$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa File: c46c93a2-fe57-309a-bee8-5628aca49d6b.roa (raw, json) Hash identifier: sdXbJDlz8WOaZx/QdGmukQliMiRpgmwvsTHSWXBmHxE= Subject key identifier: 2A:B4:5A:EA:A6:95:50:59:0F:33:8D:30:FA:D0:A7:AD:36:44:AD:3E Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584B891782A6DD56986EF16A7640 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 54535 IP address blocks: 156.53.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:82:a6:dd:56:98:6e:f1:6a:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=990f31d9-0829-4dac-8654-032aa809d320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:8e:7c:2d:0b:ca:a4:60:1b:a5:d8:cc:9d: 53:d4:ec:bb:21:b5:9c:b1:7f:cf:7a:3c:cf:a8:4f: c5:36:21:c5:a2:f8:f7:a8:b9:f5:83:27:78:05:0c: 70:b8:b6:ce:69:ee:9c:66:fd:b3:97:04:ef:27:91: 96:8a:16:02:ec:fe:d3:90:0d:42:6b:19:14:78:8e: 48:5a:24:15:16:5d:84:b7:89:2b:bf:27:de:88:ed: 0f:83:a0:5b:bb:b1:04:d4:44:e8:62:45:b8:dc:a6: 43:bf:c5:02:c0:99:b3:b6:4c:02:63:c9:54:a6:09: 9e:3d:c4:b8:bb:b9:61:9a:9c:03:25:a1:e7:1c:8a: 45:a3:3f:e6:af:09:37:ac:79:fb:e7:6b:9a:95:3a: 3c:24:bf:5d:e8:9e:35:c9:f1:34:9d:6b:ec:cd:a4: c6:4d:e6:5d:ce:7d:bc:80:fd:25:64:17:73:11:99: 69:eb:a2:22:10:fc:13:1e:e4:f2:04:5e:5c:60:18: 0e:29:23:b0:4d:13:44:c3:3b:ab:bd:94:31:66:ef: 20:de:e4:ef:17:48:7b:32:21:c2:3f:fc:9e:2c:82: 83:ad:9d:05:e0:31:6f:c0:31:ce:95:a4:b1:e7:88: 6b:96:cc:25:7b:6b:e1:ca:35:64:9f:25:52:90:d4: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:5A:EA:A6:95:50:59:0F:33:8D:30:FA:D0:A7:AD:36:44:AD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bb:27:03:55:8e:e1:54:e6:a9:a5:c9:c8:74:72:51:7d:9c: ac:57:49:d0:9a:8e:fa:6b:89:56:77:68:52:01:1a:ae:8b:11: 91:d8:52:b1:d7:79:69:f0:bd:16:4b:d3:81:75:de:06:65:6c: 5f:7a:46:25:52:56:84:16:be:0e:b4:48:f0:56:01:00:2e:a3: 8c:da:36:18:9a:b7:14:91:55:2f:ae:d4:37:98:ce:b7:fa:a7: ae:54:2f:82:e6:68:47:a2:22:ee:f9:8d:05:40:76:56:0f:c3: 62:46:27:4f:f9:50:a3:24:34:2d:28:cf:c9:4c:1f:1f:f8:c0: ad:11:34:28:31:47:7d:7f:38:93:6c:94:35:13:e0:bc:d6:f5: d4:1f:9b:32:ff:fd:db:9d:1c:29:5f:0a:50:39:07:11:a3:93: 44:f3:40:70:3b:ec:02:4a:4c:8c:aa:b0:f0:f1:68:63:37:b3: 20:a9:27:ef:40:84:ca:64:0c:e5:47:9b:31:18:e7:7c:ec:28: 0f:54:40:06:f5:bc:d0:79:78:2c:6d:b7:3a:70:8c:a1:9d:79: c7:4b:27:75:b8:f9:9a:85:c4:f6:f3:89:7a:1f:0c:95:ce:53: 1e:84:70:52:29:42:66:40:b7:f9:fb:1a:91:31:e3:ed:f3:14: 69:53:47:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4Km3VaYbvFqdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk OTkwZjMxZDktMDgyOS00ZGFjLTg2NTQtMDMyYWE4MDlkMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArciOfC0LyqRgG6XYzJ1T1Oy7IbWcsX/PejzP qE/FNiHFovj3qLn1gyd4BQxwuLbOae6cZv2zlwTvJ5GWihYC7P7TkA1CaxkUeI5I WiQVFl2Et4krvyfeiO0Pg6Bbu7EE1EToYkW43KZDv8UCwJmztkwCY8lUpgmePcS4 u7lhmpwDJaHnHIpFoz/mrwk3rHn752ualTo8JL9d6J41yfE0nWvszaTGTeZdzn28 gP0lZBdzEZlp66IiEPwTHuTyBF5cYBgOKSOwTRNEwzurvZQxZu8g3uTvF0h7MiHC P/yeLIKDrZ0F4DFvwDHOlaSx54hrlswle2vhyjVknyVSkNSAZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq0WuqmlVBZDzONMPrQp602RK0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYzQ2YzkzYTItZmU1Ny0z MDlhLWJlZTgtNTYyOGFjYTQ5ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnDXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+7JwNVjuFU5qmlych0clF9nKxXSdCajvpriVZ3aFIBGq6LEZHYUrHX eWnwvRZL04F13gZlbF96RiVSVoQWvg60SPBWAQAuo4zaNhiatxSRVS+u1DeYzrf6 p65UL4LmaEeiIu75jQVAdlYPw2JGJ0/5UKMkNC0oz8lMHx/4wK0RNCgxR31/OJNs lDUT4LzW9dQfmzL//dudHClfClA5BxGjk0TzQHA77AJKTIyqsPDxaGM3syCpJ+9A hMpkDOVHmzEY53zsKA9UQAb1vNB5eCxttzpwjKGdecdLJ3W4+ZqFxPbziXofDJXO Ux6EcFIpQmZAt/n7GpEx4+3zFGlTR0E= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:02 2025 by rpki-client