$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57500894-421f-378e-9abd-71421e8d3c13.roa File: 57500894-421f-378e-9abd-71421e8d3c13.roa (raw, json) Hash identifier: gPGusdrr+13z4FRvla385u1PUXQKRQ543+G7L6PeP0k= Subject key identifier: D7:86:E8:AF:5B:56:D0:3B:BA:E4:8B:6E:4A:E2:20:31:6B:38:5A:C3 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584AFC44C872AB9CF8F058F81500 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57500894-421f-378e-9abd-71421e8d3c13.roa Signing time: Tue 26 Aug 2025 14:23:03 +0000 ROA not before: Tue 26 Aug 2025 14:23:03 +0000 ROA not after: Mon 24 Nov 2025 15:23:03 +0000 asID: 16504 IP address blocks: 156.70.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:44:c8:72:ab:9c:f8:f0:58:f8:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Aug 26 14:23:03 2025 GMT Not After : Nov 24 15:23:03 2025 GMT Subject: CN=4eafbb25-0df4-4fa1-99b4-48d285f13e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:17:d5:70:8f:c1:4d:09:73:96:86:12:20: 17:1b:73:43:66:56:1c:8c:e2:ba:b6:10:d7:15:f6: ac:3f:23:7b:48:f5:92:28:a4:bb:af:c1:95:e9:44: 91:f7:e0:f8:ca:e3:bd:fc:ee:bb:c9:43:61:d0:03: e5:40:e8:09:e3:a5:0d:9a:d7:f1:58:cd:6b:1a:cd: 8e:b9:9b:7f:46:47:01:45:2f:01:da:91:aa:1c:32: 25:e8:ce:97:73:5f:86:a6:b6:50:f8:4b:17:3a:06: 07:8d:58:f2:c0:7e:16:2d:54:db:86:df:ed:95:8c: 02:64:3b:86:c1:95:93:1e:64:0b:3d:34:a8:0e:e8: 83:7f:1f:69:08:64:96:85:5a:d7:a7:11:37:ff:c8: b9:cf:13:51:5b:0f:6e:80:5d:d7:f7:73:66:96:dd: 2d:f3:f0:90:22:9f:0b:92:74:19:4b:32:56:9d:fe: 5e:2e:ca:e5:e9:65:c1:63:54:83:13:d7:68:63:51: f9:4a:7b:15:6f:24:0e:a1:31:00:71:1e:ff:f7:35: e7:5e:78:03:4c:f2:11:0c:09:3f:06:0f:60:ca:77: ea:16:d9:7b:a0:48:99:d6:6e:42:84:d4:65:6f:83: b9:d1:0c:65:c1:1f:d2:51:8e:7f:84:19:3f:56:82: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:E8:AF:5B:56:D0:3B:BA:E4:8B:6E:4A:E2:20:31:6B:38:5A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57500894-421f-378e-9abd-71421e8d3c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d3:01:75:d2:df:25:63:09:54:af:90:52:1e:ec:da:b0:06: e9:31:49:b4:c5:da:f9:d0:80:c9:cf:3b:11:74:d8:dc:56:d9: 52:79:77:81:39:e8:4f:4f:f2:d3:b7:56:3a:82:3f:8d:a9:28: f0:dc:0d:a8:bc:e1:93:71:bb:56:19:f2:ba:1c:69:0d:dc:d2: d4:78:c2:1b:aa:5f:af:0e:e8:3e:c3:2a:f9:05:e6:2d:46:bc: 65:b5:f4:d1:f4:70:2c:27:52:1d:d4:d2:97:1d:e8:18:84:5f: f6:76:ec:44:4a:42:37:0f:d0:a3:0e:dd:c7:64:7a:3a:bf:84: bc:1f:3d:f5:a3:13:eb:95:fb:ea:5c:ad:48:40:62:5d:19:9c: 8e:42:a8:73:14:24:36:a3:ac:74:03:cb:41:a0:45:e4:cc:e3: 83:e9:c6:e5:62:35:84:ab:52:71:df:7e:15:ba:87:b8:52:80: 43:2b:26:ed:78:a1:3b:62:56:56:b3:89:26:fd:6f:e7:91:a6: cf:52:53:dc:a0:61:ab:c9:c9:65:a8:89:f9:a6:65:39:87:b1: e4:0f:9c:6f:f6:79:00:fd:95:61:cc:60:ce:c7:a6:b0:8a:51: 27:58:ac:b6:db:48:b1:c9:45:3c:80:61:64:1b:d3:12:33:e0: eb:0e:6e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8RMhyq5z48Fj4FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDgyNjE0MjMwM1oXDTI1MTEyNDE1MjMwM1owLzEtMCsGA1UEAxMk NGVhZmJiMjUtMGRmNC00ZmExLTk5YjQtNDhkMjg1ZjEzZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd0X1XCPwU0Jc5aGEiAXG3NDZlYcjOK6thDX FfasPyN7SPWSKKS7r8GV6USR9+D4yuO9/O67yUNh0APlQOgJ46UNmtfxWM1rGs2O uZt/RkcBRS8B2pGqHDIl6M6Xc1+GprZQ+EsXOgYHjVjywH4WLVTbht/tlYwCZDuG wZWTHmQLPTSoDuiDfx9pCGSWhVrXpxE3/8i5zxNRWw9ugF3X93Nmlt0t8/CQIp8L knQZSzJWnf5eLsrl6WXBY1SDE9doY1H5SnsVbyQOoTEAcR7/9zXnXngDTPIRDAk/ Bg9gynfqFtl7oEiZ1m5ChNRlb4O50QxlwR/SUY5/hBk/VoKiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeG6K9bVtA7uuSLbkriIDFrOFrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNTc1MDA4OTQtNDIxZi0z NzhlLTlhYmQtNzE0MjFlOGQzYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnEbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTTAXXS3yVjCVSvkFIe7NqwBukxSbTF2vnQgMnPOxF02NxW2VJ5d4E5 6E9P8tO3VjqCP42pKPDcDai84ZNxu1YZ8rocaQ3c0tR4whuqX68O6D7DKvkF5i1G vGW19NH0cCwnUh3U0pcd6BiEX/Z27ERKQjcP0KMO3cdkejq/hLwfPfWjE+uV++pc rUhAYl0ZnI5CqHMUJDajrHQDy0GgReTM44PpxuViNYSrUnHffhW6h7hSgEMrJu14 oTtiVlaziSb9b+eRps9SU9ygYavJyWWoifmmZTmHseQPnG/2eQD9lWHMYM7HprCK USdYrLbbSLHJRTyAYWQb0xIz4OsObjQ= -----END CERTIFICATE-----Generated at Mon Sep 8 10:35:26 2025 by rpki-client