$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa File: 9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (raw, json) Hash identifier: aPwJ5+qYt+jLy6HhhJIRCiPvYWoELg08f/WfTTCeKBg= Subject key identifier: 0F:9E:48:82:24:BF:A9:A5:8A:61:7D:7B:AA:E6:53:C5:A8:40:4B:5A Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584B6BC74CDD8458D1971AE82740 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16729 IP address blocks: 159.55.213.0/24 maxlen: 24 159.55.214.0/23 maxlen: 24 159.55.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4c:dd:84:58:d1:97:1a:e8:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=0babb439-98d5-4f38-8fd1-79c70a5276b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:2d:5c:f9:9b:d9:89:16:d2:c8:55:ef:57: 32:59:1d:8a:fd:12:41:dc:a0:e2:8d:49:a3:2f:27: 5b:9a:21:ed:25:ec:c3:28:54:08:61:0b:45:8c:2f: c5:b6:9b:55:e0:55:ce:16:b3:d5:bd:23:5e:54:99: 4d:3a:fa:22:9d:6c:44:f6:44:9e:a3:d5:2d:9b:01: 86:0b:03:e9:5d:5f:83:e5:75:57:43:33:ff:21:05: 9a:3a:ff:b8:c5:9f:28:9f:5b:27:1e:d7:07:02:32: a2:11:1c:67:bd:2c:5e:c7:45:3b:43:a4:a6:bc:06: e0:bf:a7:6f:cc:b9:46:ae:64:e3:60:35:fe:24:93: 7a:66:86:1b:48:98:ad:01:70:68:a7:90:0b:e6:34: 8f:9f:82:e4:be:2c:8b:91:e1:07:a3:e5:7e:ce:c6: d8:a6:35:e7:22:36:2a:68:04:5a:68:4b:15:43:7f: 8a:bb:ea:30:45:cd:51:6c:33:3e:18:71:ed:44:4f: ba:90:86:fb:c7:ab:e1:e0:b2:5c:b4:ec:b0:da:66: 74:0e:83:8b:7e:3b:eb:96:f8:85:34:a5:70:cf:b6: 3b:26:74:f1:a9:48:06:7f:81:b6:d1:a5:40:67:75: 69:77:bb:bc:5e:74:eb:3e:d4:6b:05:89:4b:17:21: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9E:48:82:24:BF:A9:A5:8A:61:7D:7B:AA:E6:53:C5:A8:40:4B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 159.55.213.0-159.55.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:21:a0:54:96:4a:6a:ee:3a:fe:99:13:5a:64:93:4c:76:6f: f4:80:34:cf:0f:85:5b:8a:b2:72:99:87:42:50:9f:9e:fa:db: 13:47:ca:a0:98:83:c6:38:47:bd:b5:38:aa:31:02:b0:7e:a1: 88:ae:42:8e:3b:d1:ff:a9:d7:6b:d8:1a:1b:eb:e7:73:e2:73: f1:bb:cf:5b:36:8e:9f:e0:94:ef:3f:98:99:0b:4e:35:d2:d8: df:a1:c3:3a:79:d6:62:86:a1:86:2f:f6:e3:14:c6:e0:05:50: e5:fb:a9:e8:45:4e:05:f2:38:0d:e4:b9:1c:69:2c:d6:15:43: 8a:e0:f1:76:04:75:c0:79:9f:b5:78:67:cc:9d:fb:12:6b:58: 8f:bb:bb:bb:8a:72:d9:df:d0:8e:c7:97:63:05:ff:34:88:89: 79:c6:10:27:0b:39:f1:88:78:69:b5:da:df:87:db:a5:8b:bd: 1f:7b:be:45:52:c0:bc:a7:1c:6e:91:85:2f:7e:f1:03:51:1b: 8d:4c:c4:46:76:a5:5f:9f:d1:99:65:3c:93:65:50:7d:e3:60: 52:d2:a2:e5:7f:f9:30:c7:9e:3c:ac:d9:af:b9:41:41:cd:46: 0b:ee:35:80:fe:07:72:f0:05:76:07:a8:60:ae:60:c8:30:8a: 8b:de:c1:6a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtrx0zdhFjRlxroJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MGJhYmI0MzktOThkNS00ZjM4LThmZDEtNzljNzBhNTI3NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCUtXPmb2YkW0shV71cyWR2K/RJB3KDijUmj LydbmiHtJezDKFQIYQtFjC/FtptV4FXOFrPVvSNeVJlNOvoinWxE9kSeo9UtmwGG CwPpXV+D5XVXQzP/IQWaOv+4xZ8on1snHtcHAjKiERxnvSxex0U7Q6SmvAbgv6dv zLlGrmTjYDX+JJN6ZoYbSJitAXBop5AL5jSPn4LkviyLkeEHo+V+zsbYpjXnIjYq aARaaEsVQ3+Ku+owRc1RbDM+GHHtRE+6kIb7x6vh4LJctOyw2mZ0DoOLfjvrlviF NKVwz7Y7JnTxqUgGf4G20aVAZ3Vpd7u8XnTrPtRrBYlLFyGbDwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFA+eSIIkv6mlimF9e6rmU8WoQEtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvOWVjZDEzZDUtM2Q2MS0z NDRjLWI5MDktZjE4NGNmNzdiMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACfN9UD BAWfN8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHCGgVJZKau46/pkTWmSTTHZv9IA0zw+FW4qycpmHQlCf nvrbE0fKoJiDxjhHvbU4qjECsH6hiK5CjjvR/6nXa9gaG+vnc+Jz8bvPWzaOn+CU 7z+YmQtONdLY36HDOnnWYoahhi/24xTG4AVQ5fup6EVOBfI4DeS5HGks1hVDiuDx dgR1wHmftXhnzJ37EmtYj7u7u4py2d/QjseXYwX/NIiJecYQJws58Yh4abXa34fb pYu9H3u+RVLAvKccbpGFL37xA1EbjUzERnalX5/RmWU8k2VQfeNgUtKi5X/5MMee PKzZr7lBQc1GC+41gP4HcvAFdgeoYK5gyDCKi97Bag== -----END CERTIFICATE-----Generated at Mon Oct 20 21:08:00 2025 by rpki-client