$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/24464489-5d7c-3c5a-98f3-22f732005dc1.roa File: 24464489-5d7c-3c5a-98f3-22f732005dc1.roa (raw, json) Hash identifier: ivqQRH9PJbiBKzhymsq3Nx+8e1VPUSPXS+dRIw4wxLc= Subject key identifier: A2:B3:1F:65:E5:62:1C:21:80:44:29:4B:B7:64:A7:C9:46:CD:93:DB Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584AC7111F599E63BAF1353D6F80 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/24464489-5d7c-3c5a-98f3-22f732005dc1.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 157.239.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1f:59:9e:63:ba:f1:35:3d:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=0ae10207-8198-439f-a34b-77f331924dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9c:97:2d:8f:11:9f:94:95:49:eb:fc:72:9a: b2:3f:8e:1a:8e:18:43:66:a1:54:e7:d1:02:79:ac: 37:cf:5d:e2:2d:e7:84:bf:e8:75:f5:bd:bf:c4:0d: f7:86:e6:1b:3e:ee:8d:31:dd:b1:9a:3e:7f:0e:a2: 03:1f:97:43:c9:f7:37:9a:af:c7:34:65:e4:69:33: 07:74:1d:dd:de:bd:74:06:66:81:00:04:12:a9:c7: b3:da:b2:3f:69:17:7c:16:01:9f:23:36:b6:11:0f: 41:c0:95:6c:68:f9:da:42:78:8e:bb:c8:e2:47:08: 0d:45:66:d1:02:db:01:7a:0b:bb:74:1d:39:d7:79: 00:8e:02:02:c5:9d:20:09:69:26:18:95:15:55:b6: 1a:46:54:c2:60:d1:b4:fc:a1:da:71:c7:73:38:28: 7c:ef:6d:57:7b:07:b3:1e:8f:a2:b0:09:13:2c:03: 18:40:0c:7f:f5:fc:67:88:09:74:6c:e6:7d:b2:60: bd:16:6d:24:d8:11:60:47:2f:bc:4e:e8:d6:53:e2: 64:9c:8b:fc:7c:a9:ff:50:f3:32:56:56:c8:f3:1c: 3a:a6:34:dd:34:75:53:e5:ca:8d:1b:cd:dd:e5:81: 25:09:32:24:3d:09:bd:3c:bd:2a:a6:1a:45:24:3d: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:1F:65:E5:62:1C:21:80:44:29:4B:B7:64:A7:C9:46:CD:93:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/24464489-5d7c-3c5a-98f3-22f732005dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:96:b6:22:34:28:c1:47:74:e3:62:cc:9a:82:1c:e4:0d:fa: d1:19:2a:f2:73:70:15:c7:f3:7e:26:d8:9f:1b:36:07:bd:17: 6e:60:97:7d:96:05:7f:d3:f4:a0:67:f2:b9:8d:ed:f7:19:61: 9a:ae:5b:29:33:b9:b1:4d:6f:13:52:1d:32:e7:c5:a8:cd:4a: 87:35:33:7e:3a:9d:2c:5b:0a:ad:b5:0f:05:fe:03:e8:d9:df: cb:79:90:b5:9e:b7:6a:5e:d1:d6:ff:2b:58:23:4a:c9:7e:95: e6:5d:21:c9:70:79:d4:e0:22:1d:46:88:36:fe:0e:a3:71:39: bd:7a:cc:5e:f8:51:2d:70:89:4d:39:5b:09:4a:05:a9:53:d4: 65:fc:ef:5d:e2:a6:ec:fc:9a:a7:60:74:fa:c9:a1:fd:f2:f6: 88:3d:f4:b6:04:15:b7:45:89:c3:70:0f:a1:e2:5c:1e:87:dd: af:44:49:df:fc:2f:d8:b8:4e:97:93:fd:4a:11:99:55:f9:01: 51:ec:fd:ba:d5:66:12:17:f1:59:93:10:fd:e7:5f:b9:bd:74: 78:7d:4b:3e:a5:30:16:85:bf:ba:65:c5:a4:fc:88:ff:6d:cf: 93:c8:d9:98:14:08:89:7d:b5:4e:3c:a7:eb:2b:f5:a2:1c:63: 12:e7:dc:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHER9ZnmO68TU9b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MGFlMTAyMDctODE5OC00MzlmLWEzNGItNzdmMzMxOTI0ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZyXLY8Rn5SVSev8cpqyP44ajhhDZqFU59EC eaw3z13iLeeEv+h19b2/xA33huYbPu6NMd2xmj5/DqIDH5dDyfc3mq/HNGXkaTMH dB3d3r10BmaBAAQSqcez2rI/aRd8FgGfIza2EQ9BwJVsaPnaQniOu8jiRwgNRWbR AtsBegu7dB0513kAjgICxZ0gCWkmGJUVVbYaRlTCYNG0/KHaccdzOCh8721Xewez Ho+isAkTLAMYQAx/9fxniAl0bOZ9smC9Fm0k2BFgRy+8TujWU+JknIv8fKn/UPMy VlbI8xw6pjTdNHVT5cqNG83d5YElCTIkPQm9PL0qphpFJD3HowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKzH2XlYhwhgEQpS7dkp8lGzZPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMjQ0NjQ0ODktNWQ3Yy0z YzVhLTk4ZjMtMjJmNzMyMDA1ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWWtiI0KMFHdONizJqCHOQN+tEZKvJzcBXH834m2J8bNge9F25gl32W BX/T9KBn8rmN7fcZYZquWykzubFNbxNSHTLnxajNSoc1M346nSxbCq21DwX+A+jZ 38t5kLWet2pe0db/K1gjSsl+leZdIclwedTgIh1GiDb+DqNxOb16zF74US1wiU05 WwlKBalT1GX8713ipuz8mqdgdPrJof3y9og99LYEFbdFicNwD6HiXB6H3a9ESd/8 L9i4TpeT/UoRmVX5AVHs/brVZhIX8VmTEP3nX7m9dHh9Sz6lMBaFv7plxaT8iP9t z5PI2ZgUCIl9tU48p+sr9aIcYxLn3O0= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:02 2025 by rpki-client