-4675-a6d0-824e38646feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:8d:68:67:97:00:d5:47:75:01:ac:26:ba: 8b:ab:30:27:a9:aa:86:99:70:35:b1:78:96:c1:30: fa:2a:d5:2d:36:23:ea:98:1f:a6:06:7a:80:c3:61: 0d:86:f1:27:c5:2d:ce:0c:a9:7d:87:a8:f1:a0:47: e6:a3:eb:55:3c:3e:dd:29:04:9d:ab:ba:1b:b6:b5: a9:12:81:17:16:1b:29:af:bf:c2:57:cb:8e:97:f7: 7a:a3:9b:53:22:d2:44:54:06:68:91:a9:17:1f:80: d9:77:e4:65:48:31:76:97:c0:a2:44:79:c2:44:2b: cf:7a:e3:f3:1f:f5:2a:ce:6b:ed:33:2b:2c:3b:52: 3f:7a:9c:12:55:cc:e2:b5:49:7f:9b:ff:fc:b6:54: 57:88:c5:57:63:4a:b6:00:20:4f:b0:87:5f:69:20: d5:d8:12:60:11:06:c5:6e:26:5c:d9:23:cd:bb:1f: 1e:54:a8:e0:20:e4:c7:23:b2:97:67:cf:85:83:50: 67:b9:00:9a:cd:f2:bf:a2:75:c6:0b:4c:95:37:af: d3:e0:7e:a6:c3:b1:ea:77:b5:29:ce:84:98:f7:bc: 96:1a:2a:74:9b:39:e2:39:26:43:92:22:be:01:0f: de:52:84:b0:42:56:2a:66:32:2d:8e:f7:30:d9:a9: 5b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:29:4F:30:8E:94:A7:DF:14:BB:6C:0A:27:91:0D:A5:01:A8:18:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6c:19:74:0f:4a:6c:b6:0c:83:73:9d:e2:02:e3:80:86:76: bb:1a:7b:fb:1f:d2:3a:6f:1b:73:f8:01:4a:23:b1:d8:d2:70: fb:8c:97:41:04:c1:32:ad:96:97:e1:4d:5c:a9:c9:53:84:93: 61:5f:6d:98:dd:4c:4c:ce:83:95:c8:01:4e:32:39:d6:c3:70: 73:79:9d:06:e3:40:0d:71:8d:b9:30:08:18:73:b3:66:a7:e9: e4:63:b6:ae:53:f1:99:da:20:7f:ff:ee:fc:2f:91:48:f0:13: 9b:b4:10:f3:bd:03:ae:9d:cc:e0:9b:3f:3a:81:93:4c:3a:09: 10:1d:ec:d2:66:9f:62:10:0d:c4:4d:6d:4a:1f:c7:c7:16:22: de:f5:bf:1c:ac:7d:0a:82:42:82:01:eb:e7:22:1e:6c:65:87: b3:b3:03:3a:09:78:b9:44:a7:29:eb:8d:14:07:b4:cd:c3:cb: 03:30:7b:4c:71:94:8a:22:2c:c5:91:73:9e:6d:fa:73:55:a3: f6:6c:0e:24:78:ff:d8:30:d6:1a:25:b6:ae:eb:23:32:1d:78: d0:2e:c8:87:ca:20:96:55:34:ac:31:41:10:48:26:b1:1c:2f: 6e:02:18:66:76:9d:bc:fb:41:3c:08:db:3d:27:b4:62:62:91: 95:df:3f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0WPjAxK0xCQx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NGVkMzI2MjAtMDllOS00Njc1LWE2ZDAtODI0ZTM4NjQ2ZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7euNaGeXANVHdQGsJrqLqzAnqaqGmXA1sXiW wTD6KtUtNiPqmB+mBnqAw2ENhvEnxS3ODKl9h6jxoEfmo+tVPD7dKQSdq7obtrWp EoEXFhspr7/CV8uOl/d6o5tTItJEVAZokakXH4DZd+RlSDF2l8CiRHnCRCvPeuPz H/UqzmvtMyssO1I/epwSVczitUl/m//8tlRXiMVXY0q2ACBPsIdfaSDV2BJgEQbF biZc2SPNux8eVKjgIOTHI7KXZ8+Fg1BnuQCazfK/onXGC0yVN6/T4H6mw7Hqd7Up zoSY97yWGip0mzniOSZDkiK+AQ/eUoSwQlYqZjItjvcw2albKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAopTzCOlKffFLtsCieRDaUBqBgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvODUzOTNmZTctNzEyYS0z ZTgxLWFiNjgtNGQ0OWEyMzllMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdsGXQPSmy2DINzneIC44CGdrsae/sf0jpvG3P4AUojsdjScPuMl0EE wTKtlpfhTVypyVOEk2FfbZjdTEzOg5XIAU4yOdbDcHN5nQbjQA1xjbkwCBhzs2an 6eRjtq5T8ZnaIH//7vwvkUjwE5u0EPO9A66dzOCbPzqBk0w6CRAd7NJmn2IQDcRN bUofx8cWIt71vxysfQqCQoIB6+ciHmxlh7OzAzoJeLlEpynrjRQHtM3DywMwe0xx lIoiLMWRc55t+nNVo/ZsDiR4/9gw1holtq7rIzIdeNAuyIfKIJZVNKwxQRBIJrEc L24CGGZ2nbz7QTwI2z0ntGJikZXfPxE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:05 2025 by rpki-client