$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa File: b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa (raw, json) Hash identifier: khPpfYdQ6IoL24scjkS73TVvr2arinbDPPCkJYwCEMs= Subject key identifier: 25:BC:84:04:DA:63:32:34:E0:BB:72:4E:C8:64:83:0F:AB:26:64:24 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584B6ED6405F4F77AE2BFF97ED00 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa Signing time: Mon 06 Oct 2025 15:18:19 +0000 ROA not before: Mon 06 Oct 2025 15:18:19 +0000 ROA not after: Sun 04 Jan 2026 16:18:19 +0000 asID: 16570 IP address blocks: 164.153.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:d6:40:5f:4f:77:ae:2b:ff:97:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Oct 6 15:18:19 2025 GMT Not After : Jan 4 16:18:19 2026 GMT Subject: CN=456bcf5b-24f7-40f1-8a66-f981a8b08d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:77:88:10:84:9a:80:ec:be:78:12:29:f6: 3f:bb:bd:0f:ff:5d:e1:2b:88:e5:5e:e4:d3:bc:08: 18:9e:87:aa:59:08:b7:09:d1:09:a0:1f:d7:7f:4a: af:c6:6d:dd:68:df:8c:e7:89:da:7a:05:df:82:5a: 1c:15:9f:01:45:b7:e2:1c:46:65:66:c2:9b:a1:fe: 23:90:cf:94:29:f1:7b:11:60:bc:5b:2e:4a:5a:4e: 0f:e4:35:89:9f:de:f5:32:27:45:0e:97:45:99:64: 1a:cb:97:d8:e1:58:05:2f:26:46:ed:51:66:73:a5: ee:25:f9:8e:6b:ca:4d:d6:21:85:61:bc:6c:b7:ef: b4:d8:3c:35:72:db:49:7f:b1:a0:a6:91:9b:f7:97: 51:e3:78:9e:14:f1:32:a9:c9:4b:16:a2:6f:46:79: a2:70:97:13:ce:42:92:72:9c:30:da:47:da:ab:16: 2f:ba:0b:06:9a:4e:ed:53:71:78:e2:58:0e:f2:e1: 4b:11:72:81:a0:42:0d:a7:3e:bf:d0:54:96:43:6a: 72:6c:b4:e8:ff:4d:2f:44:3a:05:a5:64:bc:23:b3: 52:5d:f7:38:bf:5e:6e:29:c0:dd:93:60:dd:f2:95: c8:7e:5a:dd:ad:21:4e:ad:5e:b4:39:fc:15:d8:26: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BC:84:04:DA:63:32:34:E0:BB:72:4E:C8:64:83:0F:AB:26:64:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:66:2f:2a:71:2e:a2:25:d4:6c:a1:22:bc:17:cd:97:dd:e4: 5e:f0:53:ac:ef:6c:ea:e4:e0:b1:9a:cc:ea:dc:b8:d4:ed:6d: 0c:ef:88:3a:ae:9a:9f:dd:d3:4d:8c:0a:1c:e6:45:bd:17:36: bf:9e:68:84:3c:a0:d0:bf:cc:99:c7:27:6b:5a:26:e7:93:19: 44:ef:83:ad:f1:dd:85:a0:e1:5b:95:97:0f:ab:c3:22:31:11: 1b:ea:0e:4f:e0:dd:b0:50:15:85:83:91:b9:9f:3b:a1:81:b4: d7:4b:58:10:30:0d:89:23:d6:e0:ec:b2:69:44:98:18:a1:14: c1:49:4f:f2:8c:36:3c:dc:34:7a:e9:53:7c:e7:e0:8d:20:ce: 31:7c:23:1e:79:d4:e8:9a:00:77:bf:43:2e:f9:c1:5d:ba:99: c9:1d:12:95:4c:ff:52:62:2d:0c:fd:63:f7:b4:3a:cd:32:45: 97:3f:a3:fb:c5:97:f8:ad:2e:d9:ac:5c:3d:1b:f8:65:9d:a9: 75:d1:08:b1:f2:d4:6c:1a:ed:fa:b7:c1:f8:3f:10:9e:e0:ab: f1:df:36:4f:55:76:9e:f6:0a:f0:5e:57:25:55:05:6e:30:cb: 55:17:c5:e5:81:be:15:bb:84:dc:99:f3:fe:67:bb:f8:25:3f: 16:0a:8b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu1kBfT3euK/+X7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MTAwNjE1MTgxOVoXDTI2MDEwNDE2MTgxOVowLzEtMCsGA1UEAxMk NDU2YmNmNWItMjRmNy00MGYxLThhNjYtZjk4MWE4YjA4ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8B3iBCEmoDsvngSKfY/u70P/13hK4jlXuTT vAgYnoeqWQi3CdEJoB/Xf0qvxm3daN+M54naegXfglocFZ8BRbfiHEZlZsKbof4j kM+UKfF7EWC8Wy5KWk4P5DWJn971MidFDpdFmWQay5fY4VgFLyZG7VFmc6XuJfmO a8pN1iGFYbxst++02Dw1cttJf7GgppGb95dR43ieFPEyqclLFqJvRnmicJcTzkKS cpww2kfaqxYvugsGmk7tU3F44lgO8uFLEXKBoEINpz6/0FSWQ2pybLTo/00vRDoF pWS8I7NSXfc4v15uKcDdk2Dd8pXIflrdrSFOrV60OfwV2CbGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW8hATaYzI04LtyTshkgw+rJmQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYjJkZTVkYTItZTYyZS0z ZDc4LWJkOTItMGYxYjFiNDIwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlmLypxLqIl1GyhIrwXzZfd5F7wU6zvbOrk4LGazOrcuNTtbQzviDqu mp/d002MChzmRb0XNr+eaIQ8oNC/zJnHJ2taJueTGUTvg63x3YWg4VuVlw+rwyIx ERvqDk/g3bBQFYWDkbmfO6GBtNdLWBAwDYkj1uDssmlEmBihFMFJT/KMNjzcNHrp U3zn4I0gzjF8Ix551OiaAHe/Qy75wV26mckdEpVM/1JiLQz9Y/e0Os0yRZc/o/vF l/itLtmsXD0b+GWdqXXRCLHy1Gwa7fq3wfg/EJ7gq/HfNk9Vdp72CvBeVyVVBW4w y1UXxeWBvhW7hNyZ8/5nu/glPxYKiyk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:28:33 2025 by rpki-client