$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa File: dacb8d64-0467-305d-8bc3-2c5336579a32.roa (raw, json) Hash identifier: 0mqFfaMjfbz+NWsrd9MeryliS6PiPoQpa3kbg82zRX8= Subject key identifier: 17:A7:17:53:2D:A9:29:3B:75:60:47:17:A5:E4:FD:28:5D:0D:A6:70 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584B6BC77735EC799F8953819F80 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 29016 IP address blocks: 159.182.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:77:35:ec:79:9f:89:53:81:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=126482dc-509d-475e-a088-c9bc51ccc458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:d1:ac:f6:65:ea:ec:06:38:23:63:67:de: 65:d5:d1:e5:db:79:0d:96:40:85:2c:e1:01:38:71: 13:de:ba:bd:ce:73:fb:7c:df:f8:58:c9:d4:30:72: ce:2b:6b:e8:08:98:6f:80:c0:b8:bd:da:02:02:e6: 5a:c6:c0:35:69:b7:d7:67:f9:b1:98:76:0d:07:09: c2:10:77:0d:ce:95:56:50:2e:f6:fe:38:2e:4d:26: e0:96:7e:84:bb:87:08:8c:0d:1a:83:93:69:e0:23: 48:11:51:63:9b:16:56:fe:dd:d2:b6:1f:88:8b:ad: 00:e2:30:a4:de:ce:95:f8:8d:d3:a9:d6:f7:58:dc: 58:b8:b1:d7:28:76:96:fc:47:11:38:c9:b4:9a:13: 1d:1c:61:0d:a9:46:bc:3c:92:e6:55:1f:42:25:1a: c1:56:bb:cc:a7:84:e5:45:3d:08:4a:36:67:41:e3: 38:d8:aa:32:a2:75:4f:0d:72:f4:36:49:cf:bf:97: da:0b:1b:0b:25:cd:60:6d:45:88:1d:5b:13:76:4a: cc:23:6a:ea:6f:c9:50:63:a6:98:40:5f:d3:1d:3f: df:3a:62:45:5d:84:bb:3d:ad:85:16:25:30:9a:44: 03:1a:0f:44:71:89:4d:ab:a9:29:e3:76:94:3f:48: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:17:53:2D:A9:29:3B:75:60:47:17:A5:E4:FD:28:5D:0D:A6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c9:6f:1a:21:6e:53:8b:77:eb:fc:5e:cf:aa:c4:41:9b:66: 1e:04:32:52:da:25:71:fe:5a:78:52:41:d0:38:06:22:51:bf: 6c:df:91:a8:ad:0a:b6:f2:cc:c2:3e:eb:25:8d:a9:e4:0a:fc: b7:3f:73:cc:d0:d4:ee:7c:38:61:44:44:8a:72:59:af:3d:50: f6:f0:a2:2e:5c:48:ce:59:15:08:3e:ad:db:ae:eb:b7:6f:b4: aa:c9:7c:9e:d0:e5:0b:34:ee:23:37:98:44:5b:14:3d:2e:8f: 16:f3:63:2a:0d:b9:35:94:1c:09:6f:55:ca:cd:d7:85:3b:bb: 8c:44:d7:a8:ac:12:1d:e6:42:db:3f:4a:67:3e:42:ed:51:4c: 2b:d2:6c:63:37:66:5c:6b:7e:1e:93:0c:99:d3:b1:aa:bc:e4: 5f:e4:d0:9a:d0:1e:8d:2c:03:aa:26:26:94:13:54:45:fe:fa: 39:bd:4e:97:39:a0:93:b2:d8:e4:98:48:1e:cc:a3:bb:94:32: fe:3f:80:15:e6:2f:0d:fe:a6:f9:00:ca:18:97:fb:fe:cb:d1: 0f:7e:3b:90:04:0d:1d:83:c9:c2:7b:5f:dd:e5:50:c8:3a:7a: ee:74:9e:78:55:37:f8:29:20:29:3f:ff:46:dd:d2:cb:f7:21: ab:31:3b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3c17HmfiVOBn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTI2NDgyZGMtNTA5ZC00NzVlLWEwODgtYzliYzUxY2NjNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUDRrPZl6uwGOCNjZ95l1dHl23kNlkCFLOEB OHET3rq9znP7fN/4WMnUMHLOK2voCJhvgMC4vdoCAuZaxsA1abfXZ/mxmHYNBwnC EHcNzpVWUC72/jguTSbgln6Eu4cIjA0ag5Np4CNIEVFjmxZW/t3Sth+Ii60A4jCk 3s6V+I3Tqdb3WNxYuLHXKHaW/EcROMm0mhMdHGENqUa8PJLmVR9CJRrBVrvMp4Tl RT0ISjZnQeM42KoyonVPDXL0NknPv5faCxsLJc1gbUWIHVsTdkrMI2rqb8lQY6aY QF/THT/fOmJFXYS7Pa2FFiUwmkQDGg9EcYlNq6kp43aUP0hGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBenF1MtqSk7dWBHF6Xk/ShdDaZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZGFjYjhkNjQtMDQ2Ny0z MDVkLThiYzMtMmM1MzM2NTc5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnJbxohblOLd+v8Xs+qxEGbZh4EMlLaJXH+WnhSQdA4BiJRv2zfkait CrbyzMI+6yWNqeQK/Lc/c8zQ1O58OGFERIpyWa89UPbwoi5cSM5ZFQg+rduu67dv tKrJfJ7Q5Qs07iM3mERbFD0ujxbzYyoNuTWUHAlvVcrN14U7u4xE16isEh3mQts/ Smc+Qu1RTCvSbGM3Zlxrfh6TDJnTsaq85F/k0JrQHo0sA6omJpQTVEX++jm9Tpc5 oJOy2OSYSB7Mo7uUMv4/gBXmLw3+pvkAyhiX+/7L0Q9+O5AEDR2DycJ7X93lUMg6 eu50nnhVN/gpICk//0bd0sv3IasxO04= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:30 2025 by rpki-client