$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa File: 2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa (raw, json) Hash identifier: 6VArCRT6z8NgKIUC48W0xPOK4iZtUeGmg0vwenmtl9I= Subject key identifier: BB:C1:71:E5:9D:B0:88:01:D2:F9:7E:59:05:3C:B5:15:B9:3E:46:5B Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584B89178229A6A6F10E81411340 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 157.239.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:82:29:a6:a6:f1:0e:81:41:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=837ff332-12bc-4f8b-93cb-bb1b144bf1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4f:fc:92:31:e3:1c:2d:56:53:ae:ad:64:51: 40:c4:28:26:68:18:33:1e:5b:dc:a6:ba:b7:bb:cc: b4:19:e8:bb:55:78:7f:89:fb:8d:28:b6:a8:47:8f: 6d:b8:0e:f7:2d:b5:0a:7c:1e:cd:6d:a6:f7:67:55: d5:21:94:92:13:94:44:af:b6:50:f8:0d:bb:3e:e6: 75:2f:d8:f1:42:32:11:6a:2b:e6:f5:b4:c9:77:69: 11:62:ab:8c:a3:ff:71:cd:ba:05:37:22:41:01:90: 59:04:c4:7d:91:97:ce:83:5d:2a:e5:77:b2:2e:24: 17:ec:f7:62:20:14:39:88:c7:91:80:49:cd:34:c4: 2b:cf:c6:d7:43:c0:fc:1f:b5:1d:00:e4:43:32:9c: ed:a1:bc:c4:03:64:4b:b4:3d:34:0a:06:44:f9:b0: 3b:b4:28:ec:d9:94:03:64:cf:46:be:04:24:b7:a6: 78:a5:e1:a0:a5:f4:a0:a8:fc:3a:0d:57:56:b3:6e: 38:e2:6b:90:74:46:ea:2d:0d:db:33:f4:8e:7b:c2: b5:e9:d8:43:7a:19:74:9a:d2:33:74:fe:d2:ed:f3: 1e:ca:33:82:eb:27:8f:f2:6f:e3:cb:b7:c6:b6:2f: f3:89:92:b7:21:c8:73:01:5c:09:cf:0b:61:c8:bb: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C1:71:E5:9D:B0:88:01:D2:F9:7E:59:05:3C:B5:15:B9:3E:46:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d5:16:40:9b:51:3f:6c:12:40:b5:4c:d5:8b:3e:36:2f:6e: a3:fa:d1:ac:67:91:b1:df:bc:f5:05:5b:84:c7:66:c3:a0:35: fb:fb:c5:d9:f6:53:f5:3f:b4:bd:98:46:cd:52:7e:1c:68:f5: f7:80:38:19:0e:8d:8e:f7:4a:d2:5b:5f:4a:46:1d:ea:04:22: 92:c3:34:6a:5a:cc:1e:e2:9a:b9:a0:af:64:c1:ec:26:a2:c7: f9:95:f4:c3:fb:f9:b6:03:8c:3a:02:44:8b:da:9f:ff:f8:29: 13:a9:0e:44:d7:4c:48:59:4e:26:11:f9:fb:25:74:e5:0a:ba: a1:3b:46:2c:16:9e:93:0e:6e:05:3c:20:b0:0f:9c:c4:51:d6: c5:a6:00:3b:70:ee:54:8b:9b:9d:1c:cf:8b:3a:32:f3:3d:bf: f1:0a:90:20:5b:be:c4:84:9e:00:e6:e4:a8:fa:2d:24:34:3c: 68:26:1d:3d:fd:01:8a:e9:98:01:fe:7a:5d:d9:fe:6d:a0:33: b5:ed:c0:aa:78:2a:1d:77:9f:46:3b:88:16:e9:ec:01:47:d5: 28:0b:53:cf:5c:ec:08:9e:1d:6f:e6:31:23:a3:99:23:51:11: bb:f1:b4:5c:d6:a3:dd:8c:48:44:50:85:3f:6a:77:4d:53:94: 0d:7f:5a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4IppqbxDoFBE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODM3ZmYzMzItMTJiYy00ZjhiLTkzY2ItYmIxYjE0NGJmMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U/8kjHjHC1WU66tZFFAxCgmaBgzHlvcprq3 u8y0Gei7VXh/ifuNKLaoR49tuA73LbUKfB7Nbab3Z1XVIZSSE5REr7ZQ+A27PuZ1 L9jxQjIRaivm9bTJd2kRYquMo/9xzboFNyJBAZBZBMR9kZfOg10q5XeyLiQX7Pdi IBQ5iMeRgEnNNMQrz8bXQ8D8H7UdAORDMpztobzEA2RLtD00CgZE+bA7tCjs2ZQD ZM9GvgQkt6Z4peGgpfSgqPw6DVdWs2444muQdEbqLQ3bM/SOe8K16dhDehl0mtIz dP7S7fMeyjOC6yeP8m/jy7fGti/ziZK3IchzAVwJzwthyLtMUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvBceWdsIgB0vl+WQU8tRW5PkZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmRlMzNkYzgtMWQzNC0z YmMyLTg1ZjItNjk1Y2NjYWJlNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7VFkCbUT9sEkC1TNWLPjYvbqP60axnkbHfvPUFW4THZsOgNfv7xdn2 U/U/tL2YRs1Sfhxo9feAOBkOjY73StJbX0pGHeoEIpLDNGpazB7imrmgr2TB7Cai x/mV9MP7+bYDjDoCRIvan//4KROpDkTXTEhZTiYR+fsldOUKuqE7RiwWnpMObgU8 ILAPnMRR1sWmADtw7lSLm50cz4s6MvM9v/EKkCBbvsSEngDm5Kj6LSQ0PGgmHT39 AYrpmAH+el3Z/m2gM7XtwKp4Kh13n0Y7iBbp7AFH1SgLU89c7AieHW/mMSOjmSNR EbvxtFzWo92MSERQhT9qd01TlA1/WoA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:03 2025 by rpki-client