$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa File: ea5fac7c-b585-38d4-8a2c-649c73995029.roa (raw, json) Hash identifier: 70BLOx+cTZzL+GaPcb6W9xm8YIfIBl7YTPqxZmj4sWg= Subject key identifier: A5:78:EA:2A:04:04:AA:3C:F0:7F:CA:A2:FF:0C:57:F0:D6:44:73:3B Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584B6BC77725AB053B7E0B181380 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 29016 IP address blocks: 159.182.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:77:25:ab:05:3b:7e:0b:18:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=cbb13d65-d48d-4637-a0b5-406486340373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:cb:0a:66:3b:f7:2c:cf:91:dc:f6:c5:b2: 90:6e:97:51:9b:76:6e:80:ba:70:6e:18:d8:f3:07: 46:d0:c4:1c:7a:64:4f:2f:22:4f:bd:cc:5b:1c:53: af:73:12:3f:82:78:e0:11:90:46:08:81:4b:77:85: 08:25:ba:2a:d4:a4:f7:c9:c1:85:1a:3e:8e:2e:90: 56:7e:e9:fb:75:ae:bf:53:c9:df:d0:7c:cc:19:ce: ff:e1:74:13:a5:63:5c:f0:a5:20:d8:a4:90:61:02: e3:e5:b7:2d:cc:68:26:db:d1:cb:80:78:c7:67:17: 98:d7:32:d0:4f:6d:0c:61:df:e3:e6:f4:59:57:8f: 95:b3:3e:77:44:08:ee:79:45:1f:cb:a6:2c:b1:b5: 30:3c:24:93:9d:9d:ec:28:d2:e1:3b:94:60:43:c2: 7f:90:d0:92:08:d7:8f:e8:f4:5c:5e:35:b3:d6:98: ec:ed:6b:a4:c5:fd:d8:ee:0f:01:c9:54:27:df:0f: 9d:6a:94:37:ee:17:bc:4d:f2:19:5a:c3:ff:cc:b3: fd:dc:8d:f7:b1:89:e0:66:36:42:b6:1b:fd:07:75: 61:9c:ea:a7:9b:de:6c:2e:5d:34:5c:32:d2:44:26: 49:75:ea:85:6e:b2:f5:2d:71:6e:55:39:5e:e8:f3: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:78:EA:2A:04:04:AA:3C:F0:7F:CA:A2:FF:0C:57:F0:D6:44:73:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:eb:88:07:d3:c7:44:e3:4d:f8:7e:9c:13:33:0c:c9:c3:c5: ba:df:48:ca:94:34:e1:04:fb:f9:06:9b:c0:0d:7f:79:10:d8: 59:2b:ca:ca:dc:22:d6:56:8c:15:a3:8a:f5:e7:1a:8b:7a:e5: 8d:2d:4a:41:29:09:95:05:2c:87:76:d8:5f:d6:91:90:48:4e: 25:4a:3a:e9:d6:3b:27:09:c1:6d:70:47:4f:dd:5e:6f:12:06: f7:1d:66:b1:b0:b7:67:ad:3a:71:3c:d4:ba:f5:23:3a:21:96: e8:60:69:a5:36:ae:e3:cf:8c:c9:9c:c1:77:9c:78:ff:bb:f8: ed:bc:b6:ca:af:5f:ab:02:8f:9b:4c:85:1e:58:95:00:8c:1c: 49:64:20:93:4c:31:fc:ab:91:1f:fb:a6:42:7c:76:4d:c9:eb: 70:92:ff:dc:10:a2:50:4e:34:3d:2a:a0:65:c9:ef:15:9d:a4: 40:96:d5:25:b4:5f:62:41:62:72:2a:3d:13:6b:23:f2:57:81: 41:da:e8:cf:c0:4c:d9:7e:2a:ed:58:6a:c1:b5:55:6b:2d:9b: 36:c0:b4:ad:08:77:7f:ce:df:22:e8:d1:fa:eb:13:58:2b:bd: 4a:c8:51:95:66:60:38:e3:ad:ea:43:f5:6c:2e:d9:e2:76:97: 8a:c9:32:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3clqwU7fgsYE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Y2JiMTNkNjUtZDQ4ZC00NjM3LWEwYjUtNDA2NDg2MzQwMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbLCmY79yzPkdz2xbKQbpdRm3ZugLpwbhjY 8wdG0MQcemRPLyJPvcxbHFOvcxI/gnjgEZBGCIFLd4UIJboq1KT3ycGFGj6OLpBW fun7da6/U8nf0HzMGc7/4XQTpWNc8KUg2KSQYQLj5bctzGgm29HLgHjHZxeY1zLQ T20MYd/j5vRZV4+Vsz53RAjueUUfy6YssbUwPCSTnZ3sKNLhO5RgQ8J/kNCSCNeP 6PRcXjWz1pjs7Wukxf3Y7g8ByVQn3w+dapQ37he8TfIZWsP/zLP93I33sYngZjZC thv9B3VhnOqnm95sLl00XDLSRCZJdeqFbrL1LXFuVTle6PM6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV46ioEBKo88H/Kov8MV/DWRHM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZWE1ZmFjN2MtYjU4NS0z OGQ0LThhMmMtNjQ5YzczOTk1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7ZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfriAfTx0TjTfh+nBMzDMnDxbrfSMqUNOEE+/kGm8ANf3kQ2Fkrysrc ItZWjBWjivXnGot65Y0tSkEpCZUFLId22F/WkZBITiVKOunWOycJwW1wR0/dXm8S BvcdZrGwt2etOnE81Lr1IzohluhgaaU2ruPPjMmcwXeceP+7+O28tsqvX6sCj5tM hR5YlQCMHElkIJNMMfyrkR/7pkJ8dk3J63CS/9wQolBOND0qoGXJ7xWdpECW1SW0 X2JBYnIqPRNrI/JXgUHa6M/ATNl+Ku1YasG1VWstmzbAtK0Id3/O3yLo0frrE1gr vUrIUZVmYDjjrepD9Wwu2eJ2l4rJMu8= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:28 2025 by rpki-client