$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa File: a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa (raw, json) Hash identifier: Xi9FT3eYrZcXHiPZ0ibGtFuMwomGWnXr5NOgc6oMEkQ= Subject key identifier: BF:29:D1:76:58:33:2C:59:A5:EA:78:E4:FF:E6:E8:62:4C:2E:2D:61 Certificate issuer: /CN=cd789731-b7d6-499d-bd13-8fae75220140 Certificate serial: 010D0C9F4328584AF52124A40EFAABFBCA80ED00 Authority key identifier: 47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 5078 IP address blocks: 156.110.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:24:a4:0e:fa:ab:fb:ca:80:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd789731-b7d6-499d-bd13-8fae75220140 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=e72c83d2-7c6b-4190-9dcd-42c24e269604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:d6:d8:39:30:99:c9:f4:d8:1b:b1:23:a0: 2d:80:2f:8d:24:dd:53:20:5f:c3:c5:bc:8b:ac:54: 27:49:76:01:40:57:81:2e:22:07:24:0d:e4:48:a2: 9d:32:99:b8:41:6f:32:d0:39:7c:45:59:2e:34:c9: c7:39:6c:af:05:fa:5c:70:ef:8b:ed:ac:a9:0e:07: 6c:bf:64:a8:44:b5:b9:d3:ac:1f:b1:af:09:e6:61: c3:b2:aa:42:e5:1b:9d:07:d0:24:42:7c:7c:64:f2: 53:1b:63:73:79:91:38:33:02:d7:75:48:f7:76:dc: 85:2f:12:8a:14:d8:55:ba:12:bf:45:fb:17:9f:c4: e2:f4:67:06:fc:5c:b0:d9:06:9e:e4:e3:b4:b9:f8: f5:d3:a9:92:6e:76:36:a8:58:37:ca:fe:37:9e:01: cb:f3:df:1e:36:51:78:a3:b2:21:f3:16:80:eb:ca: 61:45:25:96:b0:9c:9b:d9:22:0b:be:96:01:8d:f6: b8:41:b0:f7:43:4e:d6:9d:cd:03:d1:88:aa:e8:13: ff:14:fe:7a:3c:a9:1c:04:c2:bd:c8:c1:81:82:71: 0d:85:f6:15:e5:e4:15:22:bd:72:c9:40:6b:dc:2d: 2e:1a:35:75:f5:40:aa:21:43:ba:10:58:45:ad:79: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:29:D1:76:58:33:2C:59:A5:EA:78:E4:FF:E6:E8:62:4C:2E:2D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl X509v3 Authority Key Identifier: keyid:47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer sbgp-ipAddrBlock: critical IPv4: 156.110.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:6d:fa:17:ce:0a:c4:12:f3:d2:6d:e8:fd:06:aa:f5:50:70: b7:07:56:1b:70:e9:36:33:6b:dd:18:00:b2:5d:99:ff:0b:35: 69:ea:fa:c7:a5:d1:25:5e:c9:8d:b2:34:4f:f5:42:a6:b3:e3: cc:b4:1d:5b:5e:d0:5f:de:84:55:a9:97:6e:34:5d:3a:3e:a6: ab:c3:8a:bf:6f:44:6c:19:09:c9:26:0e:a3:2f:75:1d:0c:af: 83:7b:25:22:b7:14:b0:91:35:08:2a:15:a5:7e:6d:fd:6f:10: 98:9c:c1:56:83:01:45:b9:f4:18:84:b7:94:b0:b3:9b:f0:6d: f6:2c:7b:b1:94:2e:05:67:cc:2a:c0:17:2a:33:a5:05:96:1d: 06:c5:03:74:01:ce:12:97:00:15:79:56:7b:22:39:4b:59:85: bc:8b:e7:1e:0a:b8:81:ec:c7:4c:54:7b:99:eb:4a:48:91:ca: 40:7d:13:7f:92:29:12:f1:4d:20:53:ce:9f:2b:20:bb:b3:0b: 7b:31:c7:61:6d:b5:66:7e:e8:a1:2f:a4:76:08:dc:a7:94:0e: 82:fc:e8:0a:76:a4:8c:12:01:9c:a7:07:ed:51:f6:fc:74:33: 8b:6c:5a:2f:cb:4d:5d:80:2c:76:24:b0:ed:5a:73:88:c1:ef: cf:79:73:58 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr1ISSkDvqr+8qA7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ODk3MzEtYjdkNi00OTlkLWJkMTMtOGZhZTc1MjIw MTQwMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTcyYzgzZDItN2M2Yi00MTkwLTlkY2QtNDJjMjRlMjY5NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMzW2Dkwmcn02BuxI6AtgC+NJN1TIF/DxbyL rFQnSXYBQFeBLiIHJA3kSKKdMpm4QW8y0Dl8RVkuNMnHOWyvBfpccO+L7aypDgds v2SoRLW506wfsa8J5mHDsqpC5RudB9AkQnx8ZPJTG2NzeZE4MwLXdUj3dtyFLxKK FNhVuhK/RfsXn8Ti9GcG/Fyw2Qae5OO0ufj106mSbnY2qFg3yv43ngHL898eNlF4 o7Ih8xaA68phRSWWsJyb2SILvpYBjfa4QbD3Q07Wnc0D0Yiq6BP/FP56PKkcBMK9 yMGBgnENhfYV5eQVIr1yyUBr3C0uGjV19UCqIUO6EFhFrXn1CQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL8p0XZYMyxZpep45P/m6GJMLi1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZDc4 OTczMS1iN2Q2LTQ5OWQtYmQxMy04ZmFlNzUyMjAxNDAvYTVmYTk4MGEtMmFhNy0z MTc2LTlhMWEtZjg5OWU5MjQzZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Q3ODk3MzEtYjdkNi00OTlkLWJk MTMtOGZhZTc1MjIwMTQwL2NkNzg5NzMxLWI3ZDYtNDk5ZC1iZDEzLThmYWU3NTIy MDE0MC5jcmwwHwYDVR0jBBgwFoAUR32Fo9kh7AB0ydTKYbeWFk7Uo88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZDc4OTczMS1iN2Q2LTQ5OWQtYmQxMy04ZmFl NzUyMjAxNDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnG4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAtG36F84KxBLz0m3o/Qaq9VBwtwdWG3DpNjNr3RgAsl2Z/ws1aer6x6XR JV7JjbI0T/VCprPjzLQdW17QX96EVamXbjRdOj6mq8OKv29EbBkJySYOoy91HQyv g3slIrcUsJE1CCoVpX5t/W8QmJzBVoMBRbn0GIS3lLCzm/Bt9ix7sZQuBWfMKsAX KjOlBZYdBsUDdAHOEpcAFXlWeyI5S1mFvIvnHgq4gezHTFR7metKSJHKQH0Tf5Ip EvFNIFPOnysgu7MLezHHYW21Zn7ooS+kdgjcp5QOgvzoCnakjBIBnKcH7VH2/HQz i2xaL8tNXYAsdiSw7VpziMHvz3lzWA== -----END CERTIFICATE-----Generated at Sun Aug 24 10:52:38 2025 by rpki-client