$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2814690c-02f7-33c9-b989-87a2d8358b34.roa File: 2814690c-02f7-33c9-b989-87a2d8358b34.roa (raw, json) Hash identifier: lEeJS9UQMG9hhxDUlgw6yC0+CX+0IyMnLtTIKNoKfGY= Subject key identifier: AB:12:57:76:D7:2A:A0:F5:19:2B:BD:2B:4F:92:33:2D:D7:29:7F:DC Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584B63674F61F0AA62EBC832FC80 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2814690c-02f7-33c9-b989-87a2d8358b34.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 10384 IP address blocks: 152.85.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4f:61:f0:aa:62:eb:c8:32:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=923c2a40-66c5-4032-b719-b00f3ffe174b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:30:e3:51:b4:29:b9:e0:bb:a5:3b:b6:e8: 8e:0a:80:b0:4b:19:29:73:77:90:d6:62:0a:fc:6c: 70:e2:a6:cc:77:c9:a8:71:8f:86:7f:fc:1e:5b:b0: 03:bf:21:1f:55:87:db:5e:77:63:38:34:cc:5a:36: 11:13:92:74:8b:c7:6f:db:45:6f:bd:85:87:89:0b: 7c:03:82:ab:c1:39:a3:8c:99:02:35:5a:40:52:17: b8:63:90:66:84:63:09:63:4a:f0:de:3f:91:b6:bf: 82:96:0b:f5:0f:6b:cf:01:e4:29:1c:f5:0c:e8:21: 7c:48:65:db:0f:86:89:8a:96:9a:42:b4:41:9d:cf: 9b:6d:fa:25:c7:4f:b0:8f:c9:10:ba:07:b9:95:a7: 15:fc:27:d0:cb:88:31:46:21:c8:3b:98:31:d2:df: 8b:61:a2:c7:15:bb:3e:8f:f8:59:26:98:35:6b:ad: 00:02:25:f3:bc:f4:39:a4:08:97:95:42:bd:02:7f: db:39:07:63:6a:a6:53:b8:a0:5d:a0:a0:ea:e3:0f: 31:37:c1:f5:f9:35:40:0e:46:63:81:7d:4d:d3:b6: 27:1a:3d:bf:61:b0:d1:58:72:f9:f2:c3:e0:f2:41: b1:86:f0:a1:2e:ac:f1:a8:c3:47:ec:f9:2b:71:a3: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:57:76:D7:2A:A0:F5:19:2B:BD:2B:4F:92:33:2D:D7:29:7F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/2814690c-02f7-33c9-b989-87a2d8358b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:11:71:3e:21:6c:d5:2e:f2:c1:69:b9:fd:fa:4b:c4:7c:9c: e3:de:b4:b8:1b:2b:68:33:23:50:bd:82:25:48:78:d8:f9:74: cf:30:3c:b3:0b:aa:c2:a9:32:b0:6d:89:fb:50:b8:e2:8c:a2: 76:4d:d6:a1:5a:fc:6d:76:d1:b0:48:2a:45:c9:56:0a:84:18: f2:ab:69:7d:3d:03:1e:29:27:6c:ae:e7:25:4a:75:73:27:7d: 36:bf:01:25:cb:96:e8:f2:8b:e9:c0:24:ad:49:4a:b9:d2:56: e2:89:85:0e:62:a4:e6:40:3e:dc:0d:52:a8:b5:cf:93:b4:4c: f5:0d:2e:c1:da:d5:7d:d2:01:f8:22:ef:1f:d2:31:fb:ca:c3: 7c:e5:19:10:9f:78:b2:0b:3f:69:77:89:15:40:42:ca:da:71: 40:f6:f0:20:1f:18:1c:32:0a:b2:12:9f:93:ee:38:bb:3c:0f: f2:ba:5b:1d:04:13:e7:0b:19:01:4e:55:fc:a7:b9:c8:d7:24: 51:35:46:1f:17:9c:42:12:49:27:04:b8:c5:62:84:6d:a7:0a: a2:71:27:b9:4c:3a:47:8f:ef:45:ed:54:2f:07:f0:b7:3a:63: 53:65:a4:4e:d3:32:00:67:87:40:10:0c:3c:83:69:c5:9b:f4: 09:cf:40:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ09h8Kpi68gy/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OTIzYzJhNDAtNjZjNS00MDMyLWI3MTktYjAwZjNmZmUxNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTow41G0Kbngu6U7tuiOCoCwSxkpc3eQ1mIK /Gxw4qbMd8mocY+Gf/weW7ADvyEfVYfbXndjODTMWjYRE5J0i8dv20VvvYWHiQt8 A4KrwTmjjJkCNVpAUhe4Y5BmhGMJY0rw3j+Rtr+Clgv1D2vPAeQpHPUM6CF8SGXb D4aJipaaQrRBnc+bbfolx0+wj8kQuge5lacV/CfQy4gxRiHIO5gx0t+LYaLHFbs+ j/hZJpg1a60AAiXzvPQ5pAiXlUK9An/bOQdjaqZTuKBdoKDq4w8xN8H1+TVADkZj gX1N07YnGj2/YbDRWHL58sPg8kGxhvChLqzxqMNH7PkrcaOINQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsSV3bXKqD1GSu9K0+SMy3XKX/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvMjgxNDY5MGMtMDJmNy0z M2M5LWI5ODktODdhMmQ4MzU4YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkRcT4hbNUu8sFpuf36S8R8nOPetLgbK2gzI1C9giVIeNj5dM8wPLML qsKpMrBtiftQuOKMonZN1qFa/G120bBIKkXJVgqEGPKraX09Ax4pJ2yu5yVKdXMn fTa/ASXLlujyi+nAJK1JSrnSVuKJhQ5ipOZAPtwNUqi1z5O0TPUNLsHa1X3SAfgi 7x/SMfvKw3zlGRCfeLILP2l3iRVAQsracUD28CAfGBwyCrISn5PuOLs8D/K6Wx0E E+cLGQFOVfynucjXJFE1Rh8XnEISSScEuMVihG2nCqJxJ7lMOkeP70XtVC8H8Lc6 Y1NlpE7TMgBnh0AQDDyDacWb9AnPQJA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:44:30 2025 by rpki-client