$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa File: d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa (raw, json) Hash identifier: PuWUv92FVy2uM5FFwkYPPLoGWw74RKYXTXPMGYRj6Nc= Subject key identifier: A1:BE:80:86:C2:D5:72:4A:32:F9:2F:70:BA:BD:F6:60:71:CB:9D:84 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584AFC3156BACEF66385708EB680 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa Signing time: Tue 26 Aug 2025 13:43:53 +0000 ROA not before: Tue 26 Aug 2025 13:43:53 +0000 ROA not after: Mon 24 Nov 2025 14:43:53 +0000 asID: 16504 IP address blocks: 157.96.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:31:56:ba:ce:f6:63:85:70:8e:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Aug 26 13:43:53 2025 GMT Not After : Nov 24 14:43:53 2025 GMT Subject: CN=42b39f2d-c0d6-4a26-a422-22cdfc04ebeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:f5:3f:68:00:7e:9a:aa:72:c2:73:38:92: 83:71:b8:c5:8b:a7:d9:74:6e:d0:23:7e:dc:ad:48: 1b:b2:72:b4:13:f8:c8:37:e8:2f:8d:0e:17:f7:cb: 6a:c7:d1:4e:23:b5:c3:1b:b6:8b:ca:ae:fb:44:af: 08:7b:03:f9:26:72:f5:af:1b:66:2a:8d:9b:8c:16: 2f:5e:40:99:0c:ff:68:da:6f:40:19:e2:ad:5f:1f: 56:fc:62:33:3d:37:57:98:da:50:a3:90:06:a6:84: 18:0a:8c:71:d3:6e:e8:de:e0:28:ac:7a:52:21:63: 49:78:b3:c1:ee:2d:bc:bd:40:cf:7f:cd:c2:c9:d8: 0c:38:14:c0:98:ba:08:5c:bf:d4:a0:2f:0e:b6:d0: 39:44:30:bc:86:0e:3e:0a:d7:60:8e:ed:74:81:1f: 9b:31:0b:de:f4:dd:b0:97:8d:33:52:a9:cb:63:fc: 3c:3b:5c:68:5f:a6:02:c0:db:cc:0b:de:ad:db:6e: 0f:39:e6:31:8f:84:be:ca:d2:44:5c:8f:4b:a9:4f: 01:98:c5:79:82:48:0e:d3:a9:30:34:d8:0c:35:17: 29:3e:04:27:cd:0d:5f:e7:78:3d:88:be:6b:33:dd: df:6d:12:ce:17:6a:fa:5c:93:7d:66:96:92:85:0c: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:80:86:C2:D5:72:4A:32:F9:2F:70:BA:BD:F6:60:71:CB:9D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 157.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:dc:29:c1:2f:04:b9:a0:19:9a:09:4b:4b:ed:48:31:0c:8b: 57:8a:a5:da:f8:a2:fb:27:bc:0d:b0:9f:90:fe:1a:ed:64:fb: b4:d3:bd:73:40:f4:34:06:e1:20:ec:e9:8e:82:4f:3f:1c:64: 5b:0a:e3:45:3d:f6:3e:ae:d4:ae:88:dd:00:a3:c0:c8:39:0a: d4:cf:01:bd:4f:32:14:3e:3b:07:32:8b:7f:15:a5:67:b6:d4: 68:3d:22:c1:b7:30:53:0b:1a:6e:c0:69:57:1c:8e:83:54:42: 29:16:5a:87:f5:5d:e3:ae:fa:ea:42:60:c2:85:35:28:e5:09: c6:7c:c3:64:cb:53:68:e5:8e:51:ae:3a:50:ac:27:89:15:78: 7a:27:d2:36:83:12:51:ce:c6:35:44:51:63:3c:e7:ee:28:b3: 02:40:96:ee:72:e7:bd:de:7d:21:4c:a1:12:23:1f:31:83:c9: 70:26:dc:78:ab:59:a7:77:7f:54:5b:9a:8b:46:58:d6:6c:4c: 28:18:db:95:19:e6:ba:88:fd:b6:25:a7:f0:b7:35:be:d7:a0: 05:f4:8d:31:5d:a0:53:27:16:f8:6d:44:9e:6f:b7:e9:ec:0b: b6:dd:64:68:6a:ba:53:c1:8b:0b:d3:29:a6:ac:71:70:c0:e8: 46:fe:6e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8MVa6zvZjhXCOtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDgyNjEzNDM1M1oXDTI1MTEyNDE0NDM1M1owLzEtMCsGA1UEAxMk NDJiMzlmMmQtYzBkNi00YTI2LWE0MjItMjJjZGZjMDRlYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph71P2gAfpqqcsJzOJKDcbjFi6fZdG7QI37c rUgbsnK0E/jIN+gvjQ4X98tqx9FOI7XDG7aLyq77RK8IewP5JnL1rxtmKo2bjBYv XkCZDP9o2m9AGeKtXx9W/GIzPTdXmNpQo5AGpoQYCoxx027o3uAorHpSIWNJeLPB 7i28vUDPf83CydgMOBTAmLoIXL/UoC8OttA5RDC8hg4+Ctdgju10gR+bMQve9N2w l40zUqnLY/w8O1xoX6YCwNvMC96t224POeYxj4S+ytJEXI9LqU8BmMV5gkgO06kw NNgMNRcpPgQnzQ1f53g9iL5rM93fbRLOF2r6XJN9ZpaShQx1dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG+gIbC1XJKMvkvcLq99mBxy52EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvZDkxOTFkMGQtNzZkMy0z Y2YzLTk0ODgtMWFkYTFiYzhkZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnWCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTcKcEvBLmgGZoJS0vtSDEMi1eKpdr4ovsnvA2wn5D+Gu1k+7TTvXNA 9DQG4SDs6Y6CTz8cZFsK40U99j6u1K6I3QCjwMg5CtTPAb1PMhQ+Owcyi38VpWe2 1Gg9IsG3MFMLGm7AaVccjoNUQikWWof1XeOu+upCYMKFNSjlCcZ8w2TLU2jljlGu OlCsJ4kVeHon0jaDElHOxjVEUWM85+4oswJAlu5y573efSFMoRIjHzGDyXAm3Hir Wad3f1RbmotGWNZsTCgY25UZ5rqI/bYlp/C3Nb7XoAX0jTFdoFMnFvhtRJ5vt+ns C7bdZGhqulPBiwvTKaascXDA6Eb+bgY= -----END CERTIFICATE-----Generated at Mon Sep 8 10:33:28 2025 by rpki-client