$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/dbdd592a-e857-3eb7-8381-53a1a20bad18.roa File: dbdd592a-e857-3eb7-8381-53a1a20bad18.roa (raw, json) Hash identifier: mlTwZsnyzNShN/K6ftugr/19LtQ+2Nyn/Q2FvqxyCfY= Subject key identifier: F3:B9:B4:67:18:17:7D:00:F1:AF:99:23:16:0F:2A:CF:47:EE:25:AE Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C9351A79E30A13022DD00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/dbdd592a-e857-3eb7-8381-53a1a20bad18.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 167.94.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:93:51:a7:9e:30:a1:30:22:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=4e0a56fa-e8bf-4269-8f5c-8b33d4ee8d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:41:f3:cf:d9:c8:1d:8d:dd:10:ab:ea:6d: 7d:99:3c:68:93:dd:77:7e:89:7c:96:40:d3:52:be: 7a:0d:e6:35:2d:95:99:c1:c8:26:13:0a:22:30:fa: 7c:c2:a1:7c:7d:80:21:84:72:f7:b8:c0:a7:fa:93: c6:6d:f5:99:70:10:72:83:c8:5e:df:cb:70:e9:da: 9c:0c:65:96:51:d9:f8:f9:47:ec:d5:24:c8:37:b7: 60:a8:60:9d:39:3b:9c:ae:06:02:3e:db:6a:50:3b: 90:b5:c9:1f:b1:8f:90:cd:27:cc:1f:66:b6:bc:fe: bc:45:a9:cb:a6:5d:da:04:94:f3:27:d0:23:a7:e4: 65:4b:13:cf:e4:cb:fc:0b:e3:7e:4a:cb:d9:b4:cb: 09:62:09:95:b1:fa:7a:a8:e9:26:8f:63:30:0f:ae: 2b:77:32:67:84:a2:68:b2:96:35:d7:52:a5:54:a8: 8c:e0:ac:92:3d:6b:45:91:a2:00:b7:2e:81:2a:86: bc:1b:07:09:2e:45:33:50:fc:c6:67:2a:92:92:54: 0c:42:05:47:7c:ad:a9:fc:e0:bf:31:77:b1:3c:41: b1:6e:01:2b:a7:ea:d6:f5:33:21:22:12:97:2e:96: 38:c0:74:d0:c9:3d:2c:7f:2b:3d:4d:28:14:56:0c: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B9:B4:67:18:17:7D:00:F1:AF:99:23:16:0F:2A:CF:47:EE:25:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/dbdd592a-e857-3eb7-8381-53a1a20bad18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:97:63:5f:d1:39:88:9f:92:b2:9f:03:25:ea:4b:4e:6b:b4: 58:12:43:66:44:00:9c:3a:9f:87:f6:40:45:ff:57:aa:7b:35: b5:fa:da:29:89:60:7a:2a:d5:48:b4:a6:21:3b:58:bb:8b:f0: 55:b9:60:88:a4:81:e4:fa:18:36:d1:95:0a:3a:6e:59:bc:1a: 92:f2:d2:89:ff:f2:86:87:ad:9d:06:67:df:7a:66:06:10:38: c4:de:65:46:6e:b2:29:99:a3:4f:ec:54:5e:54:3c:cf:d1:bc: bf:6e:5f:95:28:74:56:be:61:23:ab:7a:92:2e:aa:94:e6:e1: 46:c9:31:99:17:d3:e1:a6:90:3e:0d:b9:db:23:55:d2:3b:db: 51:79:1e:f1:6e:e3:f9:b9:50:67:b5:49:44:60:8c:12:58:b2: e7:00:22:c2:57:76:13:1c:0d:0a:e9:ef:4d:91:18:16:db:25: 68:d9:1a:7b:c4:37:b3:dc:1d:c0:9d:a0:dc:6b:f9:96:f1:4e: 9e:7c:7c:ae:16:0e:cb:f1:2e:7d:07:3c:97:df:95:8f:05:68: b1:98:1f:75:fe:db:5f:0e:05:0d:07:37:63:5a:0e:e4:c0:05: 57:77:f5:e7:6e:dd:3a:31:17:31:44:1b:8b:4b:8e:1a:4d:dd: 09:25:c5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJNRp54woTAi3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NGUwYTU2ZmEtZThiZi00MjY5LThmNWMtOGIzM2Q0ZWU4ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud9B88/ZyB2N3RCr6m19mTxok913fol8lkDT Ur56DeY1LZWZwcgmEwoiMPp8wqF8fYAhhHL3uMCn+pPGbfWZcBByg8he38tw6dqc DGWWUdn4+Ufs1STIN7dgqGCdOTucrgYCPttqUDuQtckfsY+QzSfMH2a2vP68RanL pl3aBJTzJ9Ajp+RlSxPP5Mv8C+N+SsvZtMsJYgmVsfp6qOkmj2MwD64rdzJnhKJo spY111KlVKiM4KySPWtFkaIAty6BKoa8GwcJLkUzUPzGZyqSklQMQgVHfK2p/OC/ MXexPEGxbgErp+rW9TMhIhKXLpY4wHTQyT0sfys9TSgUVgyeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO5tGcYF30A8a+ZIxYPKs9H7iWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZGJkZDU5MmEtZTg1Ny0z ZWI3LTgzODEtNTNhMWEyMGJhZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2XY1/ROYifkrKfAyXqS05rtFgSQ2ZEAJw6n4f2QEX/V6p7NbX62imJ YHoq1Ui0piE7WLuL8FW5YIikgeT6GDbRlQo6blm8GpLy0on/8oaHrZ0GZ996ZgYQ OMTeZUZusimZo0/sVF5UPM/RvL9uX5UodFa+YSOrepIuqpTm4UbJMZkX0+GmkD4N udsjVdI721F5HvFu4/m5UGe1SURgjBJYsucAIsJXdhMcDQrp702RGBbbJWjZGnvE N7PcHcCdoNxr+ZbxTp58fK4WDsvxLn0HPJfflY8FaLGYH3X+218OBQ0HN2NaDuTA BVd39edu3ToxFzFEG4tLjhpN3Qklxek= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:57 2025 by rpki-client