$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa File: 04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa (raw, json) Hash identifier: 4Tc+/jhPTFM3wnXow832ypUdoHQJksuSY7KqQqick5k= Subject key identifier: 10:A4:D2:94:99:81:66:B4:12:9E:9B:4B:5C:CC:F5:E6:BC:80:A0:7A Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584ACE0BB093C0D4B9F413682680 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 2914 IP address blocks: 155.254.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:b0:93:c0:d4:b9:f4:13:68:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=4de1d4f0-e8be-4808-9366-176e1b4843ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:6c:90:e0:9f:44:b7:a6:a4:56:59:86:1f: e2:53:14:27:5c:86:ac:d1:c5:96:6e:3c:be:d8:f6: d1:f2:0a:d1:ef:5c:7d:1e:27:60:f2:f3:7f:d3:3e: 58:d7:58:fd:f8:9b:19:28:ab:36:e6:66:d7:5b:8e: a0:20:a1:cc:87:6e:91:d2:79:94:28:67:60:21:25: 4f:6f:4d:e0:58:c0:af:5e:ad:e4:10:5b:dc:e8:79: 1f:a0:37:98:bc:34:c4:aa:9f:20:4d:be:42:a9:6f: e9:63:f8:87:d4:81:ee:82:58:18:fc:00:8c:02:d0: ca:36:b5:34:80:75:42:29:89:3d:67:ad:59:87:cd: 87:e4:c1:d0:a5:32:95:88:31:9a:41:6a:6a:79:5f: eb:03:3f:0d:c4:3a:f3:4a:3c:d9:24:34:c6:07:91: 8f:9a:db:80:8f:41:ce:22:64:b4:d3:b8:45:6b:c9: c5:2b:03:fe:64:92:b8:73:2c:df:cc:79:c9:c8:3b: 82:35:01:d9:fa:0e:6d:a2:31:ff:36:8d:9e:ff:d0: 69:f6:eb:90:1d:70:37:64:66:07:f3:70:34:75:f0: eb:14:8c:7a:58:dd:34:7b:a2:34:d0:ee:0b:c2:2a: 64:5f:8a:10:06:59:b8:2e:78:40:f1:54:51:e5:a7: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:D2:94:99:81:66:B4:12:9E:9B:4B:5C:CC:F5:E6:BC:80:A0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 155.254.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d5:eb:40:1a:77:3a:3f:b2:36:48:06:d0:d6:c9:5d:fa:2e: e1:49:b3:04:e6:e6:a8:72:53:60:22:d3:61:69:60:1a:2b:66: f7:36:54:84:df:90:61:5d:e5:f3:a1:3e:f9:61:49:48:18:07: f1:b1:13:d9:e6:5f:6e:bc:65:9b:e0:d9:03:53:d9:c1:f4:de: 34:6c:7b:fd:6b:6a:5f:b7:03:66:75:fb:91:14:2a:8e:c1:8a: 57:25:be:21:1a:db:f2:e6:09:22:04:19:a7:73:39:53:e8:06: 0d:64:aa:6c:85:58:3b:45:fc:27:78:43:22:35:eb:fe:41:1f: e5:fc:c6:a2:98:07:d8:76:f3:56:22:10:4c:6f:7b:d6:3f:29: 30:ba:30:db:39:00:f1:72:e6:c7:da:da:31:8c:42:ef:a6:8f: 3b:30:cf:d3:21:27:6f:c6:bd:a0:6b:b0:a1:b8:5f:0d:a9:8c: 1e:5c:ff:f7:83:24:68:e6:71:fc:90:5e:50:c6:b6:52:c6:f7: cc:33:1e:59:47:80:c5:fb:d4:2a:3a:6b:70:5e:63:d3:0c:18: 35:d4:38:e7:23:80:38:b9:c8:cd:9a:dd:fd:bc:6b:82:1f:45: 24:67:21:15:16:6f:69:8b:83:84:e7:10:09:c5:7a:75:f9:34: c5:15:99:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC7CTwNS59BNoJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NGRlMWQ0ZjAtZThiZS00ODA4LTkzNjYtMTc2ZTFiNDg0M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWNskOCfRLempFZZhh/iUxQnXIas0cWWbjy+ 2PbR8grR71x9Hidg8vN/0z5Y11j9+JsZKKs25mbXW46gIKHMh26R0nmUKGdgISVP b03gWMCvXq3kEFvc6HkfoDeYvDTEqp8gTb5CqW/pY/iH1IHuglgY/ACMAtDKNrU0 gHVCKYk9Z61Zh82H5MHQpTKViDGaQWpqeV/rAz8NxDrzSjzZJDTGB5GPmtuAj0HO ImS007hFa8nFKwP+ZJK4cyzfzHnJyDuCNQHZ+g5tojH/No2e/9Bp9uuQHXA3ZGYH 83A0dfDrFIx6WN00e6I00O4LwipkX4oQBlm4LnhA8VRR5afgyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCk0pSZgWa0Ep6bS1zM9ea8gKB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvMDRmM2FkYmItN2ZjNS0z MWVmLTlkMzctMGE4YTc4ZTY4OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm/7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/V60Aadzo/sjZIBtDWyV36LuFJswTm5qhyU2Ai02FpYBorZvc2VITf kGFd5fOhPvlhSUgYB/GxE9nmX268ZZvg2QNT2cH03jRse/1ral+3A2Z1+5EUKo7B ilclviEa2/LmCSIEGadzOVPoBg1kqmyFWDtF/Cd4QyI16/5BH+X8xqKYB9h281Yi EExve9Y/KTC6MNs5APFy5sfa2jGMQu+mjzswz9MhJ2/GvaBrsKG4Xw2pjB5c//eD JGjmcfyQXlDGtlLG98wzHllHgMX71Co6a3BeY9MMGDXUOOcjgDi5yM2a3f28a4If RSRnIRUWb2mLg4TnEAnFenX5NMUVmeQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:18 2025 by rpki-client