$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa File: bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa (raw, json) Hash identifier: ovkkmtJFhC/fX8eOAgtwZCBZfi1n6UYl2rhMdyToTpg= Subject key identifier: E4:E3:16:89:09:DD:21:F0:F2:94:1B:FF:34:EE:38:8A:88:2F:49:54 Certificate issuer: /CN=feb36888-683d-42bf-9c19-4ceaf1748703 Certificate serial: 010D0C9F4328584B477C691962328A91BD22C180 Authority key identifier: E6:AB:48:39:D2:04:15:A7:B8:17:F0:B3:04:EF:9A:4C:08:C4:59:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 6939 IP address blocks: 158.222.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:69:19:62:32:8a:91:bd:22:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb36888-683d-42bf-9c19-4ceaf1748703 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=075bfb39-87b7-4c14-a1b0-0a5ef52e08b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:ba:f1:05:41:21:da:fd:6d:4b:5f:10:27: 87:ba:86:0e:11:60:9c:9b:5e:f4:55:5b:ac:4b:58: 09:19:d3:cb:85:f0:02:6b:50:6b:37:f7:e2:06:03: 3e:59:ad:9a:64:37:8a:7b:e1:69:66:a5:35:01:2b: df:db:7f:72:27:e2:a4:75:55:10:4c:49:92:1c:a1: 99:78:86:5a:3e:9a:5b:83:3f:83:f1:f0:8f:65:ed: 6b:5a:f0:04:cf:8e:18:26:6a:2a:ce:9b:f7:85:9b: fb:33:ff:e2:76:3f:67:5e:4c:5a:02:86:d9:60:ac: b9:79:b4:94:e8:ec:af:fd:ea:32:e5:e3:bf:0a:e5: 53:43:4d:f0:ec:1c:99:eb:3d:40:d6:5f:76:f3:46: c7:fc:21:1c:84:5f:ef:81:6e:88:c9:60:05:46:7e: ce:ab:4a:18:f3:52:c8:bf:85:c7:5f:34:af:5e:f9: 1c:ea:d3:f5:e5:1f:9c:77:dc:04:93:e7:9a:c3:8c: fe:49:75:2f:6a:d4:28:25:78:96:ab:6d:a3:bd:0f: a9:5d:33:cf:0a:9b:59:60:89:e3:0f:2d:d0:ae:93: 0d:3d:1d:9a:ce:76:59:ad:1d:4f:b6:23:70:12:b4: ea:86:f1:b6:f6:bc:54:37:50:be:d1:25:fa:ca:d0: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E3:16:89:09:DD:21:F0:F2:94:1B:FF:34:EE:38:8A:88:2F:49:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/bd4d4f9a-fdec-32b6-a075-fc428c601f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703/feb36888-683d-42bf-9c19-4ceaf1748703.crl X509v3 Authority Key Identifier: keyid:E6:AB:48:39:D2:04:15:A7:B8:17:F0:B3:04:EF:9A:4C:08:C4:59:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/feb36888-683d-42bf-9c19-4ceaf1748703.cer sbgp-ipAddrBlock: critical IPv4: 158.222.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b2:fa:72:95:87:e1:c2:30:22:ae:c0:8c:a5:14:cc:be:14: 76:5c:63:34:60:58:6b:b9:3f:37:ff:ce:97:5c:ae:4a:f3:3e: 98:73:fe:06:8d:6c:2a:f0:4f:a5:37:cf:7e:d2:9a:e7:00:d3: 2e:96:44:2e:e0:06:dc:6f:1e:da:2b:47:61:a8:24:b6:30:21: 28:dc:cf:df:f4:1a:7e:75:4b:5d:51:22:40:db:70:cb:d7:66: 92:47:ae:4b:32:cf:3c:6a:a3:06:27:35:a8:b3:1d:58:05:57: 77:ce:23:1d:32:48:95:68:15:7e:43:e4:e3:c5:ee:40:a0:63: 8a:c3:87:95:67:a2:0b:86:8a:5e:1c:e8:e7:b9:e4:5e:80:13: 42:d4:5f:e4:41:b4:2b:5f:06:fa:66:72:90:3a:e7:b1:9f:72: 3d:d0:e8:fc:df:05:d0:c3:ee:7b:2f:4d:5f:b1:6e:17:1e:22: 66:20:d0:fd:9f:7b:46:b1:2a:74:ce:e8:54:80:27:8b:72:63: bb:00:8a:b3:91:47:72:34:b0:64:28:3f:40:79:3a:6f:19:56: e3:65:02:2b:64:dd:f7:b2:aa:17:89:4f:4b:02:57:79:6d:55: 8e:30:30:2b:59:a2:75:2c:5b:86:62:2f:44:3b:e0:3d:5e:df: e2:a7:41:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGkZYjKKkb0iwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmViMzY4ODgtNjgzZC00MmJmLTljMTktNGNlYWYxNzQ4 NzAzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDc1YmZiMzktODdiNy00YzE0LWExYjAtMGE1ZWY1MmUwOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9W68QVBIdr9bUtfECeHuoYOEWCcm170VVus S1gJGdPLhfACa1BrN/fiBgM+Wa2aZDeKe+FpZqU1ASvf239yJ+KkdVUQTEmSHKGZ eIZaPppbgz+D8fCPZe1rWvAEz44YJmoqzpv3hZv7M//idj9nXkxaAobZYKy5ebSU 6Oyv/eoy5eO/CuVTQ03w7ByZ6z1A1l9280bH/CEchF/vgW6IyWAFRn7Oq0oY81LI v4XHXzSvXvkc6tP15R+cd9wEk+eaw4z+SXUvatQoJXiWq22jvQ+pXTPPCptZYInj Dy3QrpMNPR2aznZZrR1PtiNwErTqhvG29rxUN1C+0SX6ytAGNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTjFokJ3SHw8pQb/zTuOIqIL0lUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZWIz Njg4OC02ODNkLTQyYmYtOWMxOS00Y2VhZjE3NDg3MDMvYmQ0ZDRmOWEtZmRlYy0z MmI2LWEwNzUtZmM0MjhjNjAxZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmViMzY4ODgtNjgzZC00MmJmLTlj MTktNGNlYWYxNzQ4NzAzL2ZlYjM2ODg4LTY4M2QtNDJiZi05YzE5LTRjZWFmMTc0 ODcwMy5jcmwwHwYDVR0jBBgwFoAU5qtIOdIEFae4F/CzBO+aTAjEWSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZWIzNjg4OC02ODNkLTQyYmYtOWMxOS00Y2Vh ZjE3NDg3MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnt4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyy+nKVh+HCMCKuwIylFMy+FHZcYzRgWGu5Pzf/zpdcrkrzPphz/gaN bCrwT6U3z37SmucA0y6WRC7gBtxvHtorR2GoJLYwISjcz9/0Gn51S11RIkDbcMvX ZpJHrksyzzxqowYnNaizHVgFV3fOIx0ySJVoFX5D5OPF7kCgY4rDh5VnoguGil4c 6Oe55F6AE0LUX+RBtCtfBvpmcpA657Gfcj3Q6PzfBdDD7nsvTV+xbhceImYg0P2f e0axKnTO6FSAJ4tyY7sAirORR3I0sGQoP0B5Om8ZVuNlAitk3feyqheJT0sCV3lt VY4wMCtZonUsW4ZiL0Q74D1e3+KnQUY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:25 2025 by rpki-client