$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa File: 2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa (raw, json) Hash identifier: zIyCylgyXW6hdykWymHoHCw48NBuw//Ilos1oPgvhm0= Subject key identifier: 09:4B:E7:86:24:1E:D6:58:47:BE:DD:7D:6B:F2:0D:A9:AF:D6:6A:97 Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F4328584B79BCBFAC72D6A3881ACCAC00 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 15191 IP address blocks: 198.135.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bf:ac:72:d6:a3:88:1a:cc:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=3c9a2567-1f48-4d02-9ac5-d496f192990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:eb:2e:07:14:24:87:ed:f1:af:33:a7:1e: 0b:5a:9d:46:09:d7:94:d4:0c:3f:b0:aa:99:3e:6a: 51:0e:72:ae:d2:0c:01:e9:8a:d4:4c:3e:50:f1:d9: e7:3b:6e:b6:4a:dc:12:17:47:95:6a:45:a9:e6:8c: 4d:88:be:54:57:ce:01:2f:44:ba:c1:ca:7d:fe:f2: 28:2b:db:9b:51:94:5d:8d:b2:b8:8f:2a:44:4c:95: a0:9e:b6:7a:92:c7:8a:a5:cc:32:ba:0f:ea:cf:2b: 8c:86:e2:e3:57:97:70:90:63:ba:67:a0:74:7b:3e: e0:98:b1:48:2e:13:a4:b5:6a:6a:df:ff:68:c5:1b: 46:52:d9:a2:7d:5d:13:3d:1c:a8:89:a7:bf:9c:fb: 88:f9:2a:9b:dc:b4:36:b4:01:3a:95:33:e9:57:3c: 88:23:56:49:aa:41:fc:7a:61:4c:ff:73:9e:a7:14: 4d:8f:82:08:47:7d:40:29:ac:f9:b8:a5:a0:2a:35: 24:e3:b9:5b:44:08:33:53:5c:66:6a:4e:3a:d6:56: 45:c4:da:8c:5a:b9:fe:73:fc:f1:48:10:07:6f:71: 0a:3c:16:90:f0:00:0b:d0:59:96:1a:fa:19:c3:3c: 2d:e6:84:fe:9a:55:57:23:26:b7:97:f8:d4:62:1c: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4B:E7:86:24:1E:D6:58:47:BE:DD:7D:6B:F2:0D:A9:AF:D6:6A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.135.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:dd:4f:94:84:47:ce:70:e2:96:1c:b9:bd:b9:3a:3a:8a:cd: f3:6a:e8:27:b5:72:83:54:cc:46:f2:84:4f:1d:78:66:c1:67: e0:a5:d8:b2:d6:11:a4:8f:c7:86:3c:92:cd:cb:91:74:7c:60: f7:e6:a8:f2:ce:c2:9a:9c:3a:f1:65:ab:9a:75:d9:4e:d7:37: 94:f8:d5:d6:5f:1d:63:21:c3:d6:65:9e:1d:9d:75:cc:0f:cf: 27:3c:b6:1f:d0:c5:06:26:fb:c8:37:69:6d:94:31:17:33:9c: f1:6e:1c:fa:85:b5:e3:37:90:6d:84:71:51:b6:d2:92:40:61: a6:c5:52:f8:5a:a1:0b:71:d1:7d:09:f9:4f:e1:a4:39:da:e5: 12:8c:a2:4f:91:a6:5f:41:59:a6:67:ef:45:36:f5:17:63:46: 5d:e4:e4:93:9b:5d:3c:fd:24:81:0b:47:15:2b:e1:35:21:be: fc:3a:63:fa:15:98:9d:5f:54:94:a3:c6:18:02:df:d7:ba:1c: 92:d8:20:39:cf:a5:02:74:73:da:15:05:3d:f5:b9:f4:e6:fc: 1e:30:39:78:d8:f8:07:32:17:b7:96:4e:81:db:e3:62:cc:b4: 65:76:2e:d5:b4:ea:33:1d:19:19:f3:27:39:09:e0:b5:05:b7: b6:e3:fb:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL+sctajiBrMrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk M2M5YTI1NjctMWY0OC00ZDAyLTlhYzUtZDQ5NmYxOTI5OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+7rLgcUJIft8a8zpx4LWp1GCdeU1Aw/sKqZ PmpRDnKu0gwB6YrUTD5Q8dnnO262StwSF0eVakWp5oxNiL5UV84BL0S6wcp9/vIo K9ubUZRdjbK4jypETJWgnrZ6kseKpcwyug/qzyuMhuLjV5dwkGO6Z6B0ez7gmLFI LhOktWpq3/9oxRtGUtmifV0TPRyoiae/nPuI+Sqb3LQ2tAE6lTPpVzyII1ZJqkH8 emFM/3OepxRNj4IIR31AKaz5uKWgKjUk47lbRAgzU1xmak461lZFxNqMWrn+c/zx SBAHb3EKPBaQ8AAL0FmWGvoZwzwt5oT+mlVXIya3l/jUYhwETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlL54YkHtZYR77dfWvyDamv1mqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMjA4OGY1YmItN2M2My0z YzI2LWE4YzQtZDlkZGUxNWE3M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxoecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLdT5SER85w4pYcub25OjqKzfNq6Ce1coNUzEbyhE8deGbBZ+Cl2LLW EaSPx4Y8ks3LkXR8YPfmqPLOwpqcOvFlq5p12U7XN5T41dZfHWMhw9Zlnh2ddcwP zyc8th/QxQYm+8g3aW2UMRcznPFuHPqFteM3kG2EcVG20pJAYabFUvhaoQtx0X0J +U/hpDna5RKMok+Rpl9BWaZn70U29RdjRl3k5JObXTz9JIELRxUr4TUhvvw6Y/oV mJ1fVJSjxhgC39e6HJLYIDnPpQJ0c9oVBT31ufTm/B4wOXjY+AcyF7eWToHb42LM tGV2LtW06jMdGRnzJzkJ4LUFt7bj+2I= -----END CERTIFICATE-----Generated at Tue Oct 14 15:16:28 2025 by rpki-client