$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa File: fc352432-4e67-3899-80a1-ee18ecf984a2.roa (raw, json) Hash identifier: sfZZ/3yWA9sb+UEKuG43Yz6RckrwMMKtkP0qzjSKTUM= Subject key identifier: 58:30:85:E1:6A:55:95:62:82:51:B8:97:41:8A:1B:F2:4A:37:8A:58 Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584B0746C6A19AA009FD58251500 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 19416 IP address blocks: 159.55.213.0/24 maxlen: 24 159.55.214.0/23 maxlen: 24 159.55.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c6:a1:9a:a0:09:fd:58:25:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=e99f2885-d36f-40e1-819c-b9c10f58fc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:ac:ad:2e:2d:ad:64:6e:d9:41:58:fe:26: 1a:47:e0:a2:96:06:7f:a3:39:2e:a6:38:7d:f0:7a: 9d:eb:91:0c:21:1c:21:27:ff:b5:33:55:77:ac:26: c3:2e:77:47:69:ee:ab:39:84:01:f4:94:e5:a3:8e: 9b:27:a5:18:e4:3f:e7:44:9e:22:9e:e1:33:d3:af: f7:2c:2f:2d:a9:94:33:db:09:01:45:e2:02:7c:bd: 0a:70:8a:5e:ae:73:4e:89:a3:4c:f4:5f:09:d6:33: d2:f6:18:21:f8:1c:f8:91:a4:1e:90:b4:7d:32:8c: a5:30:ec:f0:09:c6:4d:67:c9:50:28:d0:d6:f3:32: 12:59:9a:33:9b:ce:f4:7b:83:5b:09:3b:54:60:72: 19:30:c3:88:19:a1:60:7d:28:bc:48:da:b6:59:95: c4:e6:c4:50:06:fe:65:8c:bc:c8:d8:5b:c4:53:41: ac:d3:a9:18:18:35:8d:11:66:5c:80:6d:81:3e:4a: 14:4b:31:28:ba:df:25:7c:69:ec:df:ea:88:ec:33: fd:5c:fb:7d:21:78:27:86:39:05:3f:60:1b:91:66: 75:a5:7a:d3:ca:6e:8b:b9:e6:0c:43:c2:78:ec:93: 54:11:45:18:03:b4:5d:89:7b:5f:f7:0b:08:19:c3: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:30:85:E1:6A:55:95:62:82:51:B8:97:41:8A:1B:F2:4A:37:8A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 159.55.213.0-159.55.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7f:47:98:3d:dc:0c:96:5f:d7:e2:8d:8b:7e:2d:93:b3:3e: af:cf:4a:5d:6d:3d:d9:ae:69:77:a7:08:75:c4:f4:c6:16:e2: 1d:3b:d1:24:c5:ff:63:8a:a4:4b:e7:60:32:3b:2f:cc:15:57: 9d:70:c1:4b:ea:f4:4f:b4:eb:95:d9:f3:bb:b1:f2:62:c7:51: 9c:3c:fa:36:76:2e:6c:aa:97:44:00:8a:73:51:fb:18:db:73: 66:ef:7d:85:d9:50:98:cc:63:79:74:56:90:6c:17:b4:e6:6b: 9f:df:f9:04:66:cb:1e:66:1e:eb:b4:80:f9:74:c2:59:c8:fa: 06:cb:b3:96:26:86:0d:c3:24:e5:50:e4:12:25:2e:e5:79:93: 59:61:26:1f:db:3f:49:50:90:67:d3:4b:ef:84:fc:23:1b:d8: 61:57:28:dc:47:91:ac:82:66:28:6b:dc:ce:8a:21:90:be:a5: cc:ba:4d:ee:48:24:b9:9c:7f:6b:e5:32:75:1c:0a:c8:32:e6: b5:ac:f5:76:5d:d4:1e:cf:8c:7f:11:58:00:f3:a9:b8:1e:58: 74:3d:88:68:e0:8e:bd:a6:02:c1:53:fd:60:57:86:05:f5:38: 41:f8:94:2a:d6:db:4b:34:a5:c9:60:e4:ba:a6:59:42:b7:50: 7a:b6:3e:c4 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsHRsahmqAJ/VglFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZTk5ZjI4ODUtZDM2Zi00MGUxLTgxOWMtYjljMTBmNThmYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVqsrS4trWRu2UFY/iYaR+CilgZ/ozkupjh9 8Hqd65EMIRwhJ/+1M1V3rCbDLndHae6rOYQB9JTlo46bJ6UY5D/nRJ4inuEz06/3 LC8tqZQz2wkBReICfL0KcIpernNOiaNM9F8J1jPS9hgh+Bz4kaQekLR9MoylMOzw CcZNZ8lQKNDW8zISWZozm870e4NbCTtUYHIZMMOIGaFgfSi8SNq2WZXE5sRQBv5l jLzI2FvEU0Gs06kYGDWNEWZcgG2BPkoUSzEout8lfGns3+qI7DP9XPt9IXgnhjkF P2AbkWZ1pXrTym6LueYMQ8J47JNUEUUYA7RdiXtf9wsIGcNudwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFgwheFqVZViglG4l0GKG/JKN4pYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvZmMzNTI0MzItNGU2Ny0z ODk5LTgwYTEtZWUxOGVjZjk4NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACfN9UD BAWfN8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJX9HmD3cDJZf1+KNi34tk7M+r89KXW092a5pd6cIdcT0 xhbiHTvRJMX/Y4qkS+dgMjsvzBVXnXDBS+r0T7Trldnzu7HyYsdRnDz6NnYubKqX RACKc1H7GNtzZu99hdlQmMxjeXRWkGwXtOZrn9/5BGbLHmYe67SA+XTCWcj6Bsuz liaGDcMk5VDkEiUu5XmTWWEmH9s/SVCQZ9NL74T8IxvYYVco3EeRrIJmKGvczooh kL6lzLpN7kgkuZx/a+UydRwKyDLmtaz1dl3UHs+MfxFYAPOpuB5YdD2IaOCOvaYC wVP9YFeGBfU4QfiUKtbbSzSlyWDkuqZZQrdQerY+xA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:46 2025 by rpki-client