$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa File: bda2f7a7-dee6-3527-9211-66fbad31be85.roa (raw, json) Hash identifier: 2mqp2xM+43nLUTBx4dsg3Udc6e+sJUgoNQ6cVRXR0Zs= Subject key identifier: 81:4B:E7:A4:D6:C3:0C:9D:B4:CD:ED:77:FE:62:89:DC:0E:CA:5E:19 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B852C3DCD67352574D039A780 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa Signing time: Tue 14 Oct 2025 15:19:21 +0000 ROA not before: Tue 14 Oct 2025 15:19:21 +0000 ROA not after: Mon 12 Jan 2026 16:19:21 +0000 asID: 13511 IP address blocks: 192.155.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:2c:3d:cd:67:35:25:74:d0:39:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 15:19:21 2025 GMT Not After : Jan 12 16:19:21 2026 GMT Subject: CN=25b2269b-cb2e-4eef-9467-bd21250da307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:14:13:18:3d:c9:0c:05:1b:9a:a2:19:f4: fc:61:29:70:83:aa:3c:09:fb:a9:08:f4:8a:d2:81: 9c:7a:87:7c:2f:dd:e6:b6:44:85:f9:ee:6b:ed:e1: c0:9a:4a:4b:e9:53:fd:2c:fe:21:9d:1d:f8:8c:35: 66:de:6d:0d:d2:05:76:77:2b:6f:ad:74:93:a7:30: cd:7f:8f:36:1a:88:7e:72:85:17:f2:2b:5d:c7:1b: ad:d1:bb:16:eb:9c:d1:ea:9d:2f:5c:cc:44:42:1c: f8:b5:03:0d:37:9a:d4:26:ac:06:2c:f4:4b:26:74: 71:c8:d9:3c:5c:6c:f5:f9:ac:93:ed:7b:55:39:94: f1:6d:c3:95:77:01:00:d2:b0:cd:b4:7c:74:01:f0: 51:4f:f4:b7:02:ae:9f:7a:fa:27:ab:a7:ee:db:65: 77:33:ee:a0:6c:f0:72:6a:fe:0d:81:01:7d:af:93: 52:e8:83:50:c9:5a:a1:c1:ca:5e:73:e1:c0:0a:24: 9d:1d:5e:2b:24:e3:41:35:82:60:a5:5d:51:a9:76: 27:18:d6:90:67:11:85:91:86:b7:a6:b3:78:48:a4: 2f:43:78:d1:53:c5:a9:fd:ef:7a:0c:df:03:a6:7c: df:f4:5c:a1:d5:6e:b3:cb:00:10:9c:7b:dd:9c:e3: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:E7:A4:D6:C3:0C:9D:B4:CD:ED:77:FE:62:89:DC:0E:CA:5E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:79:b2:76:af:e5:e3:09:e8:e0:87:1d:b3:99:6e:ff:7c:b9: cb:65:74:ee:2c:53:e6:76:f9:6f:04:eb:3a:27:25:6f:37:e9: b7:9f:f4:58:05:95:d4:44:e2:c2:78:1f:96:76:42:07:f8:86: 3f:85:17:59:51:79:75:f4:f4:ae:b7:4c:70:55:ae:26:0b:ea: aa:9d:74:d4:0a:e4:11:c3:37:44:0d:83:c1:07:18:d9:51:27: 85:66:7e:47:ee:35:cf:28:8a:29:f2:06:93:ec:f1:57:0a:84: 9b:5c:58:03:31:02:34:49:93:47:6d:f8:ba:83:9a:98:73:0a: 88:83:b0:2b:5f:0f:e6:5f:ed:ad:ac:cb:6d:55:b2:62:b4:3f: c1:cd:9f:89:db:1e:ce:b2:7b:15:36:b4:63:07:d5:31:cb:f2: 3e:ff:41:bf:a5:41:37:b4:a1:44:90:67:1c:d3:c2:37:b2:1e: df:d2:c3:66:f9:bf:29:f1:48:44:96:bd:ca:14:0b:93:0f:b6: 9c:45:e8:73:c5:c4:1b:a2:e5:60:18:0a:8f:a3:45:ab:df:a9: b7:8c:14:81:9f:35:e9:eb:12:6f:d2:04:0d:0d:7d:29:d7:e7: 07:77:ed:ed:cc:b1:1a:35:04:f6:b3:ea:13:c5:32:48:58:51: b4:8c:88:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFLD3NZzUldNA5p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDE1MTkyMVoXDTI2MDExMjE2MTkyMVowLzEtMCsGA1UEAxMk MjViMjI2OWItY2IyZS00ZWVmLTk0NjctYmQyMTI1MGRhMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy0UExg9yQwFG5qiGfT8YSlwg6o8CfupCPSK 0oGceod8L93mtkSF+e5r7eHAmkpL6VP9LP4hnR34jDVm3m0N0gV2dytvrXSTpzDN f482Goh+coUX8itdxxut0bsW65zR6p0vXMxEQhz4tQMNN5rUJqwGLPRLJnRxyNk8 XGz1+ayT7XtVOZTxbcOVdwEA0rDNtHx0AfBRT/S3Aq6fevonq6fu22V3M+6gbPBy av4NgQF9r5NS6INQyVqhwcpec+HACiSdHV4rJONBNYJgpV1RqXYnGNaQZxGFkYa3 prN4SKQvQ3jRU8Wp/e96DN8Dpnzf9Fyh1W6zywAQnHvdnOMahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFL56TWwwydtM3td/5iidwOyl4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYmRhMmY3YTctZGVlNi0z NTI3LTkyMTEtNjZmYmFkMzFiZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG55snav5eMJ6OCHHbOZbv98uctldO4sU+Z2+W8E6zonJW836bef9FgF ldRE4sJ4H5Z2Qgf4hj+FF1lReXX09K63THBVriYL6qqddNQK5BHDN0QNg8EHGNlR J4VmfkfuNc8oiinyBpPs8VcKhJtcWAMxAjRJk0dt+LqDmphzCoiDsCtfD+Zf7a2s y21VsmK0P8HNn4nbHs6yexU2tGMH1THL8j7/Qb+lQTe0oUSQZxzTwjeyHt/Sw2b5 vynxSESWvcoUC5MPtpxF6HPFxBui5WAYCo+jRavfqbeMFIGfNenrEm/SBA0NfSnX 5wd37e3MsRo1BPaz6hPFMkhYUbSMiOM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:26 2025 by rpki-client