$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a3c7b443-32de-3f4c-955d-1b3a7f625428.roa File: a3c7b443-32de-3f4c-955d-1b3a7f625428.roa (raw, json) Hash identifier: IjyvxYLRZXlmx/SmLPvjzTM0ijyZk7vH1kKEKVKbGqo= Subject key identifier: FF:2C:18:D2:C3:F7:32:AF:F0:3A:B0:9C:C2:FC:1D:51:3A:C2:65:DC Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B3A0EF664EF9BF37B0165F340 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a3c7b443-32de-3f4c-955d-1b3a7f625428.roa Signing time: Wed 17 Sep 2025 17:34:44 +0000 ROA not before: Wed 17 Sep 2025 17:34:44 +0000 ROA not after: Tue 16 Dec 2025 18:34:44 +0000 asID: 198949 IP address blocks: 156.70.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:0e:f6:64:ef:9b:f3:7b:01:65:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 17 17:34:44 2025 GMT Not After : Dec 16 18:34:44 2025 GMT Subject: CN=4d999588-eb6f-446a-a8a5-825bd0c72efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:dd:7e:58:d8:c1:13:c1:b1:81:cd:42:1f: a4:7c:d0:32:6e:70:c9:dc:8b:f1:40:5d:70:ed:88: a8:5f:e2:2d:41:61:90:b5:2a:5a:48:aa:0c:49:f0: 38:56:1b:25:65:7f:cc:53:06:a1:4d:28:08:6c:fd: 9e:1c:6f:51:7e:d5:d3:be:05:32:14:1e:29:06:69: 21:ef:65:22:71:b8:49:75:c3:84:57:9b:92:d9:ac: 98:f8:91:da:80:5c:66:12:c8:e0:e1:32:19:5e:7c: 85:6c:1f:b1:a5:5d:13:8d:74:c8:84:9f:d8:6c:d9: 0a:4d:8d:fd:83:b4:00:ef:c3:30:b3:87:8f:23:6c: db:4f:47:e0:58:34:3d:8b:ee:89:a0:2a:19:ac:e8: c7:f2:34:38:98:e5:98:28:52:c3:c3:db:b7:55:76: 0e:0e:b9:65:34:c7:93:7e:1d:a9:c2:a4:8a:ac:1f: b2:e9:5e:de:d6:f6:fd:aa:2a:36:c2:f3:d0:cc:c8: a6:32:d6:8b:58:38:03:71:e1:3f:62:6f:f7:92:75: f2:70:56:75:5a:56:3a:e3:37:c4:b6:bc:e1:63:27: 6a:11:0c:3e:ca:11:be:32:ed:d1:15:bb:29:37:18: 84:15:94:b0:5b:16:61:1d:14:14:7e:54:1a:73:da: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:18:D2:C3:F7:32:AF:F0:3A:B0:9C:C2:FC:1D:51:3A:C2:65:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a3c7b443-32de-3f4c-955d-1b3a7f625428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:26:00:05:2d:0a:95:a8:f5:b7:21:a1:e0:6d:05:91:36:bc: 97:dc:a1:f7:c5:43:58:2f:c6:fd:45:82:6b:ce:73:c2:b7:78: 3c:1f:b9:ff:e1:d2:c3:cc:6d:c2:1e:3e:71:72:15:ba:09:e5: 7c:99:1c:13:dc:f7:db:89:48:aa:be:fc:cd:cf:c6:64:93:ed: 00:f3:2f:45:f2:c8:ac:41:90:88:39:59:fe:0b:6a:e8:21:78: e0:89:81:99:22:c9:c8:9b:3a:05:2e:c0:d4:e6:49:d8:d9:67: 13:a6:ad:ed:f9:e1:99:b8:c1:df:f8:98:3c:e3:72:af:00:19: 93:7f:3a:8a:34:31:6d:d2:6f:94:73:20:73:84:35:47:56:e8: eb:e6:7a:c8:9f:42:00:43:ec:ac:e0:8c:b7:33:a9:f3:75:e3: 3b:a4:82:f3:7f:0a:e4:40:02:13:0c:2e:10:df:3b:72:71:d3: ed:7e:74:75:46:35:0e:4f:4b:65:a9:9d:a2:e2:fb:66:1a:06: 67:1c:1d:c8:51:b4:d6:9f:6c:d8:b9:7c:15:05:d8:b1:8b:d0: da:dc:5a:0c:3a:59:92:1b:e0:30:6d:5f:3c:52:a9:02:31:8d: 8c:c9:e8:5e:b0:9f:db:c6:5b:42:bc:41:18:9d:df:7a:12:d7: d6:14:b3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs6DvZk75vzewFl80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDkxNzE3MzQ0NFoXDTI1MTIxNjE4MzQ0NFowLzEtMCsGA1UEAxMk NGQ5OTk1ODgtZWI2Zi00NDZhLWE4YTUtODI1YmQwYzcyZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEzdfljYwRPBsYHNQh+kfNAybnDJ3IvxQF1w 7YioX+ItQWGQtSpaSKoMSfA4VhslZX/MUwahTSgIbP2eHG9RftXTvgUyFB4pBmkh 72UicbhJdcOEV5uS2ayY+JHagFxmEsjg4TIZXnyFbB+xpV0TjXTIhJ/YbNkKTY39 g7QA78Mws4ePI2zbT0fgWDQ9i+6JoCoZrOjH8jQ4mOWYKFLDw9u3VXYODrllNMeT fh2pwqSKrB+y6V7e1vb9qio2wvPQzMimMtaLWDgDceE/Ym/3knXycFZ1WlY64zfE trzhYydqEQw+yhG+Mu3RFbspNxiEFZSwWxZhHRQUflQac9oDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8sGNLD9zKv8DqwnML8HVE6wmXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvYTNjN2I0NDMtMzJkZS0z ZjRjLTk1NWQtMWIzYTdmNjI1NDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcmAAUtCpWo9bchoeBtBZE2vJfcoffFQ1gvxv1FgmvOc8K3eDwfuf/h 0sPMbcIePnFyFboJ5XyZHBPc99uJSKq+/M3PxmST7QDzL0XyyKxBkIg5Wf4Laugh eOCJgZkiycibOgUuwNTmSdjZZxOmre354Zm4wd/4mDzjcq8AGZN/Ooo0MW3Sb5Rz IHOENUdW6OvmesifQgBD7KzgjLczqfN14zukgvN/CuRAAhMMLhDfO3Jx0+1+dHVG NQ5PS2WpnaLi+2YaBmccHchRtNafbNi5fBUF2LGL0NrcWgw6WZIb4DBtXzxSqQIx jYzJ6F6wn9vGW0K8QRid33oS19YUsz8= -----END CERTIFICATE-----Generated at Fri Sep 19 04:17:31 2025 by rpki-client