$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa File: 4509c257-d356-3468-8d2f-84e2bb161f00.roa (raw, json) Hash identifier: j+c+NFKeGGzuWjVA/siou2WAd+Xj+fHU7O9YNVug0vA= Subject key identifier: 2A:9B:5B:5C:A0:F4:C0:22:F4:53:EB:72:D5:6B:08:E2:84:67:6F:09 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C933D10A4C5E8AEA58DC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 167.94.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:93:3d:10:a4:c5:e8:ae:a5:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=5b5bca42-cfb0-46a1-91d1-be0827e604a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:2d:93:95:da:dc:37:34:57:2f:fd:c9:31: fc:36:8b:32:55:c0:50:62:f4:bb:82:c7:db:a6:60: 09:d2:2b:15:7e:5b:4d:99:ce:61:e4:dc:12:c6:ec: a1:c4:7b:b0:5a:72:fa:47:2b:6f:3c:64:c6:b1:8c: 80:54:af:df:fc:2a:2e:f4:4d:f0:80:51:a2:61:c1: ec:90:e5:eb:f4:94:fb:cc:2f:01:18:fe:21:04:52: 5b:39:af:d3:9f:74:c0:b8:50:24:0a:4e:17:d7:3c: 84:f2:e6:6e:95:31:5b:f4:1e:71:db:ca:b8:cb:34: fb:18:a1:f2:1a:9f:5c:9e:e0:40:9f:08:65:c5:15: 0c:38:e4:ba:e0:91:d2:6a:00:18:b7:d0:0d:ed:6f: af:a6:95:ea:e1:03:24:cd:30:4c:ae:48:69:7f:ab: dc:60:ad:77:5c:97:e2:9a:d0:af:61:42:02:98:91: 2c:dd:77:2b:65:bd:16:57:63:56:1a:04:0b:f5:c7: 4c:54:ec:8c:e8:24:97:3c:f8:4b:bb:60:c6:b2:9f: 0d:de:06:bb:6a:85:cb:b3:b0:25:5c:91:05:16:55: 21:6c:99:c2:1d:48:f9:87:fa:c0:fa:e5:53:20:44: 0c:5c:8f:ef:d1:8e:ac:ee:a9:1c:02:35:3b:89:30: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:5B:5C:A0:F4:C0:22:F4:53:EB:72:D5:6B:08:E2:84:67:6F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:96:8c:1e:52:5e:40:c3:52:b8:11:be:f7:3d:9a:81:1c:0c: f3:7e:4d:7f:f0:b4:18:30:70:3c:b8:4f:10:25:89:41:d6:2b: fa:b8:0c:30:f0:70:48:7a:c7:31:34:08:04:0f:a5:4f:25:ef: 08:e9:16:15:ae:c5:9a:44:a7:c0:21:37:bb:64:9f:3b:16:b5: e4:5a:76:d7:b0:70:0a:53:a1:11:0d:94:21:0b:b7:c9:94:fe: d3:61:fe:e0:29:18:dc:ef:b0:63:e2:58:a8:a6:38:63:4a:01: 71:1b:77:f9:22:ec:87:f5:ee:97:af:4e:82:fb:94:f5:10:c5: ca:12:14:68:03:a5:b3:ca:16:e6:a9:70:8c:05:c6:4b:98:df: 2f:06:63:af:3b:93:5c:fe:ba:23:5b:da:90:ef:66:9d:1a:42: 00:d1:21:dd:bb:b1:14:50:8c:7d:20:b6:87:52:ca:9f:89:d5: 8b:8a:6e:30:6e:0d:00:63:27:20:0d:dc:4e:a9:b5:8f:9d:bc: de:82:29:36:65:d3:f9:27:fe:df:7f:a3:d4:9e:bd:b7:7f:55: 50:13:75:bc:e0:f8:66:d5:e1:19:5f:6e:82:96:28:50:2e:9a: b1:4f:13:1f:c9:72:dc:ae:35:d4:98:df:55:3b:8b:36:0e:b7: bb:a4:25:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJM9EKTF6K6ljcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NWI1YmNhNDItY2ZiMC00NmExLTkxZDEtYmUwODI3ZTYwNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYstk5Xa3Dc0Vy/9yTH8NosyVcBQYvS7gsfb pmAJ0isVfltNmc5h5NwSxuyhxHuwWnL6RytvPGTGsYyAVK/f/Cou9E3wgFGiYcHs kOXr9JT7zC8BGP4hBFJbOa/Tn3TAuFAkCk4X1zyE8uZulTFb9B5x28q4yzT7GKHy Gp9cnuBAnwhlxRUMOOS64JHSagAYt9AN7W+vppXq4QMkzTBMrkhpf6vcYK13XJfi mtCvYUICmJEs3XcrZb0WV2NWGgQL9cdMVOyM6CSXPPhLu2DGsp8N3ga7aoXLs7Al XJEFFlUhbJnCHUj5h/rA+uVTIEQMXI/v0Y6s7qkcAjU7iTDzPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqbW1yg9MAi9FPrctVrCOKEZ28JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDUwOWMyNTctZDM1Ni0z NDY4LThkMmYtODRlMmJiMTYxZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqWjB5SXkDDUrgRvvc9moEcDPN+TX/wtBgwcDy4TxAliUHWK/q4DDDw cEh6xzE0CAQPpU8l7wjpFhWuxZpEp8AhN7tknzsWteRadtewcApToRENlCELt8mU /tNh/uApGNzvsGPiWKimOGNKAXEbd/ki7If17pevToL7lPUQxcoSFGgDpbPKFuap cIwFxkuY3y8GY687k1z+uiNb2pDvZp0aQgDRId27sRRQjH0gtodSyp+J1YuKbjBu DQBjJyAN3E6ptY+dvN6CKTZl0/kn/t9/o9Sevbd/VVATdbzg+GbV4RlfboKWKFAu mrFPEx/JctyuNdSY31U7izYOt7ukJYE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:51 2025 by rpki-client