$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/57eb7c8f-1de2-3b00-9c9b-b28136da7a0f.roa File: 57eb7c8f-1de2-3b00-9c9b-b28136da7a0f.roa (raw, json) Hash identifier: rZg/S3zUiX6la1XyLZdRXCx9tujgAHlDoc2bcET13AE= Subject key identifier: 6A:8F:BF:90:12:99:53:43:61:18:6F:3E:85:B4:7F:19:67:E4:DA:D4 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F4328584B4D11CE953389197AE98CA720 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/57eb7c8f-1de2-3b00-9c9b-b28136da7a0f.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 164.55.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ce:95:33:89:19:7a:e9:8c:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=dcdda185-da39-4a5f-aad2-d71e5bcae4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:ab:1c:a0:1f:d5:52:cf:e7:6b:ff:be:31: b9:9c:a4:17:9d:85:53:78:0e:23:54:2c:79:bd:3f: 2a:8c:6a:4b:9d:61:db:ce:02:e5:98:8c:c4:b1:07: cf:9a:34:71:c9:f8:98:d3:98:95:cd:1e:e0:4b:73: 1f:87:ac:e6:66:63:38:51:bc:63:58:d5:51:2c:1e: 76:90:91:ac:e9:59:c0:ae:a9:0b:68:01:43:d4:91: 28:1a:cd:62:ae:04:dc:54:a1:71:5a:c6:57:7d:f9: 66:c0:28:c5:4a:7a:b3:55:90:73:7f:b6:5c:d0:86: 44:6a:6e:b0:ab:27:8e:d4:92:98:5c:ac:d1:ce:e9: ef:56:29:cc:64:7e:99:f7:dc:c7:80:0d:14:78:20: 7c:45:bd:94:c6:a9:b5:80:46:fb:f0:31:bf:fe:c3: 4f:00:7e:4b:19:3d:b4:0e:d6:dc:41:f6:68:56:d5: 74:f8:95:02:1e:af:ec:68:68:0c:1f:61:76:53:04: 15:25:a2:66:27:38:dc:10:4b:89:ac:96:81:88:0c: 12:29:ec:00:de:2c:a9:22:aa:55:16:bc:6e:fe:fd: 8c:da:a4:9c:bc:e3:87:e1:88:d1:21:35:eb:91:dc: a8:0c:c4:36:e4:06:67:ac:1c:b2:f0:77:99:5b:77: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8F:BF:90:12:99:53:43:61:18:6F:3E:85:B4:7F:19:67:E4:DA:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/57eb7c8f-1de2-3b00-9c9b-b28136da7a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 164.55.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a1:e8:c5:e3:e0:06:ae:9b:3a:cf:47:48:4f:2c:bd:24:5f: 5e:07:5d:ad:c6:60:a9:48:37:f4:58:ca:8f:c1:94:23:3d:92: 19:54:3e:41:50:a7:80:7c:1b:0c:4f:11:b0:2e:03:4f:4f:43: e5:39:4e:11:0e:61:fe:63:5f:f9:f7:eb:0f:f4:2a:78:1e:cf: b9:8e:65:ee:7f:99:9b:f8:96:07:0d:3b:9b:6c:6b:a2:7a:6f: c4:55:30:f7:f9:e7:ed:5e:12:c7:80:4e:fd:ce:b2:09:8b:4f: 9b:62:ed:13:9e:56:24:8e:85:ba:c4:2d:5b:f3:77:fa:e9:f3: 96:30:6d:ed:c1:a4:2c:f5:e6:2a:fb:f8:0b:e0:bc:40:ae:28: 37:92:24:a5:2e:a8:98:96:f2:48:b7:5e:83:d8:01:e2:be:b3: cb:47:71:f2:57:ed:22:ee:54:f1:f0:a7:b0:86:9e:76:29:f0: 84:71:af:4e:9a:3b:a8:17:4f:d8:dc:df:b6:eb:c8:c4:cd:a1: 51:5b:36:f7:ca:5e:4f:48:79:50:d9:9e:5c:06:e9:0a:16:08: fb:af:f7:34:c7:25:35:cd:45:d5:e8:2c:55:13:ac:52:9f:d9: b3:8c:63:74:e7:93:f5:ba:35:2b:d5:21:8c:1a:45:fd:85:5f: 4a:ad:9f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEc6VM4kZeumMpyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGNkZGExODUtZGEzOS00YTVmLWFhZDItZDcxZTViY2FlNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNmrHKAf1VLP52v/vjG5nKQXnYVTeA4jVCx5 vT8qjGpLnWHbzgLlmIzEsQfPmjRxyfiY05iVzR7gS3Mfh6zmZmM4UbxjWNVRLB52 kJGs6VnArqkLaAFD1JEoGs1irgTcVKFxWsZXfflmwCjFSnqzVZBzf7Zc0IZEam6w qyeO1JKYXKzRzunvVinMZH6Z99zHgA0UeCB8Rb2Uxqm1gEb78DG//sNPAH5LGT20 DtbcQfZoVtV0+JUCHq/saGgMH2F2UwQVJaJmJzjcEEuJrJaBiAwSKewA3iypIqpV Frxu/v2M2qScvOOH4YjRITXrkdyoDMQ25AZnrByy8HeZW3crrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqPv5ASmVNDYRhvPoW0fxln5NrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvNTdlYjdjOGYtMWRlMi0z YjAwLTljOWItYjI4MTM2ZGE3YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmh6MXj4AaumzrPR0hPLL0kX14HXa3GYKlIN/RYyo/BlCM9khlUPkFQ p4B8GwxPEbAuA09PQ+U5ThEOYf5jX/n36w/0Kngez7mOZe5/mZv4lgcNO5tsa6J6 b8RVMPf55+1eEseATv3OsgmLT5ti7ROeViSOhbrELVvzd/rp85Ywbe3BpCz15ir7 +AvgvECuKDeSJKUuqJiW8ki3XoPYAeK+s8tHcfJX7SLuVPHwp7CGnnYp8IRxr06a O6gXT9jc37bryMTNoVFbNvfKXk9IeVDZnlwG6QoWCPuv9zTHJTXNRdXoLFUTrFKf 2bOMY3Tnk/W6NSvVIYwaRf2FX0qtn/o= -----END CERTIFICATE-----Generated at Mon Oct 20 07:40:46 2025 by rpki-client