$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa File: b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa (raw, json) Hash identifier: mSTGI8cuA9ux/O0Zccgmj/simFMvd+or3aEEbqr9EzA= Subject key identifier: FE:5A:6B:4C:D1:90:A6:1E:87:44:39:BB:D1:EE:04:EB:90:E0:63:C8 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584B3DB6FFFD55A0D801E72AD4F0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 14061 IP address blocks: 159.203.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:ff:fd:55:a0:d8:01:e7:2a:d4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9e33a025-efcb-4546-9ce3-2a82a6e5185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c4:29:03:05:f8:11:9c:79:5f:df:d6:8e:23: 5d:c4:01:8d:37:fd:e6:e8:4b:89:dc:97:0f:16:7e: ce:73:81:9e:fe:82:f2:b3:94:69:9a:57:fa:5d:ff: 1f:32:53:83:61:45:7b:49:2a:9d:da:be:e9:2c:37: 91:c0:93:c5:fb:e5:a9:23:2a:d7:db:e8:59:46:67: 34:58:dc:0d:b9:c1:fd:12:00:e8:95:80:49:f3:10: 61:a7:86:73:51:f8:88:b3:f5:7b:9b:66:8e:ce:4a: 5c:03:88:f8:df:84:93:04:58:47:63:98:ce:5c:e4: e2:e4:37:65:4b:e7:62:05:8d:a7:cf:ec:d1:c0:76: 0f:74:63:86:f1:63:ed:f8:dd:05:5d:1d:b6:d6:fb: 1c:26:0e:a9:ed:6c:86:f9:8c:e9:ef:69:20:7b:91: d6:b6:7e:9f:ea:c4:16:fd:a5:12:be:cf:f6:5e:35: 0f:00:5f:57:f0:43:6f:9d:0b:2a:92:97:d7:c4:02: ac:39:c0:61:a4:24:fe:04:fd:7f:b8:d6:bc:32:4a: 86:2a:f2:02:6f:18:a6:aa:bb:c3:18:a4:97:59:df: af:ed:dc:d4:39:ea:00:e2:86:78:09:87:0a:ca:dd: 76:9a:42:b3:e9:7c:8d:cb:d1:7a:b4:e7:d8:f9:5a: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5A:6B:4C:D1:90:A6:1E:87:44:39:BB:D1:EE:04:EB:90:E0:63:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 159.203.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4d:c0:51:43:d2:df:bc:9f:5e:f9:f3:41:0f:7a:7c:46:cb: 65:df:68:d3:39:96:c1:09:00:1b:34:63:47:e5:81:01:56:8d: 85:0e:a3:1e:a6:9a:c8:07:7f:60:f8:31:94:fd:d2:d4:c7:c6: 21:5f:8d:cb:70:ef:44:63:c2:1e:3e:7b:24:da:5b:9b:53:33: 5f:97:9f:c1:02:2b:00:a4:4e:99:29:71:81:59:f2:4f:ec:8b: 81:ae:5b:fc:6d:bf:89:4d:16:0d:83:81:b7:c8:62:5e:4f:1e: a9:41:ad:83:4f:6b:cd:13:06:d6:4e:c1:de:87:34:a2:d0:6a: 35:de:62:fb:3c:f2:fe:ca:6a:33:48:02:88:06:72:c3:a2:de: 86:73:53:67:27:e9:66:62:db:83:01:b6:df:2f:d5:82:17:23: 80:d4:ec:b7:95:a9:03:16:7f:4e:66:6a:e5:14:e7:f7:11:54: 6e:bf:2a:f2:4b:58:49:e0:37:e7:71:fe:7a:21:ec:c1:f0:7f: 66:70:4a:8b:e5:6f:27:15:c8:b2:eb:7f:04:f6:3f:b3:37:ad: ae:d8:db:b5:6e:53:ab:9b:d8:2f:2a:64:c4:8c:ee:c4:85:43: 48:d0:74:83:79:ed:75:6a:6a:90:20:de:70:b1:01:57:4a:6b: e9:6d:15:a2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs9tv/9VaDYAecq1PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OWUzM2EwMjUtZWZjYi00NTQ2LTljZTMtMmE4MmE2ZTUxODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8QpAwX4EZx5X9/WjiNdxAGNN/3m6EuJ3JcP Fn7Oc4Ge/oLys5Rpmlf6Xf8fMlODYUV7SSqd2r7pLDeRwJPF++WpIyrX2+hZRmc0 WNwNucH9EgDolYBJ8xBhp4ZzUfiIs/V7m2aOzkpcA4j434STBFhHY5jOXOTi5Ddl S+diBY2nz+zRwHYPdGOG8WPt+N0FXR221vscJg6p7WyG+Yzp72kge5HWtn6f6sQW /aUSvs/2XjUPAF9X8ENvnQsqkpfXxAKsOcBhpCT+BP1/uNa8MkqGKvICbximqrvD GKSXWd+v7dzUOeoA4oZ4CYcKyt12mkKz6XyNy9F6tOfY+VodSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP5aa0zRkKYeh0Q5u9HuBOuQ4GPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYjg4NTVjYzMtNGY4Ny0z ZGIyLWJiMGMtMGNiOTMyNjJhYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn8swVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd03AUUPS37yfXvnzQQ96fEbLZd9o0zmWwQkAGzRjR+WBAVaNhQ6jHqaa yAd/YPgxlP3S1MfGIV+Ny3DvRGPCHj57JNpbm1MzX5efwQIrAKROmSlxgVnyT+yL ga5b/G2/iU0WDYOBt8hiXk8eqUGtg09rzRMG1k7B3oc0otBqNd5i+zzy/spqM0gC iAZyw6LehnNTZyfpZmLbgwG23y/VghcjgNTst5WpAxZ/TmZq5RTn9xFUbr8q8ktY SeA353H+eiHswfB/ZnBKi+VvJxXIsut/BPY/szetrtjbtW5Tq5vYLypkxIzuxIVD SNB0g3ntdWpqkCDecLEBV0pr6W0Vog== -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:12 2025 by rpki-client