$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa File: 1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa (raw, json) Hash identifier: Zf31ym1eGc2bLM8+J/ZHPGRKiIijXMRWJZxq2Iyudfw= Subject key identifier: 16:37:C5:AE:64:FA:60:F7:B4:F4:32:F8:C6:3B:B7:4A:37:79:04:F5 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B0236C674B631FC3170D2A980 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa Signing time: Thu 28 Aug 2025 17:29:41 +0000 ROA not before: Thu 28 Aug 2025 17:29:41 +0000 ROA not after: Wed 26 Nov 2025 18:29:41 +0000 asID: 394796 IP address blocks: 156.70.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:36:c6:74:b6:31:fc:31:70:d2:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Aug 28 17:29:41 2025 GMT Not After : Nov 26 18:29:41 2025 GMT Subject: CN=4fcf99a7-582d-496e-bf5a-00642cccfa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:4a:30:0e:85:aa:51:53:ff:1e:21:ab:f5: 4f:53:d8:9e:9b:82:04:e5:23:d9:f0:43:f7:39:72: f4:c9:67:e3:fe:de:e3:5d:b3:90:f4:37:37:15:fb: 67:ec:e3:18:10:35:c1:ab:bb:de:6d:9f:55:b6:d8: 54:17:12:65:3b:04:23:7a:b1:4a:ac:09:34:bb:96: a8:e6:b7:72:5b:f1:cd:62:f4:34:0c:e7:b4:05:ae: 5a:b7:26:d3:70:be:f1:8e:bf:51:fa:75:50:f0:f7: 8d:e8:87:f4:02:ac:87:6a:9a:eb:d8:fb:86:84:43: 82:e7:ac:fa:14:1e:b5:f4:0f:f1:7d:b0:9c:4b:1c: 60:a1:ee:76:a1:5c:d2:3d:5c:50:be:c0:69:93:8a: 9c:df:d3:49:0a:ad:f5:68:83:f6:04:51:57:d9:8b: 0c:b8:83:99:a3:5b:4b:72:04:e7:38:02:f8:7d:49: 14:44:af:d3:24:f1:ab:15:7c:fc:67:5b:0e:ee:0c: 05:69:c1:d7:da:b8:a0:68:ca:e8:a3:e9:c3:37:44: c2:ae:bd:6a:a6:ad:87:9e:bf:e4:6e:b9:e1:e5:02: 3e:b9:f3:21:3e:f8:87:4f:f2:ae:7c:67:86:fa:8c: e2:b0:1e:3d:74:9e:d9:1c:da:d4:7e:16:c2:0f:ea: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:37:C5:AE:64:FA:60:F7:B4:F4:32:F8:C6:3B:B7:4A:37:79:04:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:b6:e6:a5:bc:c5:46:88:ff:d6:8e:35:b5:c5:cd:a8:8c:ae: 0f:62:c9:a2:f6:94:ae:05:df:89:1d:33:dc:98:01:6b:87:81: 7e:1a:6e:70:8e:e4:f4:20:b1:88:e2:d9:73:bb:ba:cb:85:5e: 4e:95:d5:3a:e8:ad:94:46:99:f2:05:b7:69:d1:03:42:e8:5b: b3:d1:c5:de:07:79:59:57:72:61:59:99:ed:cf:f3:d1:23:73: 79:b0:f8:60:75:08:6b:a7:a2:0e:5f:54:e0:73:6c:1a:30:55: 71:0e:a3:eb:48:33:92:46:9e:85:68:43:4d:b2:e6:16:97:ab: 10:3d:e8:ca:7e:c5:05:f4:15:c8:b7:60:e5:64:54:78:91:88: 7b:82:7a:88:62:cd:4f:9b:6a:40:a2:0a:98:43:be:6c:84:0d: 32:a8:e1:90:8b:22:00:a9:ce:02:39:04:26:de:86:f5:8e:49: 0e:10:69:c1:86:08:4f:f4:9e:bd:47:ac:03:15:ae:4c:ff:2a: 9b:a9:f4:ee:4b:42:ad:c1:0c:f7:72:0c:04:1e:30:2e:5f:45: 38:33:d8:bf:5a:30:12:90:53:97:57:21:a0:bb:99:ee:77:9a: 55:88:f8:f4:52:a8:35:aa:eb:68:eb:48:85:9e:37:16:11:d1: eb:6c:71:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsCNsZ0tjH8MXDSqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDgyODE3Mjk0MVoXDTI1MTEyNjE4Mjk0MVowLzEtMCsGA1UEAxMk NGZjZjk5YTctNTgyZC00OTZlLWJmNWEtMDA2NDJjY2NmYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0dKMA6FqlFT/x4hq/VPU9iem4IE5SPZ8EP3 OXL0yWfj/t7jXbOQ9Dc3Fftn7OMYEDXBq7vebZ9VtthUFxJlOwQjerFKrAk0u5ao 5rdyW/HNYvQ0DOe0Ba5atybTcL7xjr9R+nVQ8PeN6If0AqyHaprr2PuGhEOC56z6 FB619A/xfbCcSxxgoe52oVzSPVxQvsBpk4qc39NJCq31aIP2BFFX2YsMuIOZo1tL cgTnOAL4fUkURK/TJPGrFXz8Z1sO7gwFacHX2rigaMroo+nDN0TCrr1qpq2Hnr/k brnh5QI+ufMhPviHT/KufGeG+ozisB49dJ7ZHNrUfhbCD+rFzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY3xa5k+mD3tPQy+MY7t0o3eQT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvMWIyMTlhMzUtODBlMC0z ZTY1LThkODEtNmI3NjM5ZGI2ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnEaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANS25qW8xUaI/9aONbXFzaiMrg9iyaL2lK4F34kdM9yYAWuHgX4abnCO 5PQgsYji2XO7usuFXk6V1TrorZRGmfIFt2nRA0LoW7PRxd4HeVlXcmFZme3P89Ej c3mw+GB1CGunog5fVOBzbBowVXEOo+tIM5JGnoVoQ02y5haXqxA96Mp+xQX0Fci3 YOVkVHiRiHuCeohizU+bakCiCphDvmyEDTKo4ZCLIgCpzgI5BCbehvWOSQ4QacGG CE/0nr1HrAMVrkz/Kpup9O5LQq3BDPdyDAQeMC5fRTgz2L9aMBKQU5dXIaC7me53 mlWI+PRSqDWq62jrSIWeNxYR0etscQE= -----END CERTIFICATE-----Generated at Mon Sep 8 10:34:30 2025 by rpki-client