$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa File: cf09a183-7514-346f-a223-607c0b53d3ec.roa (raw, json) Hash identifier: p8JlqoIZjs0/SUmnB+/RlJmY2BMsai+R0aKMAbpUbg0= Subject key identifier: 3C:22:9D:1B:44:50:22:10:6F:0E:8D:63:F1:24:4A:DA:0E:07:52:D9 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584AD7D150C3CEE87D21BC00F840 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:50:c3:ce:e8:7d:21:bc:00:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=9688d6f6-7500-4126-ae80-edd1632bbc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:45:14:7a:e4:e9:4d:97:1c:67:70:4d:84:50: 2c:c2:f1:4b:1a:09:66:13:b9:4e:b5:8f:ed:06:ee: bf:d0:09:3c:77:01:61:b9:ab:f0:78:a8:4e:eb:29: c3:fd:c2:f4:6c:25:9f:05:1a:e0:71:fb:fb:25:b9: 64:3b:2b:84:7b:00:75:ab:b7:d0:42:df:69:a2:ab: 57:a6:09:8a:0c:1f:6b:58:bf:8d:58:7e:34:1d:d0: 3f:5e:b4:1e:92:dd:90:b7:dc:f2:c4:34:d9:5d:32: bb:39:b9:8c:cc:6c:02:f0:89:49:16:32:db:6a:7a: 1a:6e:19:d4:4a:40:64:72:c0:fa:b1:cb:8e:58:92: 01:b6:1b:32:1f:2a:df:48:a3:2c:f2:39:43:8c:0b: 40:73:c5:ed:1b:21:57:01:f2:57:dd:31:8e:16:9e: 5b:70:22:fa:d1:ca:49:30:73:15:a0:be:0b:ff:76: 5a:58:45:cb:3c:7c:37:aa:83:74:e9:6f:f2:31:05: c5:01:e7:69:49:6a:3a:c0:32:4e:3d:ec:4f:5a:58: 19:43:46:87:88:47:87:fc:0e:9d:63:c5:b2:c6:7a: 26:0e:ca:08:9f:f9:77:70:38:8f:55:0b:14:48:78: aa:c6:1a:66:99:1d:4a:92:36:97:64:b3:0c:37:b8: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:9D:1B:44:50:22:10:6F:0E:8D:63:F1:24:4A:DA:0E:07:52:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:66:a6:58:74:fd:4d:d8:e1:ce:40:80:bb:ba:8f:d2:2f:0f: 24:74:22:24:ef:29:e5:b5:b5:6b:76:9b:42:3f:eb:b2:3c:d2: 53:e8:30:f6:15:fa:82:e3:39:f7:b1:62:99:57:28:4a:fb:68: 0f:2d:d6:e4:40:ec:b8:53:70:28:ff:d1:11:d4:29:1c:d8:34: ba:ef:71:cf:ec:66:e6:88:5d:e3:da:2a:d9:3a:5f:7e:00:76: 6e:a1:56:dd:d4:65:d1:fc:8e:ee:c1:3b:04:c2:59:05:09:3d: 64:81:0b:73:f0:51:bf:be:8c:94:39:df:4b:53:34:bd:db:bc: b9:3b:a3:3f:30:ea:5b:83:49:a0:f8:40:79:f9:4a:38:f6:86: 5d:68:2b:58:9d:5c:bf:2c:16:e3:7a:fa:53:48:31:a9:a1:b1: 72:c7:05:93:a5:84:ee:f8:49:14:5f:b1:9e:ae:5c:13:59:fa: 8f:28:46:60:42:80:7c:80:53:95:8a:a2:ec:4c:b2:c4:f4:c8: 0d:16:eb:b8:de:9a:1f:55:dd:c6:fb:2e:eb:0c:75:2d:f9:6b: fe:9e:14:94:4e:26:10:e7:31:cc:a8:31:32:94:1f:87:6d:d4: 79:c0:44:f2:de:d9:6e:56:fd:9f:b2:50:05:94:a8:dc:a8:77: 84:70:26:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VDDzuh9IbwA+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OTY4OGQ2ZjYtNzUwMC00MTI2LWFlODAtZWRkMTYzMmJiYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UUUeuTpTZccZ3BNhFAswvFLGglmE7lOtY/t Bu6/0Ak8dwFhuavweKhO6ynD/cL0bCWfBRrgcfv7JblkOyuEewB1q7fQQt9poqtX pgmKDB9rWL+NWH40HdA/XrQekt2Qt9zyxDTZXTK7ObmMzGwC8IlJFjLbanoabhnU SkBkcsD6scuOWJIBthsyHyrfSKMs8jlDjAtAc8XtGyFXAfJX3TGOFp5bcCL60cpJ MHMVoL4L/3ZaWEXLPHw3qoN06W/yMQXFAedpSWo6wDJOPexPWlgZQ0aHiEeH/A6d Y8WyxnomDsoIn/l3cDiPVQsUSHiqxhpmmR1KkjaXZLMMN7gIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwinRtEUCIQbw6NY/EkStoOB1LZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2YwOWExODMtNzUxNC0z NDZmLWEyMjMtNjA3YzBiNTNkM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBmplh0/U3Y4c5AgLu6j9IvDyR0IiTvKeW1tWt2m0I/67I80lPoMPYV +oLjOfexYplXKEr7aA8t1uRA7LhTcCj/0RHUKRzYNLrvcc/sZuaIXePaKtk6X34A dm6hVt3UZdH8ju7BOwTCWQUJPWSBC3PwUb++jJQ530tTNL3bvLk7oz8w6luDSaD4 QHn5Sjj2hl1oK1idXL8sFuN6+lNIMamhsXLHBZOlhO74SRRfsZ6uXBNZ+o8oRmBC gHyAU5WKouxMssT0yA0W67jemh9V3cb7LusMdS35a/6eFJROJhDnMcyoMTKUH4dt 1HnARPLe2W5W/Z+yUAWUqNyod4RwJtY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:47 2025 by rpki-client