$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/8c53c682-edea-34a9-ab01-a770b8030d5c.roa File: 8c53c682-edea-34a9-ab01-a770b8030d5c.roa (raw, json) Hash identifier: W7Q+a+qELFkOQQ5J+F9gvtI3P63Z79XfuBNWU00CopA= Subject key identifier: 33:39:28:B5:9B:F7:16:C5:B8:89:A1:37:B0:00:30:55:09:78:B7:88 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584B0A116341CF6DEA273B83EF00 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/8c53c682-edea-34a9-ab01-a770b8030d5c.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 156.70.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:63:41:cf:6d:ea:27:3b:83:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=884aa82c-589e-4f77-857e-8bfb4da60059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:52:f8:b4:a8:59:58:df:31:08:15:99:3a: cb:bc:b6:6b:76:26:73:30:2b:d9:2d:42:70:7d:fd: ab:02:43:73:e0:27:78:e6:29:ba:2a:c7:69:71:eb: d1:ed:2b:ee:6d:0f:ed:fa:9d:4c:c9:5a:6b:27:10: da:8d:e4:4c:5d:f6:a6:3e:91:74:ae:70:23:e3:20: 64:a2:70:02:12:cc:f3:07:43:2b:df:9f:2d:01:5d: b0:f2:1e:f4:34:09:ce:2e:5f:68:84:9e:eb:b1:37: e1:81:69:59:54:e4:e7:83:9a:e8:94:e7:6c:f7:0b: f1:3b:ab:8e:e4:59:31:56:63:98:dc:f2:ee:a2:44: 05:39:89:5e:81:44:03:9c:9a:c9:79:19:fe:d9:bc: 78:61:a6:7c:71:b5:83:1d:e9:7d:02:b6:20:c4:00: fb:06:a0:f6:b1:6b:16:1a:36:67:30:f2:a1:a5:a5: 75:64:aa:c6:93:e8:e8:f2:ef:a3:66:0c:1d:8f:16: 16:a9:18:be:3c:94:fa:33:18:e3:94:8a:26:fd:29: d0:2d:02:1b:78:5f:47:8a:76:3e:8f:a1:9c:7e:d1: 47:4a:14:ce:47:f1:90:ea:d3:8c:90:b8:fb:72:5e: c4:6e:c1:ce:89:05:da:dd:2c:ec:ee:4b:a5:6a:99: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:39:28:B5:9B:F7:16:C5:B8:89:A1:37:B0:00:30:55:09:78:B7:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/8c53c682-edea-34a9-ab01-a770b8030d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 156.70.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5c:6c:94:1c:7b:85:7d:eb:9e:18:99:b4:47:ec:58:1d:5c: c9:56:8f:b1:8a:fa:01:fd:98:2a:ce:9c:f3:c2:f2:fc:08:aa: a3:da:cf:cd:16:84:31:c0:ec:b6:99:b4:47:bd:a3:2f:be:ab: 14:31:70:18:96:e4:fb:e6:a2:d1:c1:3f:72:36:6e:b7:27:48: 71:98:ca:99:fc:f0:81:b2:f7:ec:37:04:f0:f4:d8:6f:f2:a6: c0:32:f9:e9:2f:1b:8b:8a:8c:02:bb:b7:67:71:0a:35:8e:9c: 2a:45:e4:e6:29:bd:7f:8b:da:76:e8:16:7e:f9:5f:39:59:99: c3:be:42:96:a6:39:00:7a:9d:af:26:19:38:fb:13:aa:e6:94: 4c:0e:7c:e8:69:6e:c3:52:49:6e:b6:3f:67:77:d9:07:72:d0: 13:61:15:01:8c:e7:a3:72:7e:63:56:10:65:fc:0c:54:1a:22: 53:b4:56:a4:0a:38:9a:4e:16:9b:49:17:4c:27:2b:90:26:d4: 56:cb:ec:c7:53:98:41:80:be:94:3a:f3:0a:15:0f:bd:de:9e: 26:91:7c:51:b0:ac:44:81:31:96:7f:43:e2:44:b4:02:f0:fb: fd:36:36:ab:67:53:04:bb:39:be:5c:b9:26:ba:d1:b1:62:8e: 20:aa:80:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWNBz23qJzuD7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ODg0YWE4MmMtNTg5ZS00Zjc3LTg1N2UtOGJmYjRkYTYwMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLJS+LSoWVjfMQgVmTrLvLZrdiZzMCvZLUJw ff2rAkNz4Cd45im6KsdpcevR7SvubQ/t+p1MyVprJxDajeRMXfamPpF0rnAj4yBk onACEszzB0Mr358tAV2w8h70NAnOLl9ohJ7rsTfhgWlZVOTng5rolOds9wvxO6uO 5FkxVmOY3PLuokQFOYlegUQDnJrJeRn+2bx4YaZ8cbWDHel9ArYgxAD7BqD2sWsW GjZnMPKhpaV1ZKrGk+jo8u+jZgwdjxYWqRi+PJT6MxjjlIom/SnQLQIbeF9HinY+ j6GcftFHShTOR/GQ6tOMkLj7cl7EbsHOiQXa3Szs7kulapmpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM5KLWb9xbFuImhN7AAMFUJeLeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvOGM1M2M2ODItZWRlYS0z NGE5LWFiMDEtYTc3MGI4MDMwZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlcbJQce4V9654YmbRH7FgdXMlWj7GK+gH9mCrOnPPC8vwIqqPaz80W hDHA7LaZtEe9oy++qxQxcBiW5PvmotHBP3I2brcnSHGYypn88IGy9+w3BPD02G/y psAy+ekvG4uKjAK7t2dxCjWOnCpF5OYpvX+L2nboFn75XzlZmcO+QpamOQB6na8m GTj7E6rmlEwOfOhpbsNSSW62P2d32Qdy0BNhFQGM56NyfmNWEGX8DFQaIlO0VqQK OJpOFptJF0wnK5Am1FbL7MdTmEGAvpQ68woVD73eniaRfFGwrESBMZZ/Q+JEtALw +/02NqtnUwS7Ob5cuSa60bFijiCqgE8= -----END CERTIFICATE-----Generated at Mon Sep 15 18:05:42 2025 by rpki-client