$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa File: 146ef9ae-f845-3565-9b2c-e21a984d126d.roa (raw, json) Hash identifier: vHkRa1Our+u290EGlGT3fA5WK5PJ8RQcsDvgTcstq70= Subject key identifier: E6:86:C7:4F:95:D9:27:67:9E:D4:D5:B0:CD:35:78:23:E2:A6:86:5D Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F4328584B715CACA4F70FC9F6D4BD4980 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 53407 IP address blocks: 158.120.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ac:a4:f7:0f:c9:f6:d4:bd:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=22e8ed19-7523-4a35-84e9-d7648f30281f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:d2:48:7b:0c:2e:98:5c:fc:c2:6e:a7:2b: 5d:7e:ec:8f:be:f3:96:ef:0f:1d:4e:52:3b:aa:90: 78:53:a4:1e:2d:d8:5e:22:2f:06:33:67:dd:af:71: a4:80:d1:16:6c:33:fb:ae:5a:f2:86:57:55:79:5a: 81:24:97:f5:72:cb:ec:86:80:df:09:67:1e:e3:96: 27:77:35:3c:00:d2:74:9e:55:d3:ff:d9:a5:fe:42: 21:de:2c:18:05:02:e8:8e:5b:88:50:1d:02:61:e6: 81:0e:7d:79:c8:ba:66:b0:54:b2:f6:99:d3:d6:76: ce:d2:eb:d4:ed:72:6b:e3:ff:1a:ac:de:bb:aa:9d: bf:c4:93:44:30:49:38:7d:65:13:0c:d9:a6:44:f8: 6c:0e:86:a6:11:eb:9c:49:5b:9d:08:c8:5c:12:6e: 0b:b1:ba:1c:bb:16:8e:e6:7e:38:07:78:05:a0:e8: 43:05:02:a2:a7:c6:75:cb:80:19:ef:fa:ab:10:2d: b3:72:5f:4e:a7:3a:1b:da:33:32:59:8e:18:52:16: 7b:b2:c5:f7:78:e0:a3:f4:95:e5:91:33:5f:70:03: 1d:96:b5:f7:c8:c5:d6:d0:13:6f:dd:6f:63:bd:3d: a6:61:4f:03:aa:00:06:4e:f0:5b:98:1b:8d:95:62: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:86:C7:4F:95:D9:27:67:9E:D4:D5:B0:CD:35:78:23:E2:A6:86:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:24:47:13:25:ba:b5:b6:44:c4:64:56:1b:2d:54:6c:1a:9a: 99:59:66:27:5d:e5:8a:40:11:8d:70:86:56:0f:01:ac:68:00: d4:2e:02:f8:5c:0d:19:82:ca:da:52:73:f9:6f:6e:76:4e:b2: 2a:bd:12:5c:74:d7:79:b2:a5:d0:2e:0a:a6:13:bb:bc:fd:42: a1:92:ab:1d:21:8b:a2:ae:13:12:4f:8e:34:12:98:e6:c9:44: 71:db:05:0c:b9:03:0f:b7:de:ca:e8:9d:0e:af:25:55:5d:76: 04:4c:64:2e:f9:9e:72:9b:1f:31:8d:9b:fe:ac:82:c1:3a:28: 2c:40:47:de:0b:0e:ed:a9:14:40:9c:e7:0a:01:7c:fb:b3:a0: d5:ce:79:35:91:8f:94:cb:00:2d:30:af:ad:8c:83:4f:0f:bd: 68:2c:f3:3c:5f:b1:28:20:91:7d:27:9d:20:b5:5c:99:02:ab: 55:34:9d:12:c2:af:b3:6d:ec:04:79:aa:e1:c8:fd:05:e3:4c: 62:17:30:89:d2:9c:da:19:36:2e:08:94:54:f6:d5:b1:78:84: 14:86:d5:52:5b:39:bd:4e:fb:a1:0f:88:c3:0f:6e:13:b3:7e: 57:7f:fb:4a:a8:39:91:62:05:49:33:30:ba:de:04:dc:7a:e7: 76:36:69:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKyk9w/J9tS9SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjJlOGVkMTktNzUyMy00YTM1LTg0ZTktZDc2NDhmMzAyODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNTSSHsMLphc/MJupytdfuyPvvOW7w8dTlI7 qpB4U6QeLdheIi8GM2fdr3GkgNEWbDP7rlryhldVeVqBJJf1csvshoDfCWce45Yn dzU8ANJ0nlXT/9ml/kIh3iwYBQLojluIUB0CYeaBDn15yLpmsFSy9pnT1nbO0uvU 7XJr4/8arN67qp2/xJNEMEk4fWUTDNmmRPhsDoamEeucSVudCMhcEm4LsbocuxaO 5n44B3gFoOhDBQKip8Z1y4AZ7/qrEC2zcl9Opzob2jMyWY4YUhZ7ssX3eOCj9JXl kTNfcAMdlrX3yMXW0BNv3W9jvT2mYU8DqgAGTvBbmBuNlWKwHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaGx0+V2SdnntTVsM01eCPipoZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMTQ2ZWY5YWUtZjg0NS0z NTY1LTliMmMtZTIxYTk4NGQxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4kRxMlurW2RMRkVhstVGwamplZZidd5YpAEY1whlYPAaxoANQuAvhc DRmCytpSc/lvbnZOsiq9Elx013mypdAuCqYTu7z9QqGSqx0hi6KuExJPjjQSmObJ RHHbBQy5Aw+33sronQ6vJVVddgRMZC75nnKbHzGNm/6sgsE6KCxAR94LDu2pFECc 5woBfPuzoNXOeTWRj5TLAC0wr62Mg08PvWgs8zxfsSggkX0nnSC1XJkCq1U0nRLC r7Nt7AR5quHI/QXjTGIXMInSnNoZNi4IlFT21bF4hBSG1VJbOb1O+6EPiMMPbhOz fld/+0qoOZFiBUkzMLreBNx653Y2afQ= -----END CERTIFICATE-----Generated at Sat Oct 11 05:20:20 2025 by rpki-client