$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/43ff921f-178f-32c6-8c26-1f2e30875eab.roa File: 43ff921f-178f-32c6-8c26-1f2e30875eab.roa (raw, json) Hash identifier: x7pr6OZBWjM6//R1GW7fXU2jqEIBpzUHqPAjdPTqDCY= Subject key identifier: 39:F0:5F:04:AF:B7:43:60:A5:C6:39:2A:1B:03:75:43:EF:98:7D:A6 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584B63673B6B8A9ACB5C59DEC2C0 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/43ff921f-178f-32c6-8c26-1f2e30875eab.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 10384 IP address blocks: 152.85.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3b:6b:8a:9a:cb:5c:59:de:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=afa4e168-cdd3-46f9-81b0-f968b356c07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:2e:60:6e:e4:77:fe:be:07:54:8c:2f:fe: e4:d9:1a:07:e4:5d:31:6c:92:af:77:22:12:88:10: 44:dc:1e:70:f8:36:7c:b6:db:80:99:c8:cb:9a:81: 02:94:71:f0:fa:49:a6:29:14:b0:b5:b6:01:16:ae: 8c:63:8a:5a:76:06:96:34:d6:18:1b:b7:41:be:9d: a8:00:77:89:a3:a3:93:2e:0c:62:9d:f3:1e:a7:43: 43:13:51:91:5e:bd:13:e9:f3:03:35:f9:f3:d4:5c: 19:54:84:f1:a0:dc:98:fe:ee:11:52:6f:8f:ee:fa: 1c:7b:85:44:65:98:fd:51:22:1a:2c:dd:c1:18:70: a6:f7:a6:60:0c:dd:71:ae:7b:15:a6:eb:c5:75:fb: 1d:f6:7b:38:2b:8b:2f:80:ae:f9:47:92:86:07:f2: 58:5c:32:ef:3d:d5:9e:63:7b:08:9e:55:12:db:4a: 1c:40:2a:dc:1b:7c:27:dc:8e:3f:1d:18:9e:67:de: 80:9a:f9:b6:89:01:9f:f2:15:99:a0:03:e4:83:46: ba:88:46:6b:6f:d8:b6:16:b1:3c:cf:67:43:48:03: cd:68:05:85:41:ca:8f:be:14:14:59:10:73:d4:7b: b3:7d:67:b7:d8:cd:92:22:4d:ae:49:b2:ad:3c:ed: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F0:5F:04:AF:B7:43:60:A5:C6:39:2A:1B:03:75:43:EF:98:7D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/43ff921f-178f-32c6-8c26-1f2e30875eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c2:30:b9:69:ba:42:df:a2:a2:b5:20:ef:f1:1f:48:3e:26: 12:1e:6e:a6:db:35:de:df:55:f1:ff:83:eb:25:9c:9c:48:1b: b5:38:b0:1b:02:0f:97:0a:a4:a6:95:9d:69:52:01:57:3f:5e: 46:ef:ea:0f:05:35:b9:7f:85:75:6f:33:72:bc:7a:fe:72:80: ce:98:22:27:7b:a1:8d:1c:93:ab:c7:25:d5:9f:b9:8e:52:c3: 5e:4e:6a:59:07:dc:80:6d:1f:43:6e:af:09:ee:95:39:b9:e0: e9:2d:a5:f7:8a:fc:34:c0:34:10:14:99:4f:23:c4:16:a4:c3: 4d:1f:71:c1:5d:d9:3d:76:7e:a0:a0:17:62:3d:5e:11:ef:21: 6c:d4:08:8d:e5:39:9f:21:50:6a:c8:f9:ce:2c:f5:d2:56:27: 94:3b:dd:1d:ff:80:a7:c6:e1:df:a7:a6:2f:68:19:e0:27:70: 2e:77:1d:5d:a9:1a:d4:02:36:01:7c:aa:5d:eb:2d:94:83:aa: d8:a0:be:1f:a1:ae:54:81:71:1e:9a:58:31:5d:6f:24:69:02: 9a:7f:17:af:93:79:35:cf:62:ff:7c:ed:d8:ea:30:05:9b:17: 5e:83:92:09:98:90:69:1f:a1:44:32:a9:4d:a0:72:f1:76:2e: b8:9e:06:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZztriprLXFnewsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YWZhNGUxNjgtY2RkMy00NmY5LTgxYjAtZjk2OGIzNTZjMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgEuYG7kd/6+B1SML/7k2RoH5F0xbJKvdyIS iBBE3B5w+DZ8ttuAmcjLmoEClHHw+kmmKRSwtbYBFq6MY4padgaWNNYYG7dBvp2o AHeJo6OTLgxinfMep0NDE1GRXr0T6fMDNfnz1FwZVITxoNyY/u4RUm+P7voce4VE ZZj9USIaLN3BGHCm96ZgDN1xrnsVpuvFdfsd9ns4K4svgK75R5KGB/JYXDLvPdWe Y3sInlUS20ocQCrcG3wn3I4/HRieZ96Amvm2iQGf8hWZoAPkg0a6iEZrb9i2FrE8 z2dDSAPNaAWFQcqPvhQUWRBz1HuzfWe32M2SIk2uSbKtPO2pUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnwXwSvt0NgpcY5KhsDdUPvmH2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvNDNmZjkyMWYtMTc4Zi0z MmM2LThjMjYtMWYyZTMwODc1ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPCMLlpukLfoqK1IO/xH0g+JhIebqbbNd7fVfH/g+slnJxIG7U4sBsC D5cKpKaVnWlSAVc/Xkbv6g8FNbl/hXVvM3K8ev5ygM6YIid7oY0ck6vHJdWfuY5S w15OalkH3IBtH0NurwnulTm54OktpfeK/DTANBAUmU8jxBakw00fccFd2T12fqCg F2I9XhHvIWzUCI3lOZ8hUGrI+c4s9dJWJ5Q73R3/gKfG4d+npi9oGeAncC53HV2p GtQCNgF8ql3rLZSDqtigvh+hrlSBcR6aWDFdbyRpApp/F6+TeTXPYv987djqMAWb F16DkgmYkGkfoUQyqU2gcvF2LrieBsE= -----END CERTIFICATE-----Generated at Mon Oct 20 22:45:13 2025 by rpki-client