$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa File: 4947827a-81e3-3c67-8152-d53e2abb4dab.roa (raw, json) Hash identifier: Xno3+2zofzF6vI2eh4235MIJcI9McyROvp4Fyp0lLoM= Subject key identifier: 09:22:3F:D9:1B:FF:A4:66:BC:5E:B3:38:46:90:59:5C:05:E4:1E:6C Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584B25FC3EA76AE6BFAEDBC9DA20 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 46450 IP address blocks: 158.106.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3e:a7:6a:e6:bf:ae:db:c9:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=ed6f0f22-eabd-44e4-b60c-b16c182c5b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:9b:3d:b6:a1:48:90:bb:d6:e7:7e:00:2d: fb:aa:d9:51:b4:62:c4:21:f7:1f:60:19:c3:7b:68: 40:93:82:f5:53:64:ad:31:7c:35:ad:bb:bc:22:35: 77:18:e8:e9:bd:63:6c:14:e0:08:75:ff:d9:03:28: 2c:8c:43:34:8a:ee:51:09:95:50:35:8f:66:31:6a: 42:a6:4c:87:d5:df:a2:a3:40:6e:e4:36:96:a7:d1: 54:4c:d7:f7:c1:e6:08:7e:0e:ed:c7:c8:23:2e:10: 84:20:ca:c2:3e:58:e1:bd:f3:b7:67:72:79:1e:ed: 49:71:67:ba:51:ba:24:da:50:a9:58:39:24:04:cc: 93:96:a9:f4:95:8a:4a:db:99:64:11:5c:17:e5:70: 39:bb:64:85:1b:e7:8a:92:b3:24:05:51:f8:67:04: e9:04:c1:48:f7:e1:0a:51:e3:86:f9:1e:60:b4:66: cf:a6:35:89:73:51:4d:a1:fe:e0:a8:fc:2c:19:80: af:aa:33:aa:96:29:30:28:35:11:cf:a0:4b:70:53: 7f:c1:39:0d:3d:09:c7:aa:18:e8:bb:3a:39:95:7b: 60:8c:89:ac:0f:66:38:b0:e2:8e:c3:16:c7:22:12: ae:b4:37:ae:75:2a:c6:66:17:50:e5:78:b6:3a:10: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:22:3F:D9:1B:FF:A4:66:BC:5E:B3:38:46:90:59:5C:05:E4:1E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 158.106.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:17:17:67:33:cc:1c:d0:15:32:03:56:ba:70:56:09:28:50: 2a:5a:df:5a:67:2a:fe:f6:2a:75:b5:2d:1a:ed:11:1f:fa:42: c7:32:78:7c:6b:19:56:30:ed:00:33:0f:11:a7:14:05:be:e8: 5a:3a:63:90:6d:76:cf:a6:98:ea:73:fb:6e:6a:1d:69:0b:79: bc:bd:15:3a:2a:b7:43:c3:ef:53:55:fa:83:9f:3d:be:a4:0f: 9b:af:dc:95:df:60:16:b4:0d:dc:e5:1a:d5:e8:ee:01:ee:c4: 10:08:58:33:94:83:61:cc:85:fc:3e:49:d0:60:e9:4d:d3:fe: 0c:01:b8:b6:9f:bb:fc:92:e5:91:8f:68:ec:d1:ab:99:93:e8: 32:fe:71:a9:f5:f8:e2:7f:3d:d6:04:7d:53:c2:61:f3:73:aa: 95:75:fa:95:1c:1f:5b:bb:c9:f5:14:8f:73:6a:e2:44:0c:e5: 80:06:55:8e:b9:25:07:c3:da:88:af:bb:57:d7:5e:83:cf:6f: a1:2c:89:65:f7:19:26:ed:39:ff:d7:6e:b5:70:ec:b6:d7:d4: 79:fa:e3:38:c0:39:90:7b:36:90:bb:a8:0e:cc:f4:33:1e:45: 8e:cf:13:40:85:03:92:55:3f:a0:3d:f1:3a:76:c5:b9:45:c6: 31:ce:77:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/D6naua/rtvJ2iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWQ2ZjBmMjItZWFiZC00NGU0LWI2MGMtYjE2YzE4MmM1YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI2bPbahSJC71ud+AC37qtlRtGLEIfcfYBnD e2hAk4L1U2StMXw1rbu8IjV3GOjpvWNsFOAIdf/ZAygsjEM0iu5RCZVQNY9mMWpC pkyH1d+io0Bu5DaWp9FUTNf3weYIfg7tx8gjLhCEIMrCPljhvfO3Z3J5Hu1JcWe6 Ubok2lCpWDkkBMyTlqn0lYpK25lkEVwX5XA5u2SFG+eKkrMkBVH4ZwTpBMFI9+EK UeOG+R5gtGbPpjWJc1FNof7gqPwsGYCvqjOqlikwKDURz6BLcFN/wTkNPQnHqhjo uzo5lXtgjImsD2Y4sOKOwxbHIhKutDeudSrGZhdQ5Xi2OhAXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkiP9kb/6RmvF6zOEaQWVwF5B5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvNDk0NzgyN2EtODFlMy0z YzY3LTgxNTItZDUzZTJhYmI0ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwXF2czzBzQFTIDVrpwVgkoUCpa31pnKv72KnW1LRrtER/6QscyeHxr GVYw7QAzDxGnFAW+6Fo6Y5Btds+mmOpz+25qHWkLeby9FToqt0PD71NV+oOfPb6k D5uv3JXfYBa0DdzlGtXo7gHuxBAIWDOUg2HMhfw+SdBg6U3T/gwBuLafu/yS5ZGP aOzRq5mT6DL+can1+OJ/PdYEfVPCYfNzqpV1+pUcH1u7yfUUj3Nq4kQM5YAGVY65 JQfD2oivu1fXXoPPb6EsiWX3GSbtOf/XbrVw7LbX1Hn64zjAOZB7NpC7qA7M9DMe RY7PE0CFA5JVP6A98Tp2xblFxjHOdzw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:25 2025 by rpki-client