$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa File: 973468d0-7226-3ff1-a216-3007302b0b90.roa (raw, json) Hash identifier: TgfbB3P7sikr6+zOBpb3Q11KruqdDLTJ99HVkkPeDOg= Subject key identifier: E1:AF:D8:78:43:E4:98:8F:9D:1B:2B:7F:FD:B1:21:B8:C5:61:95:5A Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584B25FC487E9705FB5376287180 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30313 IP address blocks: 152.216.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:48:7e:97:05:fb:53:76:28:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=6b46f6ae-909a-46ba-9989-f43780ba0290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:12:84:91:17:ef:8d:7d:61:ae:ec:e1:b9: 3b:59:ba:b1:94:32:09:5a:eb:1c:23:2e:f4:cc:1e: cc:aa:67:04:90:be:47:c4:22:0d:ed:a3:be:a3:63: 52:f5:3c:c6:e7:2c:bd:4d:e1:e0:20:f3:d8:eb:de: 03:6f:42:c1:90:88:4c:e3:dd:b2:83:02:0d:74:ca: 84:ea:d9:32:61:cf:0b:01:61:12:7d:1e:25:c1:02: 7e:2a:79:b2:73:38:73:f6:ec:77:b8:d0:5e:10:a1: 22:ca:ac:8a:45:16:6f:fe:c5:3f:7e:35:9b:cf:0c: 8d:6a:27:da:e7:14:a3:72:7c:a6:9d:69:aa:0b:15: 7b:cc:af:a8:21:60:2e:a7:c3:fa:75:71:10:cf:70: be:41:35:35:64:b0:21:ad:4f:78:0b:00:2c:89:9d: ed:ee:55:81:2f:97:f8:0d:a9:2a:af:99:14:4c:48: b5:19:97:08:61:2c:1f:2f:e8:60:df:78:9e:a6:89: eb:7c:58:3f:4b:63:c9:9d:1d:c4:4b:6d:8d:79:74: 53:28:91:1f:c5:04:81:02:2a:c6:75:53:50:27:08: e4:4a:cf:67:dc:a3:ea:58:1e:83:d4:f0:44:16:6b: ec:f4:dd:9c:7e:ad:a5:8b:0a:b6:79:bb:9c:9f:74: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:D8:78:43:E4:98:8F:9D:1B:2B:7F:FD:B1:21:B8:C5:61:95:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:72:14:99:cb:78:2c:79:3b:c3:8f:62:98:d0:74:92:c6:fa: df:e8:ae:3d:db:79:21:65:be:01:4e:6e:7c:02:a0:e7:d8:16: b6:b6:18:7e:fd:cd:4d:72:a6:a9:f2:b7:53:73:2e:30:61:52: e1:51:38:1b:f2:be:62:2c:e7:cd:27:ad:4c:0f:13:1b:52:ff: 37:39:36:9a:e3:1a:18:7e:eb:84:b9:88:db:13:a5:7f:6e:f3: 83:03:09:08:5d:e3:66:f5:ba:af:6d:82:b3:f4:2d:17:7f:7f: 89:cb:51:3d:55:13:3c:97:19:74:b4:a4:80:e2:8a:cf:66:99: 0b:e5:80:34:9e:38:bd:0b:6b:ca:2c:91:30:c1:1e:1e:a7:be: 35:6d:56:9d:43:3c:ec:12:5d:c8:5e:ed:30:9d:74:20:87:81: f0:bb:8c:5b:d6:f7:ab:4b:14:ab:54:ec:20:ba:72:02:cf:63: e7:6c:58:7e:70:c8:e8:b0:43:29:7e:57:73:6a:cf:91:5c:8d: 2f:a6:51:b0:7a:a7:f2:e2:9d:66:cb:de:ee:c0:e9:60:d9:e2: ac:1a:7b:67:12:cf:cf:f8:f4:b7:15:82:0c:33:9e:79:eb:15: ea:74:4f:35:76:0e:4a:03:b2:a7:33:3d:5f:48:5a:fa:37:f7: ea:f3:2b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/Eh+lwX7U3YocYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NmI0NmY2YWUtOTA5YS00NmJhLTk5ODktZjQzNzgwYmEwMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKAShJEX7419Ya7s4bk7WbqxlDIJWuscIy70 zB7MqmcEkL5HxCIN7aO+o2NS9TzG5yy9TeHgIPPY694Db0LBkIhM492ygwINdMqE 6tkyYc8LAWESfR4lwQJ+Knmyczhz9ux3uNBeEKEiyqyKRRZv/sU/fjWbzwyNaifa 5xSjcnymnWmqCxV7zK+oIWAup8P6dXEQz3C+QTU1ZLAhrU94CwAsiZ3t7lWBL5f4 Dakqr5kUTEi1GZcIYSwfL+hg33ieponrfFg/S2PJnR3ES22NeXRTKJEfxQSBAirG dVNQJwjkSs9n3KPqWB6D1PBEFmvs9N2cfq2liwq2ebucn3RedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGv2HhD5JiPnRsrf/2xIbjFYZVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvOTczNDY4ZDAtNzIyNi0z ZmYxLWEyMTYtMzAwNzMwMmIwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNyFJnLeCx5O8OPYpjQdJLG+t/orj3beSFlvgFObnwCoOfYFra2GH79 zU1ypqnyt1NzLjBhUuFROBvyvmIs580nrUwPExtS/zc5NprjGhh+64S5iNsTpX9u 84MDCQhd42b1uq9tgrP0LRd/f4nLUT1VEzyXGXS0pIDiis9mmQvlgDSeOL0La8os kTDBHh6nvjVtVp1DPOwSXche7TCddCCHgfC7jFvW96tLFKtU7CC6cgLPY+dsWH5w yOiwQyl+V3Nqz5FcjS+mUbB6p/LinWbL3u7A6WDZ4qwae2cSz8/49LcVggwznnnr Fep0TzV2DkoDsqczPV9IWvo39+rzK/Q= -----END CERTIFICATE-----Generated at Tue Oct 21 12:05:52 2025 by rpki-client