$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/e2270c0b-1fd7-3268-91e0-9df783a4dbe5.roa File: e2270c0b-1fd7-3268-91e0-9df783a4dbe5.roa (raw, json) Hash identifier: UdwW5/7885BOy+LGV1GbqhnIC8voVSED5mp5zgCXiWA= Subject key identifier: 89:52:EB:74:EE:06:40:5D:A4:91:E5:0C:4D:D7:14:0D:A5:48:25:6E Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584B25FC4902D58222E56CD61140 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/e2270c0b-1fd7-3268-91e0-9df783a4dbe5.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30313 IP address blocks: 152.216.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:49:02:d5:82:22:e5:6c:d6:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=938ac87a-e636-430a-91ed-bdc9fad7243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:97:5e:cc:1b:0e:61:2d:41:6b:29:ee:09: d0:0f:a6:9f:22:7c:07:9a:e6:56:d9:be:9c:34:ba: fb:76:07:9e:0b:4a:4c:75:a0:93:aa:a9:0e:e5:b9: 64:7b:df:52:a8:31:2b:c9:cd:29:65:b0:97:fe:22: e4:7a:b4:61:ee:7c:2e:7e:5c:90:31:90:ac:c1:02: 60:d2:68:d2:98:84:28:50:82:c1:02:39:ea:06:a6: 5e:43:0d:cd:73:f9:03:8f:ff:a0:65:3d:3d:31:50: a6:f1:d5:77:bb:41:5b:14:76:75:26:7c:63:fd:fb: b0:ea:41:86:71:b3:56:fc:11:f7:2a:7d:b2:e1:2f: 1a:04:be:2d:3a:e5:b6:35:ce:bf:40:63:b9:b1:ea: 00:fb:0c:58:bd:ee:e7:f9:fc:0c:a4:2a:60:eb:1a: d0:a9:62:c8:cc:82:29:ab:ea:af:c0:19:8a:55:53: 6c:65:f4:f5:98:fd:19:c8:24:1f:0b:43:b7:88:23: 68:20:b3:6b:b3:b7:08:0b:85:28:fb:6d:65:f5:69: e8:2b:0d:84:a1:cc:82:1a:2d:da:75:bc:ad:b5:1e: 82:c9:6c:d2:05:4f:f8:5f:78:7c:10:9b:cd:82:30: af:5b:2b:05:28:71:1a:fe:1e:1e:d6:37:25:e1:77: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:EB:74:EE:06:40:5D:A4:91:E5:0C:4D:D7:14:0D:A5:48:25:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/e2270c0b-1fd7-3268-91e0-9df783a4dbe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f2:b9:8b:cf:c1:fc:52:af:e3:9e:76:f4:51:05:f9:23:c8: 6b:89:78:9b:b3:e1:1b:ac:63:dc:ad:45:0d:2c:c4:d6:e8:08: 2d:13:87:43:ad:b1:34:98:3b:bb:2a:97:31:5f:70:41:f8:61: 2d:fd:7c:f3:74:b3:e0:4a:35:5a:38:3b:61:7a:ca:a6:72:cc: 38:08:0d:9f:20:a2:76:3c:d3:58:28:2e:d1:82:e7:2e:48:1c: 40:17:ab:ba:bd:c3:a6:1d:82:e1:e6:e3:49:b9:c3:a9:2a:5f: da:5f:6e:a2:c7:9d:df:21:b7:7e:17:33:1e:38:27:b7:04:d2: 54:f3:0e:b6:4a:a1:46:32:6d:e7:75:08:9b:51:7a:ed:d8:b3: e6:e8:44:4e:10:f2:51:6e:05:5d:35:87:2c:17:35:93:59:ba: e6:d3:95:78:6a:85:ce:19:28:2f:a2:a8:4c:4f:f4:0a:a6:1c: af:19:59:e9:6c:ee:ef:c8:66:8e:08:d8:2d:ce:6e:42:a4:4b: 14:32:5c:bb:f6:71:d7:e1:49:60:ae:21:8e:f0:0d:2e:ff:6e: 55:3a:4d:98:ce:d4:8d:af:86:31:67:4c:92:12:d6:e3:2e:b4: 9d:1b:8c:93:82:59:87:d3:a2:f4:88:58:d0:21:5f:fd:40:b8: 36:22:e3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EkC1YIi5WzWEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk OTM4YWM4N2EtZTYzNi00MzBhLTkxZWQtYmRjOWZhZDcyNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOXXswbDmEtQWsp7gnQD6afInwHmuZW2b6c NLr7dgeeC0pMdaCTqqkO5blke99SqDEryc0pZbCX/iLkerRh7nwuflyQMZCswQJg 0mjSmIQoUILBAjnqBqZeQw3Nc/kDj/+gZT09MVCm8dV3u0FbFHZ1Jnxj/fuw6kGG cbNW/BH3Kn2y4S8aBL4tOuW2Nc6/QGO5seoA+wxYve7n+fwMpCpg6xrQqWLIzIIp q+qvwBmKVVNsZfT1mP0ZyCQfC0O3iCNoILNrs7cIC4Uo+21l9WnoKw2EocyCGi3a dbyttR6CyWzSBU/4X3h8EJvNgjCvWysFKHEa/h4e1jcl4Xe9jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlS63TuBkBdpJHlDE3XFA2lSCVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvZTIyNzBjMGItMWZkNy0z MjY4LTkxZTAtOWRmNzgzYTRkYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmNgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDyuYvPwfxSr+OedvRRBfkjyGuJeJuz4RusY9ytRQ0sxNboCC0Th0Ot sTSYO7sqlzFfcEH4YS39fPN0s+BKNVo4O2F6yqZyzDgIDZ8gonY801goLtGC5y5I HEAXq7q9w6YdguHm40m5w6kqX9pfbqLHnd8ht34XMx44J7cE0lTzDrZKoUYybed1 CJtReu3Ys+boRE4Q8lFuBV01hywXNZNZuubTlXhqhc4ZKC+iqExP9AqmHK8ZWels 7u/IZo4I2C3ObkKkSxQyXLv2cdfhSWCuIY7wDS7/blU6TZjO1I2vhjFnTJIS1uMu tJ0bjJOCWYfTovSIWNAhX/1AuDYi41s= -----END CERTIFICATE-----Generated at Tue Oct 21 12:01:02 2025 by rpki-client