$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa File: 867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa (raw, json) Hash identifier: nZkyiSQ3xbb+78s+nzZFj8hrs1GRSqKlsrZwiDfAQBY= Subject key identifier: 33:EA:7D:60:EE:E0:F5:89:12:8C:C5:95:1A:5E:5F:C5:A0:AD:10:BD Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584AE89125D139AD30A69A60FCC0 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:25:d1:39:ad:30:a6:9a:60:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=7267e6ea-0aa0-442c-8b3c-0dd335aaf0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:88:da:07:5b:5a:81:85:c3:e4:f5:f8:a8: 2e:af:42:df:d4:7c:0a:30:6b:50:2c:bf:97:9f:05: c3:ec:3d:98:a6:19:fd:15:db:e1:8b:b7:8f:2b:74: 12:30:05:f9:ba:ef:fe:a7:9d:d2:ea:a6:9c:28:0d: 7f:39:56:37:4f:0e:3d:7a:b7:b9:53:76:d5:16:02: 4a:7d:44:eb:e5:0d:d6:ce:6c:bb:94:04:62:dd:e4: fd:25:f7:c1:6f:52:79:75:ba:4a:f3:04:6f:5f:bb: a8:18:9e:a0:86:5e:ba:5f:ea:3c:d0:61:3d:7c:87: 6d:67:09:14:fc:f8:c5:bf:47:13:7a:55:43:b5:ca: a3:f6:9e:7e:e0:06:d9:40:52:09:4f:9a:3a:de:a7: 3f:db:0f:21:5d:35:af:a3:24:74:e9:13:c2:e2:17: 49:13:00:46:88:c0:e1:7a:39:9f:97:c4:90:58:b0: cb:41:e2:2f:fe:5e:1d:da:00:de:6d:3d:72:97:fb: 79:d9:42:aa:77:0d:f4:24:52:d0:3e:38:2f:40:4d: 22:3f:2b:f3:d8:8e:58:c4:59:4a:5a:b2:28:c5:44: 72:e5:e6:26:28:31:5e:e7:93:0e:cb:b5:a3:70:61: 88:78:bf:dd:3b:5e:fd:a8:ce:6f:3a:02:bc:52:13: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:7D:60:EE:E0:F5:89:12:8C:C5:95:1A:5E:5F:C5:A0:AD:10:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5b:08:b3:4f:a8:1f:b8:b2:a9:90:c7:e8:3e:93:ba:1a:f5: da:e8:6a:c5:5c:e7:2e:ed:8c:c7:17:1c:bc:ff:d8:56:07:dd: e1:ef:b3:df:ea:ba:9d:8a:8d:9f:aa:42:12:7a:86:97:73:9e: 31:af:85:48:b4:95:e7:33:fe:b8:bb:8f:07:3b:8c:59:31:85: e1:76:fc:56:89:1d:0a:93:5a:d3:e5:72:0a:d7:a6:4d:3d:3c: 31:60:ed:1f:7b:79:88:51:e8:3f:ac:c4:9e:37:f0:fa:a2:2a: a9:a5:a8:73:7e:0c:74:d6:f9:89:5e:ff:aa:43:e4:4b:f8:b4: 1e:86:be:c9:05:a5:59:52:65:1b:51:49:4d:74:f0:2f:9c:77: 58:e1:6c:bc:54:18:44:f4:76:07:22:4f:1d:60:00:f1:68:7d: 39:21:37:45:fe:44:07:b4:ac:18:99:33:43:f4:1a:b5:93:bd: c4:41:d1:98:0f:1d:db:54:7f:eb:9b:d0:54:cc:fc:a9:62:fc: 0e:01:fd:57:a3:8d:c3:e1:20:c8:f4:7c:fd:d7:b2:fb:75:ae: 70:05:48:90:af:58:97:c0:0e:fd:4a:2c:7c:0a:02:c9:20:ab: 73:83:ea:fe:6d:8a:12:fb:57:4e:0f:77:93:66:a5:44:f8:78: 3e:fd:66:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSXROa0wpppg/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzI2N2U2ZWEtMGFhMC00NDJjLThiM2MtMGRkMzM1YWFmMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiGI2gdbWoGFw+T1+Kgur0Lf1HwKMGtQLL+X nwXD7D2Yphn9Fdvhi7ePK3QSMAX5uu/+p53S6qacKA1/OVY3Tw49ere5U3bVFgJK fUTr5Q3Wzmy7lARi3eT9JffBb1J5dbpK8wRvX7uoGJ6ghl66X+o80GE9fIdtZwkU /PjFv0cTelVDtcqj9p5+4AbZQFIJT5o63qc/2w8hXTWvoyR06RPC4hdJEwBGiMDh ejmfl8SQWLDLQeIv/l4d2gDebT1yl/t52UKqdw30JFLQPjgvQE0iPyvz2I5YxFlK WrIoxURy5eYmKDFe55MOy7WjcGGIeL/dO179qM5vOgK8UhMzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPqfWDu4PWJEozFlRpeX8WgrRC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvODY3ZmZkMmMtMGYxYS0z OGY1LTkyZDItNDJmMTk0ZTAyYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENbCLNPqB+4sqmQx+g+k7oa9droasVc5y7tjMcXHLz/2FYH3eHvs9/q up2KjZ+qQhJ6hpdznjGvhUi0lecz/ri7jwc7jFkxheF2/FaJHQqTWtPlcgrXpk09 PDFg7R97eYhR6D+sxJ438PqiKqmlqHN+DHTW+Yle/6pD5Ev4tB6GvskFpVlSZRtR SU108C+cd1jhbLxUGET0dgciTx1gAPFofTkhN0X+RAe0rBiZM0P0GrWTvcRB0ZgP HdtUf+ub0FTM/Kli/A4B/VejjcPhIMj0fP3Xsvt1rnAFSJCvWJfADv1KLHwKAskg q3OD6v5tihL7V04Pd5NmpUT4eD79Ztk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:06 2025 by rpki-client