$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa File: 2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa (raw, json) Hash identifier: IGc3wHiZhBHdHsflPpSrzTbMWY3c5jw0vcLS46uwA80= Subject key identifier: F9:0D:1A:8D:C7:D6:0E:9A:81:19:ED:86:7C:11:EA:1C:D1:3A:9F:81 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584B6BC777168179FEEF143CFA80 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 29016 IP address blocks: 159.182.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:77:16:81:79:fe:ef:14:3c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=a1c34f57-21fc-43bb-bd32-21f99a20ca90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:32:c2:4c:f8:b5:38:f4:f5:70:ca:4c:63:ab: 1e:65:a7:db:e5:9c:f8:cf:70:53:5b:0e:42:97:42: f7:7c:20:7f:89:64:df:1d:0e:5c:ef:fd:7a:ed:46: ae:7e:b9:4b:d3:97:62:fa:b5:15:da:b2:4c:70:eb: 2f:d4:ac:29:e2:4f:31:dd:7d:d7:91:38:34:4d:98: 54:c4:99:05:82:62:90:2b:2b:ad:93:22:9f:8d:e8: 94:a3:1c:3c:29:a5:60:9e:36:6b:8b:03:00:7f:db: 7e:15:1c:67:a3:4b:44:69:9f:54:c1:64:0a:51:db: ac:60:3d:77:84:b5:1d:5b:c8:31:ef:a2:37:90:bb: df:dc:79:9d:d9:18:22:46:3c:4d:44:c6:62:c3:f6: 97:83:34:1a:d1:66:59:5c:9b:c7:80:af:a7:b4:f0: fb:c0:95:3b:69:94:fb:a6:20:68:33:3f:ba:08:6a: f1:98:43:5a:7a:14:1e:01:dc:3c:bc:e2:ae:03:d0: 0c:84:58:1a:a1:b2:b6:66:08:67:b0:3b:4c:21:d0: d5:e0:d4:ef:2c:84:a0:b7:03:bf:77:9b:03:71:41: 2f:8f:25:9e:f3:cc:c5:4c:da:99:87:8f:8f:2f:ca: fe:0f:91:88:10:76:8c:e1:67:43:1b:b8:6d:64:d9: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:1A:8D:C7:D6:0E:9A:81:19:ED:86:7C:11:EA:1C:D1:3A:9F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2950fd60-f5e3-383f-8bdb-3eb89a676bc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d1:09:7e:e7:14:fa:bd:ea:a8:7e:9e:e7:fa:e4:64:48:b5: d9:37:53:5a:d5:ef:aa:93:2c:f0:1b:f4:95:ce:2f:fb:38:b0: 6a:1b:f6:d4:b0:29:0e:8f:f6:dc:38:d1:3e:b3:59:88:fc:ab: d5:f3:e3:c7:8f:c3:42:00:54:8f:e5:8b:42:e4:48:c4:28:f3: 4c:0a:ef:39:5e:d8:31:82:9b:61:7a:65:d5:96:02:3a:b0:8b: 86:76:0a:1e:24:3c:bf:b1:bf:c8:3b:83:f5:96:42:04:aa:f3: f8:de:ec:3d:09:39:de:29:5b:b7:87:44:04:31:04:d1:da:3e: c8:72:2e:6e:ac:31:51:24:d5:8c:ac:73:07:5f:39:62:f8:f4: 73:b0:b9:a1:e3:9d:c9:72:da:f1:80:8a:d6:a4:8d:00:24:6e: 9b:90:3f:77:7c:e0:ed:4f:50:4f:1e:00:e7:80:96:54:94:66: 70:64:67:2e:ac:58:7c:31:83:0e:ac:1e:2e:6a:c0:12:87:45: 47:d5:3b:a5:e5:ef:1b:c3:bb:7c:f2:46:0a:f6:f9:ef:26:90: 0c:a3:c4:9f:4f:36:6e:a1:8d:a7:9a:a3:c0:fa:5b:3e:1c:8f: 9d:1c:61:bb:78:3f:b4:6e:10:17:1f:74:fb:70:6d:78:8f:0a: d2:66:4b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3cWgXn+7xQ8+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YTFjMzRmNTctMjFmYy00M2JiLWJkMzItMjFmOTlhMjBjYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizLCTPi1OPT1cMpMY6seZafb5Zz4z3BTWw5C l0L3fCB/iWTfHQ5c7/167UaufrlL05di+rUV2rJMcOsv1Kwp4k8x3X3XkTg0TZhU xJkFgmKQKyutkyKfjeiUoxw8KaVgnjZriwMAf9t+FRxno0tEaZ9UwWQKUdusYD13 hLUdW8gx76I3kLvf3Hmd2RgiRjxNRMZiw/aXgzQa0WZZXJvHgK+ntPD7wJU7aZT7 piBoMz+6CGrxmENaehQeAdw8vOKuA9AMhFgaobK2ZghnsDtMIdDV4NTvLISgtwO/ d5sDcUEvjyWe88zFTNqZh4+PL8r+D5GIEHaM4WdDG7htZNlOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkNGo3H1g6agRnthnwR6hzROp+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMjk1MGZkNjAtZjVlMy0z ODNmLThiZGItM2ViODlhNjc2YmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7YOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXRCX7nFPq96qh+nuf65GRItdk3U1rV76qTLPAb9JXOL/s4sGob9tSw KQ6P9tw40T6zWYj8q9Xz48ePw0IAVI/li0LkSMQo80wK7zle2DGCm2F6ZdWWAjqw i4Z2Ch4kPL+xv8g7g/WWQgSq8/je7D0JOd4pW7eHRAQxBNHaPshyLm6sMVEk1Yys cwdfOWL49HOwuaHjncly2vGAitakjQAkbpuQP3d84O1PUE8eAOeAllSUZnBkZy6s WHwxgw6sHi5qwBKHRUfVO6Xl7xvDu3zyRgr2+e8mkAyjxJ9PNm6hjaeao8D6Wz4c j50cYbt4P7RuEBcfdPtwbXiPCtJmSxM= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:56 2025 by rpki-client