$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa File: f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa (raw, json) Hash identifier: i9Ko/I0382DkBnU6cRDPOUtAtz+GgTBp1bPTyT/FvYE= Subject key identifier: 89:74:4D:E1:00:4F:09:FE:C3:E0:F2:EB:74:63:08:71:03:24:57:87 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C93664AABF95B38884580 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 931 IP address blocks: 167.94.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:93:66:4a:ab:f9:5b:38:88:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=1ff1a967-1c0a-48a8-ba78-90038c78e314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:d7:37:4a:73:4d:7d:f8:17:b7:8f:22:49: 04:83:4d:f3:f7:7b:f4:f7:c9:48:fc:b1:15:6f:4c: a6:f0:e5:22:34:fc:6d:4f:87:23:de:53:db:5c:40: 37:e0:cb:b1:12:27:8c:94:81:9a:a0:59:91:a9:ab: 45:f0:45:2c:ba:2d:c4:00:41:da:70:2b:d3:04:ca: 59:c9:17:8c:91:59:64:82:d1:c3:a9:9a:f8:89:e2: db:d5:a9:0b:94:cb:dd:fd:3f:64:45:fd:1b:5d:a3: 3d:42:98:d0:3b:dc:75:48:a0:0d:94:5c:c5:aa:ac: 7a:e5:be:55:53:81:bc:18:bf:cd:f1:9f:b0:0c:32: a6:bf:44:87:4b:fc:c0:35:48:38:f6:0d:20:d7:b8: 93:b5:05:11:a7:ee:21:24:f1:93:29:15:24:bb:d3: f0:f6:e5:09:d6:e7:0b:91:6b:73:6e:47:5a:fd:7c: 30:7d:ec:7b:7d:09:fe:95:ed:30:71:21:84:66:27: 95:cd:36:83:7b:be:71:ec:b6:64:79:e2:30:87:68: 02:9e:b6:50:b0:0f:e8:bd:1c:b4:bb:5d:99:37:fc: 03:fd:0c:28:99:46:c2:87:43:19:a2:0d:34:c0:30: f8:85:18:4b:a7:2e:63:19:ec:f1:0a:df:42:fa:39: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:4D:E1:00:4F:09:FE:C3:E0:F2:EB:74:63:08:71:03:24:57:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:44:4c:9c:bb:55:31:3a:5f:76:7b:16:8e:9e:5e:77:91:b2: c3:07:49:cd:e6:fb:d1:c6:80:4b:30:f4:02:22:79:fb:fe:54: 69:21:62:42:92:01:34:b5:d6:0a:62:fb:d5:eb:2f:88:62:2f: 87:f8:2a:b9:a4:6f:2e:74:80:74:d6:4e:39:d6:40:fe:c0:e5: 8d:e6:56:7a:f7:1c:42:d4:a7:7b:e1:9c:89:7f:c0:60:a6:c9: 0e:89:a7:ac:2a:7b:57:08:18:d1:e6:97:0d:e5:d5:95:db:b3: 62:14:e3:37:3e:7c:7b:06:7e:01:96:c3:fb:64:5d:04:68:1e: f2:1d:24:43:dd:40:bf:18:7b:85:9b:30:b3:6b:04:a9:ca:4d: 9c:fc:3e:84:88:40:7d:8a:40:82:2f:7f:95:0c:06:9b:9e:8b: 8f:2b:f5:bf:60:63:75:60:20:97:a5:5b:e6:9d:ec:9f:12:e4: c5:81:dd:e6:7b:03:22:c1:be:b4:c8:46:e7:8d:e0:ce:fb:a0: 33:58:28:25:09:91:4b:cd:c1:5d:04:e4:45:d7:be:00:7c:29: d3:e0:92:7c:05:79:fe:ab:9d:ca:87:42:7a:25:4d:43:83:c8: 2a:ca:bd:0e:82:b5:7f:8d:c8:19:dc:f6:a9:bc:b4:c7:92:bd: 4d:ad:78:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJNmSqv5WziIRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MWZmMWE5NjctMWMwYS00OGE4LWJhNzgtOTAwMzhjNzhlMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzPXN0pzTX34F7ePIkkEg03z93v098lI/LEV b0ym8OUiNPxtT4cj3lPbXEA34MuxEieMlIGaoFmRqatF8EUsui3EAEHacCvTBMpZ yReMkVlkgtHDqZr4ieLb1akLlMvd/T9kRf0bXaM9QpjQO9x1SKANlFzFqqx65b5V U4G8GL/N8Z+wDDKmv0SHS/zANUg49g0g17iTtQURp+4hJPGTKRUku9Pw9uUJ1ucL kWtzbkda/Xwwfex7fQn+le0wcSGEZieVzTaDe75x7LZkeeIwh2gCnrZQsA/ovRy0 u12ZN/wD/QwomUbCh0MZog00wDD4hRhLpy5jGezxCt9C+jmZVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl0TeEATwn+w+Dy63RjCHEDJFeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjgzNWFiZTItNzIwNC0z YzY2LTk4YTYtOGM3ZDIwNjljNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENETJy7VTE6X3Z7Fo6eXneRssMHSc3m+9HGgEsw9AIiefv+VGkhYkKS ATS11gpi+9XrL4hiL4f4Krmkby50gHTWTjnWQP7A5Y3mVnr3HELUp3vhnIl/wGCm yQ6Jp6wqe1cIGNHmlw3l1ZXbs2IU4zc+fHsGfgGWw/tkXQRoHvIdJEPdQL8Ye4Wb MLNrBKnKTZz8PoSIQH2KQIIvf5UMBpuei48r9b9gY3VgIJelW+ad7J8S5MWB3eZ7 AyLBvrTIRueN4M77oDNYKCUJkUvNwV0E5EXXvgB8KdPgknwFef6rncqHQnolTUOD yCrKvQ6CtX+NyBnc9qm8tMeSvU2teJM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:34 2025 by rpki-client