$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/aad00c67-d09a-3dc1-bc47-581caacca75d.roa File: aad00c67-d09a-3dc1-bc47-581caacca75d.roa (raw, json) Hash identifier: V073QhJRtxBiUWjy2iaXtNun1bqBYBKeXxXF+xrzVJY= Subject key identifier: 0A:0C:C5:8C:48:AA:37:1A:05:52:0E:31:27:37:64:07:48:C2:C7:67 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584B25FC48A8DD4B1FA5D4BCE0C0 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/aad00c67-d09a-3dc1-bc47-581caacca75d.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30313 IP address blocks: 152.216.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:48:a8:dd:4b:1f:a5:d4:bc:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=9992120c-2925-44c3-a74e-b3ed4b509f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:39:29:0f:4f:95:29:54:82:53:cb:f2:6e: a4:9f:65:28:ff:b4:d1:37:58:fb:36:49:0e:fd:e0: 42:c4:e8:1e:8f:76:5f:fb:5a:8c:b5:9b:ff:e7:b9: 44:ae:4b:bb:5d:cb:cb:6c:70:f5:54:fe:23:87:66: 43:60:51:3f:07:8c:be:af:a0:c8:52:8b:3a:09:3d: 4e:b0:4c:c3:30:c3:3f:22:89:d7:b8:90:25:1f:84: 52:46:d8:6d:79:ca:de:2a:15:de:b5:a1:05:cf:a4: 04:1b:7e:af:a7:4f:d2:0c:fa:e4:5c:a2:93:0c:06: a3:63:70:53:95:e6:75:7d:38:1a:7d:69:8c:4d:6c: 8a:a2:39:f2:f4:0f:e0:f6:98:ac:35:09:10:2d:06: d4:52:9e:34:95:08:b8:78:d4:77:a1:b3:69:c2:ef: 65:03:d5:33:88:3c:95:e0:ca:9b:d8:26:e2:66:d0: 06:b4:e2:ba:30:f9:0d:a5:65:44:b1:f8:08:53:79: 18:ff:7a:b1:88:e6:35:37:bd:b8:70:ca:06:ee:41: 07:cb:4b:8b:61:e9:5d:f5:bc:44:7f:ad:92:de:31: 9f:27:99:c8:5f:b2:94:13:1d:f3:b2:a1:d8:8b:ff: 64:92:64:01:89:db:34:99:e2:53:8e:a0:32:7a:47: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:C5:8C:48:AA:37:1A:05:52:0E:31:27:37:64:07:48:C2:C7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/aad00c67-d09a-3dc1-bc47-581caacca75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:20:08:bc:b5:27:e9:e4:ed:d5:51:cf:9a:4f:77:3d:db:d1: 3a:bf:4f:c4:c9:d4:bb:0d:89:d9:01:c3:29:8f:0c:d5:82:46: 77:28:49:e3:98:f5:8e:97:4e:43:4a:15:c7:aa:6b:d3:3f:9d: 3d:07:6c:07:54:9c:35:04:c8:63:f4:c8:8e:dd:3f:61:93:3e: 51:0a:73:e8:25:0e:f5:1f:b6:23:90:d6:a9:3c:83:a4:97:ae: 7f:4f:c4:1c:8e:b9:76:56:09:56:d8:a3:df:4e:e0:23:88:00: 64:5f:70:29:7f:9d:b7:4f:7a:f5:0e:70:96:a7:a9:ae:b5:2f: a6:df:bd:7a:df:34:8b:ff:9d:0f:7b:58:79:61:d9:39:17:e5: 4d:f6:78:ef:c5:be:3c:37:08:f2:a6:1c:54:8e:d1:8e:b7:c5: bb:60:5b:32:c8:ec:42:26:f9:86:42:72:76:1f:ab:5a:43:0e: 30:c2:7c:92:b2:87:95:0e:50:b1:32:0a:a2:2f:1e:13:35:90: f6:92:cc:9f:51:44:23:a9:f1:b3:45:6b:50:49:49:7b:80:98: bf:86:88:d3:fc:39:10:ad:fb:cc:0e:d9:99:a9:04:96:50:40: a2:b1:35:61:71:01:ed:38:a8:fd:ed:ac:35:96:93:d1:cb:8f: 5f:04:4e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/Eio3UsfpdS84MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk OTk5MjEyMGMtMjkyNS00NGMzLWE3NGUtYjNlZDRiNTA5ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpQ5KQ9PlSlUglPL8m6kn2Uo/7TRN1j7NkkO /eBCxOgej3Zf+1qMtZv/57lErku7XcvLbHD1VP4jh2ZDYFE/B4y+r6DIUos6CT1O sEzDMMM/IonXuJAlH4RSRthtecreKhXetaEFz6QEG36vp0/SDPrkXKKTDAajY3BT leZ1fTgafWmMTWyKojny9A/g9pisNQkQLQbUUp40lQi4eNR3obNpwu9lA9UziDyV 4Mqb2CbiZtAGtOK6MPkNpWVEsfgIU3kY/3qxiOY1N724cMoG7kEHy0uLYeld9bxE f62S3jGfJ5nIX7KUEx3zsqHYi/9kkmQBids0meJTjqAyekex/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoMxYxIqjcaBVIOMSc3ZAdIwsdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvYWFkMDBjNjctZDA5YS0z ZGMxLWJjNDctNTgxY2FhY2NhNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8gCLy1J+nk7dVRz5pPdz3b0Tq/T8TJ1LsNidkBwymPDNWCRncoSeOY 9Y6XTkNKFceqa9M/nT0HbAdUnDUEyGP0yI7dP2GTPlEKc+glDvUftiOQ1qk8g6SX rn9PxByOuXZWCVbYo99O4COIAGRfcCl/nbdPevUOcJanqa61L6bfvXrfNIv/nQ97 WHlh2TkX5U32eO/Fvjw3CPKmHFSO0Y63xbtgWzLI7EIm+YZCcnYfq1pDDjDCfJKy h5UOULEyCqIvHhM1kPaSzJ9RRCOp8bNFa1BJSXuAmL+GiNP8ORCt+8wO2ZmpBJZQ QKKxNWFxAe04qP3trDWWk9HLj18ETv8= -----END CERTIFICATE-----Generated at Tue Oct 21 11:59:25 2025 by rpki-client