$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c38614d5-5630-31bf-bed3-75b125896d0a.roa File: c38614d5-5630-31bf-bed3-75b125896d0a.roa (raw, json) Hash identifier: Hh0duN8oegWYzSQi+EEJ0SFrzoMwhgDAPTaVkVT6HeE= Subject key identifier: 52:CA:1C:D5:EC:70:72:B9:DC:AC:EA:99:7F:08:2A:E8:21:49:ED:FA Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B01B983C5CD2D3C2095B43380 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c38614d5-5630-31bf-bed3-75b125896d0a.roa Signing time: Thu 28 Aug 2025 13:17:18 +0000 ROA not before: Thu 28 Aug 2025 13:17:18 +0000 ROA not after: Wed 26 Nov 2025 14:17:18 +0000 asID: 16504 IP address blocks: 156.70.200.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b9:83:c5:cd:2d:3c:20:95:b4:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Aug 28 13:17:18 2025 GMT Not After : Nov 26 14:17:18 2025 GMT Subject: CN=1c62ab90-d5bf-448d-b245-4e8130f23d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:ad:0c:f1:f2:de:9e:b3:a8:fb:4b:4b:9e: c5:04:16:ba:d0:a9:7a:c0:ab:9f:12:11:73:95:0d: ff:a8:87:6a:a3:10:7e:33:15:b2:fe:b8:59:d4:63: f4:8c:55:92:63:00:c8:bb:01:d7:31:08:96:a6:a7: 45:ad:c0:3e:7b:a2:d0:be:f3:fc:1d:5d:98:9c:e7: e8:be:98:32:15:61:96:ae:36:de:0d:13:ab:db:2b: b1:35:33:81:70:c7:b2:9c:8c:19:0c:d6:ca:c4:57: d7:e7:c7:62:b5:8f:cc:d9:36:c5:f5:2c:b5:b9:01: af:d1:4b:5c:de:a0:2a:0d:d7:03:9c:c8:3e:05:fc: 98:47:12:06:89:e1:6b:af:6b:4e:92:5e:62:ca:04: d2:c9:bc:1f:68:fa:c5:ee:cf:94:d3:74:9e:89:08: cc:06:53:5b:3f:29:cc:d0:2f:d0:de:b9:91:d1:35: 98:4f:1f:73:99:a8:2b:f1:ed:9b:81:9c:9f:e4:0b: aa:d6:7e:cb:b4:55:65:77:7a:dd:1c:0e:8a:53:d1: 6a:96:3a:b6:df:45:8e:5b:7a:79:d5:1a:bc:7f:0c: 6c:fa:c9:68:fa:1e:92:16:4d:ef:8b:f9:ed:20:b4: 18:ab:4c:54:1e:65:11:2e:ed:a0:79:ae:6a:e6:a9: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CA:1C:D5:EC:70:72:B9:DC:AC:EA:99:7F:08:2A:E8:21:49:ED:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c38614d5-5630-31bf-bed3-75b125896d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e0:41:02:3c:b1:98:50:02:e8:f7:a7:34:98:e3:64:11:a7: 36:1a:7c:50:93:57:7b:9e:14:aa:c1:6a:f9:1a:03:be:c9:52: 59:47:16:a4:7d:cf:5f:43:a5:95:30:b3:f2:43:9c:73:c1:02: 8b:88:8b:80:6e:7e:7c:f9:55:a0:ed:65:b8:2f:2c:8d:8b:48: 77:5d:95:21:8a:8d:0f:dc:c3:d2:0c:a5:8d:1d:71:5e:21:b8: 17:86:56:44:7e:4c:e9:28:68:9c:67:ee:8e:3b:f0:9a:de:9e: 11:ed:1c:7c:99:d5:03:4b:2d:60:5c:7a:bf:67:73:d4:4c:df: 2e:18:64:a1:e2:7d:36:e4:cd:26:ac:b0:20:0c:7d:3a:a1:b4: d0:1c:04:ee:9e:40:df:93:90:3f:6b:58:2d:97:2c:da:0e:3a: bc:26:8d:29:29:bf:0b:d3:36:0d:3e:7c:b0:8a:38:ab:8e:f2: 39:95:eb:76:fc:3e:4a:18:8f:db:c0:6c:94:ba:94:74:8e:a4: d6:05:e0:a1:a2:f5:59:97:8e:41:90:63:31:33:7b:1d:89:b1: df:b9:ef:c7:f4:dc:bc:6a:5d:83:2d:a3:47:55:3d:bf:48:f7: 2d:40:9c:cd:3d:82:d4:62:1f:81:93:85:ea:58:be:d9:ce:e7: 68:57:73:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBuYPFzS08IJW0M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDgyODEzMTcxOFoXDTI1MTEyNjE0MTcxOFowLzEtMCsGA1UEAxMk MWM2MmFiOTAtZDViZi00NDhkLWIyNDUtNGU4MTMwZjIzZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bytDPHy3p6zqPtLS57FBBa60Kl6wKufEhFz lQ3/qIdqoxB+MxWy/rhZ1GP0jFWSYwDIuwHXMQiWpqdFrcA+e6LQvvP8HV2YnOfo vpgyFWGWrjbeDROr2yuxNTOBcMeynIwZDNbKxFfX58ditY/M2TbF9Sy1uQGv0Utc 3qAqDdcDnMg+BfyYRxIGieFrr2tOkl5iygTSybwfaPrF7s+U03SeiQjMBlNbPynM 0C/Q3rmR0TWYTx9zmagr8e2bgZyf5Auq1n7LtFVld3rdHA6KU9Fqljq230WOW3p5 1Rq8fwxs+slo+h6SFk3vi/ntILQYq0xUHmURLu2gea5q5qk/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLKHNXscHK53KzqmX8IKughSe36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvYzM4NjE0ZDUtNTYzMC0z MWJmLWJlZDMtNzViMTI1ODk2ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnEbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrgQQI8sZhQAuj3pzSY42QRpzYafFCTV3ueFKrBavkaA77JUllHFqR9 z19DpZUws/JDnHPBAouIi4Bufnz5VaDtZbgvLI2LSHddlSGKjQ/cw9IMpY0dcV4h uBeGVkR+TOkoaJxn7o478JrenhHtHHyZ1QNLLWBcer9nc9RM3y4YZKHifTbkzSas sCAMfTqhtNAcBO6eQN+TkD9rWC2XLNoOOrwmjSkpvwvTNg0+fLCKOKuO8jmV63b8 PkoYj9vAbJS6lHSOpNYF4KGi9VmXjkGQYzEzex2Jsd+578f03LxqXYMto0dVPb9I 9y1AnM09gtRiH4GThepYvtnO52hXc5g= -----END CERTIFICATE-----Generated at Mon Sep 8 10:35:19 2025 by rpki-client