$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa File: 7255de94-c26e-30a0-a765-c429b196c862.roa (raw, json) Hash identifier: 0XSIP008QH4efoh97IVmH6EbK/M9CyYbntSp4aIcSQI= Subject key identifier: C0:CB:DF:5C:08:1E:AA:22:02:31:AF:CA:F0:F7:2F:24:B0:71:20:71 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584B89177E5FD876AFCFB2C7A800 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 55 IP address blocks: 158.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7e:5f:d8:76:af:cf:b2:c7:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=77acbc07-aea3-4ffd-a974-121733d1c820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:55:ee:6d:e3:aa:1a:81:a5:eb:41:47:3f: 0d:bd:63:b4:5b:51:47:60:3c:b7:12:46:f8:f6:85: 47:e3:3c:68:18:6d:21:19:aa:97:15:90:4a:41:bc: 96:0c:2b:88:5c:06:c9:4c:9b:c9:f7:9b:eb:e2:7a: fd:ab:8e:e8:19:82:67:d8:fc:1c:d3:41:79:42:b7: ed:9f:e4:ad:f5:35:c0:a2:d4:c0:3d:ab:97:c4:23: b8:cb:e8:f7:90:82:56:05:20:cf:d7:63:c4:33:e2: a9:b3:f4:14:66:f7:ad:3c:f3:d4:72:e7:00:95:01: c6:d1:24:4c:07:35:69:09:63:f7:7f:44:fd:60:8e: 0a:c8:d1:8a:f9:63:d6:c3:ff:5e:4c:32:88:14:00: af:72:3b:3e:5b:f0:04:4f:d1:83:80:7c:ac:40:ab: eb:ab:75:aa:ce:21:a3:60:5f:26:89:15:39:fa:e2: a2:13:cd:7a:b6:58:7b:78:db:93:30:1d:03:8c:9e: 5b:15:8e:31:d7:c4:76:65:94:f2:04:54:21:bd:3f: f6:86:db:54:ce:00:56:cc:e6:2d:61:11:a4:2b:8f: 91:75:9d:d3:c9:0e:03:38:26:2f:98:71:e6:ea:1d: fd:94:a9:87:a7:11:1d:a9:be:e7:09:6f:be:74:37: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CB:DF:5C:08:1E:AA:22:02:31:AF:CA:F0:F7:2F:24:B0:71:20:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 158.130.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e0:45:91:04:ec:c0:28:ba:9a:b7:17:ba:84:84:d4:4b:50: 8a:79:05:1b:10:30:a4:97:76:7a:7a:02:7e:40:c8:a5:c2:7c: 8c:64:3f:0c:f1:6a:23:b9:4d:6d:81:85:63:9f:41:c9:2c:92: 11:0f:4c:72:57:2c:00:9a:ec:f5:d0:89:be:fe:28:0d:36:ca: 49:63:49:e8:be:65:c3:1d:d7:8c:c2:68:16:5e:4f:f4:b3:27: b3:d4:bb:bc:86:a2:76:75:39:31:a4:d9:60:19:31:a0:10:3c: 79:d8:3e:08:5f:b7:d6:6a:b9:7d:4d:a6:6d:3f:39:1f:e3:2e: e3:78:74:fd:8e:d1:4c:52:e2:40:41:7c:46:6b:e8:65:25:30: 7f:7a:13:6b:17:d9:ff:2e:e5:5b:50:0d:b2:cf:fc:7c:a5:ef: c3:61:55:e0:43:01:a0:09:73:8b:41:5c:55:11:34:da:90:90: 05:81:62:1d:55:f6:36:b1:f4:9f:d6:f7:8f:bd:4a:d2:96:d3: 28:8d:61:f3:93:75:1c:0e:62:be:74:b2:b8:f6:1f:c1:68:06: 82:9a:2c:e5:e0:10:6c:bb:92:16:5f:f1:82:6b:26:3b:43:38: 1f:27:49:e1:a0:3f:14:7f:48:cb:01:5e:64:21:30:08:81:b9: a1:55:d7:f4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuJF35f2Havz7LHqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NzdhY2JjMDctYWVhMy00ZmZkLWE5NzQtMTIxNzMzZDFjODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhRV7m3jqhqBpetBRz8NvWO0W1FHYDy3Ekb4 9oVH4zxoGG0hGaqXFZBKQbyWDCuIXAbJTJvJ95vr4nr9q47oGYJn2Pwc00F5Qrft n+St9TXAotTAPauXxCO4y+j3kIJWBSDP12PEM+Kps/QUZvetPPPUcucAlQHG0SRM BzVpCWP3f0T9YI4KyNGK+WPWw/9eTDKIFACvcjs+W/AET9GDgHysQKvrq3WqziGj YF8miRU5+uKiE816tlh7eNuTMB0DjJ5bFY4x18R2ZZTyBFQhvT/2httUzgBWzOYt YRGkK4+RdZ3TyQ4DOCYvmHHm6h39lKmHpxEdqb7nCW++dDc0zwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMDL31wIHqoiAjGvyvD3LySwcSBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvNzI1NWRlOTQtYzI2ZS0z MGEwLWE3NjUtYzQyOWIxOTZjODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnoIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYeBFkQTswCi6mrcXuoSE1EtQinkFGxAwpJd2enoCfkDIpcJ8jGQ/DPFq I7lNbYGFY59BySySEQ9MclcsAJrs9dCJvv4oDTbKSWNJ6L5lwx3XjMJoFl5P9LMn s9S7vIaidnU5MaTZYBkxoBA8edg+CF+31mq5fU2mbT85H+Mu43h0/Y7RTFLiQEF8 RmvoZSUwf3oTaxfZ/y7lW1ANss/8fKXvw2FV4EMBoAlzi0FcVRE02pCQBYFiHVX2 NrH0n9b3j71K0pbTKI1h85N1HA5ivnSyuPYfwWgGgpos5eAQbLuSFl/xgmsmO0M4 HydJ4aA/FH9IywFeZCEwCIG5oVXX9A== -----END CERTIFICATE-----Generated at Tue Oct 21 01:37:20 2025 by rpki-client