$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa File: 8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa (raw, json) Hash identifier: HS4J3Xilm2crXzcHCR3Yw7Q/BHinjBKffuFDeJiJWVc= Subject key identifier: 8D:F7:AB:5B:EE:D8:A7:BC:E4:CC:F9:38:86:FB:DA:F9:75:84:55:FC Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584B63674A9C9AB548036A0E3F00 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 10384 IP address blocks: 152.85.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4a:9c:9a:b5:48:03:6a:0e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=a5929111-a978-4aa1-9cf6-f5e9b1cc9a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b5:8a:b1:f1:0a:ce:a6:2f:49:39:45:c4:ba: 4d:91:c4:b8:f4:6d:88:9c:d2:6d:f5:3b:bd:aa:04: 4a:5d:b2:c4:71:7c:85:d5:35:e7:87:b9:aa:9d:37: 82:68:dc:c2:c6:56:2a:3b:c8:f4:e2:69:70:2f:c2: 88:9d:81:88:26:4d:a1:7a:4b:09:8a:67:01:6f:a9: 93:3d:17:0a:4e:46:d2:36:c6:46:48:da:cb:32:d2: e6:36:02:2b:ea:97:97:f0:fa:1a:89:0a:18:99:15: 7e:c1:8d:c4:49:b7:e4:f6:c4:b7:84:38:c2:3e:61: db:7b:28:40:37:a2:78:5f:53:0c:c0:1b:c4:73:cb: fa:48:03:59:0c:8c:fc:85:f8:50:02:80:59:e1:cf: ac:0d:be:57:d6:c3:74:ae:f1:33:71:3c:64:f2:86: f4:8b:90:72:c6:28:88:8a:8d:a2:2a:68:8c:c3:d3: 7f:dd:aa:f2:77:d7:72:8d:36:f7:5b:3a:bd:ae:b5: d4:92:f2:ef:5e:94:17:b8:eb:e9:e2:32:bb:d3:9e: e9:67:8a:cd:14:12:00:46:24:7e:cb:54:f4:7b:c4: 45:31:34:81:9b:d7:ac:d3:42:69:b7:db:fa:03:92: a7:d6:0e:39:a7:ca:c6:d2:21:7d:60:63:5b:7f:a0: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F7:AB:5B:EE:D8:A7:BC:E4:CC:F9:38:86:FB:DA:F9:75:84:55:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:72:fd:17:0d:86:5d:e0:9c:ac:6c:33:e6:be:2d:34:72:97: 64:b5:53:90:80:af:04:2d:68:c1:c4:aa:e1:83:41:30:47:1b: 13:99:b1:54:a7:02:13:96:e9:8f:57:9c:0e:04:67:0a:0f:53: 4b:7e:75:2e:b5:a6:90:62:d9:35:80:b4:c2:da:c3:ea:e7:7a: fb:5f:42:56:50:fa:06:38:46:d4:0c:11:85:04:f0:0c:d0:ab: 90:5f:0b:35:8a:ac:13:58:11:7f:9d:4f:25:3c:5b:c6:b7:cf: 68:16:29:1e:e3:b4:90:4f:86:8e:fb:1a:d5:11:ca:3a:34:50: da:d3:d0:2b:61:99:80:d7:02:bd:c1:c2:95:3f:44:29:6f:39: be:20:f3:fa:1a:60:07:1f:4e:15:d1:74:d6:6a:ea:38:c9:34: 67:13:a8:84:0d:5a:ee:d2:e7:5b:fd:9a:6b:aa:7e:ef:3d:db: 29:99:8f:b2:2a:38:2b:0b:79:9e:7a:af:e6:8d:3b:b4:86:9d: 79:24:e6:14:b5:ec:68:dd:4f:97:2f:1e:31:ab:7c:a9:0b:1b: 32:06:d9:0d:82:f8:e6:02:b5:43:b7:c2:25:6c:ee:55:3a:8b: 03:17:dc:37:fd:1e:ec:92:a2:7a:35:33:7c:38:7e:96:d7:4c: a4:68:d2:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0qcmrVIA2oOPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YTU5MjkxMTEtYTk3OC00YWExLTljZjYtZjVlOWIxY2M5YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLWKsfEKzqYvSTlFxLpNkcS49G2InNJt9Tu9 qgRKXbLEcXyF1TXnh7mqnTeCaNzCxlYqO8j04mlwL8KInYGIJk2heksJimcBb6mT PRcKTkbSNsZGSNrLMtLmNgIr6peX8PoaiQoYmRV+wY3ESbfk9sS3hDjCPmHbeyhA N6J4X1MMwBvEc8v6SANZDIz8hfhQAoBZ4c+sDb5X1sN0rvEzcTxk8ob0i5ByxiiI io2iKmiMw9N/3aryd9dyjTb3Wzq9rrXUkvLvXpQXuOvp4jK7057pZ4rNFBIARiR+ y1T0e8RFMTSBm9es00Jpt9v6A5Kn1g45p8rG0iF9YGNbf6DZbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI33q1vu2Ke85Mz5OIb72vl1hFX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvOGY5YzM0OTUtZGY0ZS0z ZmYzLWE3N2MtZDQ1NDdmMTczZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdy/RcNhl3gnKxsM+a+LTRyl2S1U5CArwQtaMHEquGDQTBHGxOZsVSn AhOW6Y9XnA4EZwoPU0t+dS61ppBi2TWAtMLaw+rnevtfQlZQ+gY4RtQMEYUE8AzQ q5BfCzWKrBNYEX+dTyU8W8a3z2gWKR7jtJBPho77GtURyjo0UNrT0CthmYDXAr3B wpU/RClvOb4g8/oaYAcfThXRdNZq6jjJNGcTqIQNWu7S51v9mmuqfu892ymZj7Iq OCsLeZ56r+aNO7SGnXkk5hS17GjdT5cvHjGrfKkLGzIG2Q2C+OYCtUO3wiVs7lU6 iwMX3Df9HuySono1M3w4fpbXTKRo0go= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:42 2025 by rpki-client