$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa File: 4fc98cd7-4077-3cec-a289-2f027a718339.roa (raw, json) Hash identifier: LbcvWhRzCU5IgmKGHzehDB5qVABXpQVqGPsi/eAoqmw= Subject key identifier: 8F:40:78:8B:9F:2E:08:2C:75:E3:74:85:C3:E6:77:91:3A:62:98:1D Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa Certificate serial: 010D0C9F4328584AD9365C782727BF18C97C3A80 Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 33711 IP address blocks: 128.254.224.0/24 maxlen: 24 128.254.226.0/24 maxlen: 24 128.254.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5c:78:27:27:bf:18:c9:7c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=96323240-5161-4927-bcf7-13056a4e2f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:af:74:0e:3d:40:1e:35:3a:6c:bf:7c:0b: d1:80:a4:b0:97:69:5a:8e:1e:df:72:e7:e6:97:8f: 95:b3:3b:9e:f5:0a:22:d8:ff:04:1e:ac:1e:b7:7f: 2e:54:12:64:35:39:0b:97:45:4e:95:ce:d6:1f:6e: 69:67:0b:dd:13:d8:35:2c:04:5b:c9:05:f0:8a:db: 90:e7:6b:1f:f7:c7:26:1b:6e:9e:10:75:40:77:ba: 28:bc:02:3b:b3:7e:64:f1:3e:95:51:b6:a4:97:2a: cd:4b:a0:ee:4d:8c:2a:27:33:5a:6c:66:1f:4d:01: d1:5d:af:34:3d:1d:e9:0a:cf:db:2f:5b:12:c5:38: 23:f0:b4:ce:bc:19:66:1f:c0:c3:db:92:c6:a6:04: d8:5b:2e:09:73:67:c3:8e:8e:2f:92:04:d5:26:b0: 6c:e4:72:f1:e3:db:63:88:25:85:b3:88:c9:06:bb: 5e:6c:d9:85:35:be:5f:bf:7b:16:97:a3:b3:2d:04: 2c:27:47:14:9b:3c:ca:03:25:46:2c:f2:c2:6e:2c: 1d:a2:b9:62:b9:67:2d:f0:28:5b:36:7d:00:f7:0a: c8:f0:a2:43:8d:56:2f:64:e0:26:7c:fc:94:56:c2: 09:8c:bd:f8:96:4c:25:74:9c:35:2e:62:c6:24:a1: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:40:78:8B:9F:2E:08:2C:75:E3:74:85:C3:E6:77:91:3A:62:98:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/4fc98cd7-4077-3cec-a289-2f027a718339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl X509v3 Authority Key Identifier: keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer sbgp-ipAddrBlock: critical IPv4: 128.254.224.0/24 128.254.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b6:3b:60:33:f7:7f:0c:f8:69:11:2c:ac:80:60:d7:f7:93: 14:a8:46:ff:02:78:9a:6d:af:29:e4:f9:0c:67:f3:f0:e0:3d: a5:49:9b:39:07:eb:0c:ed:0b:ca:e8:ee:54:1a:a1:29:9e:06: d2:f5:96:21:a0:3a:00:34:46:c9:3d:b4:5b:2e:0d:22:9f:75: 11:54:b5:bc:99:e2:32:d0:a0:22:7e:3e:24:8a:4c:24:9c:4f: 5d:a1:7b:c3:1d:17:3d:59:3c:46:4c:16:76:22:3d:fb:0a:a8: 3b:39:ea:c6:ee:68:35:ab:02:1c:4d:94:65:db:12:0d:d7:1d: 1b:a8:91:b3:a5:c4:d8:c4:4c:a3:1a:35:11:a5:e6:c8:f1:0b: 92:3d:71:8d:e2:39:93:95:1e:6c:74:96:e1:29:a2:f7:0c:78: 4b:da:6b:6d:82:b1:a1:9c:e1:01:f9:6a:9e:91:80:3b:c1:a3: 24:3b:2a:19:09:6a:16:68:ae:7b:54:03:3a:e5:b3:e7:33:9f: 4a:1e:9e:a0:e2:30:79:db:1a:4c:6f:9b:ac:c6:41:87:cc:70: 00:17:5a:c0:17:22:4a:ad:cc:ac:89:01:11:11:9b:61:08:50: 71:42:bb:26:90:ae:df:d9:56:57:04:7a:51:d4:95:93:b0:8b: 79:8f:ff:f0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErZNlx4Jye/GMl8OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm MmZhMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk OTYzMjMyNDAtNTE2MS00OTI3LWJjZjctMTMwNTZhNGUyZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrOvdA49QB41Omy/fAvRgKSwl2lajh7fcufm l4+Vszue9Qoi2P8EHqwet38uVBJkNTkLl0VOlc7WH25pZwvdE9g1LARbyQXwituQ 52sf98cmG26eEHVAd7oovAI7s35k8T6VUbaklyrNS6DuTYwqJzNabGYfTQHRXa80 PR3pCs/bL1sSxTgj8LTOvBlmH8DD25LGpgTYWy4Jc2fDjo4vkgTVJrBs5HLx49tj iCWFs4jJBrtebNmFNb5fv3sWl6OzLQQsJ0cUmzzKAyVGLPLCbiwdorliuWct8Chb Nn0A9wrI8KJDjVYvZOAmfPyUVsIJjL34lkwldJw1LmLGJKELUQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI9AeIufLggsdeN0hcPmd5E6YpgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvNGZjOThjZDctNDA3Ny0z Y2VjLWEyODktMmYwMjdhNzE4MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx ZmE1MGYyZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7gAwQB gP7iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD62O2Az938M+GkRLKyAYNf3kxSoRv8CeJptrynk+Qxn8/Dg PaVJmzkH6wztC8ro7lQaoSmeBtL1liGgOgA0Rsk9tFsuDSKfdRFUtbyZ4jLQoCJ+ PiSKTCScT12he8MdFz1ZPEZMFnYiPfsKqDs56sbuaDWrAhxNlGXbEg3XHRuokbOl xNjETKMaNRGl5sjxC5I9cY3iOZOVHmx0luEpovcMeEvaa22CsaGc4QH5ap6RgDvB oyQ7KhkJahZorntUAzrls+czn0oenqDiMHnbGkxvm6zGQYfMcAAXWsAXIkqtzKyJ ARERm2EIUHFCuyaQrt/ZVlcEelHUlZOwi3mP//A= -----END CERTIFICATE-----Generated at Sun Aug 24 10:52:38 2025 by rpki-client