$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa File: 7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa (raw, json) Hash identifier: 1ZluoJV81wq/sNH0/e6zLd8QD2GlO7VnXppuqCYYjFA= Subject key identifier: 4A:C5:56:E2:6B:56:62:5F:01:C8:11:F1:CD:88:9B:E6:17:65:7D:21 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584B21CC2D2995261CC2AB8EEB10 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 398573 IP address blocks: 151.161.0.0/16 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2d:29:95:26:1c:c2:ab:8e:eb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=1e51b99d-8e97-4f4a-af28-4ed25bb21ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:27:85:6c:8e:dc:32:56:78:30:8d:b7:95: fc:67:be:95:98:39:0d:3f:7b:c3:b1:b8:2a:5a:41: 35:25:7d:65:b6:09:1c:60:9c:c9:fe:b7:12:42:fb: 7e:5d:23:fa:e3:a8:f1:f2:ad:d8:b3:33:49:19:74: 62:f6:38:1a:dc:dc:88:a9:23:3c:12:e1:0e:bb:c9: 5e:72:46:2b:12:dd:74:47:56:58:ae:ce:32:0a:92: b0:9f:0e:0a:97:8d:e1:7d:70:2b:16:ad:bb:1a:59: 5d:20:68:12:4e:27:7a:e6:a1:e5:c3:4d:94:28:30: b2:ab:bf:1f:fc:f0:f5:51:85:12:08:fe:34:88:c0: 37:48:98:14:f4:74:f5:51:23:f0:ec:ee:f9:32:8e: 75:b7:7d:99:b3:27:db:01:c1:05:0c:8d:74:12:bb: 81:ef:e8:5b:3d:a0:dc:e9:fc:6c:8e:9a:e8:21:43: 53:f5:43:e8:e2:41:1a:b6:b4:62:26:93:fe:cc:dc: 6b:72:6f:71:6d:c6:4a:9d:68:92:11:c2:05:4e:ef: df:4f:98:88:d0:25:b9:4d:e3:90:4e:eb:32:86:df: b0:c5:df:ba:88:ad:28:23:8c:63:7d:5e:b1:ca:b6: f2:9b:d5:94:92:79:af:78:46:e1:a7:e5:1a:42:70: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:56:E2:6B:56:62:5F:01:C8:11:F1:CD:88:9B:E6:17:65:7D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 151.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e8:37:f0:a9:ec:53:74:99:73:46:13:9d:6e:06:98:60:77: a1:b1:68:ad:8f:ed:56:33:33:0d:22:c4:42:d3:0b:bc:34:f6: 59:f6:4f:ca:2f:d9:52:7e:b6:55:0c:56:18:c6:b5:18:f6:52: 6d:09:99:7a:a2:48:3f:1a:0c:9f:19:50:ce:0e:7c:14:19:bd: d2:9e:f8:6a:95:64:c3:29:6b:67:ee:4b:58:02:b6:5f:9b:ad: 87:75:da:ec:59:57:7d:ad:59:56:10:37:81:bd:cd:91:e9:2a: 36:2c:3e:c8:d6:05:9e:91:60:87:d5:d4:b3:94:40:fa:b3:46: 0b:ce:11:c1:41:d3:87:da:e3:8c:91:d4:6f:45:e9:8f:f3:2d: 40:61:93:e6:f5:fa:41:ba:fd:1c:08:b1:48:5d:2a:f2:93:48: 67:38:08:db:1a:7f:16:aa:8f:b1:bc:f5:0b:48:1d:2b:44:5b: 59:ff:57:d5:5b:7c:b3:38:9c:35:61:21:3d:e9:bf:98:fd:f1: 13:8a:83:1d:78:e1:d8:68:41:97:ed:71:d0:07:a0:f4:2b:62: 2c:68:46:e4:9d:71:44:37:96:bf:34:0a:9c:37:02:3a:65:97: dd:83:6f:0e:cb:0c:80:41:bf:33:ef:6c:98:72:55:1e:10:84: 7b:39:6f:96 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEshzC0plSYcwquO6xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MWU1MWI5OWQtOGU5Ny00ZjRhLWFmMjgtNGVkMjViYjIxZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssknhWyO3DJWeDCNt5X8Z76VmDkNP3vDsbgq WkE1JX1ltgkcYJzJ/rcSQvt+XSP646jx8q3YszNJGXRi9jga3NyIqSM8EuEOu8le ckYrEt10R1ZYrs4yCpKwnw4Kl43hfXArFq27GlldIGgSTid65qHlw02UKDCyq78f /PD1UYUSCP40iMA3SJgU9HT1USPw7O75Mo51t32ZsyfbAcEFDI10EruB7+hbPaDc 6fxsjproIUNT9UPo4kEatrRiJpP+zNxrcm9xbcZKnWiSEcIFTu/fT5iI0CW5TeOQ Tusyht+wxd+6iK0oI4xjfV6xyrbym9WUknmveEbhp+UaQnA2XQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFErFVuJrVmJfAcgR8c2Im+YXZX0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvN2M0YjA5ZWMtNGVhYy0z YTNjLWI1YWYtODYzMzdhOTFmZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAl6EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlOg38KnsU3SZc0YTnW4GmGB3obForY/tVjMzDSLEQtMLvDT2WfZPyi/Z Un62VQxWGMa1GPZSbQmZeqJIPxoMnxlQzg58FBm90p74apVkwylrZ+5LWAK2X5ut h3Xa7FlXfa1ZVhA3gb3NkekqNiw+yNYFnpFgh9XUs5RA+rNGC84RwUHTh9rjjJHU b0Xpj/MtQGGT5vX6Qbr9HAixSF0q8pNIZzgI2xp/FqqPsbz1C0gdK0RbWf9X1Vt8 szicNWEhPem/mP3xE4qDHXjh2GhBl+1x0Aeg9CtiLGhG5J1xRDeWvzQKnDcCOmWX 3YNvDssMgEG/M+9smHJVHhCEezlvlg== -----END CERTIFICATE-----Generated at Fri Sep 19 19:42:41 2025 by rpki-client