$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa File: 5b896e6e-578e-3e6a-a229-c85a29386919.roa (raw, json) Hash identifier: QI8mprbUqN5Xg4Oi6oB2R7pn9r6VKzFc2mZcZ3AY72c= Subject key identifier: 30:10:21:B8:6B:E7:CA:65:1C:F9:17:EF:8C:B5:CB:2F:98:51:19:A4 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584AE89125E42CE158DC612626F1 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:25:e4:2c:e1:58:dc:61:26:26:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=7f25ab72-2580-4f6a-8697-01e6e6e59cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:78:c1:22:51:30:65:4c:eb:7a:1b:fe:78:95: 2d:9d:21:0d:c1:5f:63:37:0e:cb:1b:bb:3a:29:d3: f0:5f:46:e1:41:b7:43:ab:11:16:64:ee:a1:56:51: c1:ce:ba:a5:63:52:09:e0:be:b1:db:6c:57:cd:e0: 3d:2a:40:46:f1:72:0c:57:1b:c1:59:8e:89:e0:cb: 23:c4:ce:e7:47:9d:75:4f:c6:60:58:da:10:b1:bc: b5:6a:d0:c4:d8:46:a3:a0:80:8e:8c:17:6e:c3:d7: 96:99:41:a7:3b:0a:e8:0f:8f:83:d0:22:25:f2:d6: 9e:8d:f4:f3:b8:1b:0f:85:e0:9e:cd:67:2b:34:b8: 79:17:5f:18:20:5f:be:73:78:f2:d7:fd:6d:65:d0: 9b:43:59:2a:b6:ba:c7:83:ae:7f:d4:e0:b6:21:36: e4:aa:6c:5f:a1:5d:b9:61:d4:71:6e:71:d9:60:e5: 54:d3:5f:5c:13:c4:4b:06:db:e6:d7:ae:38:17:61: 4c:38:67:bd:b9:41:f1:4a:88:48:13:e8:9e:3e:0b: 4e:db:52:81:0e:cb:ca:e9:61:0d:19:87:40:af:fc: 08:27:78:d8:68:a1:97:96:2d:db:24:c1:cf:aa:24: d1:a9:3a:e3:6b:70:4f:a5:42:29:fe:ec:d6:bc:a2: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:10:21:B8:6B:E7:CA:65:1C:F9:17:EF:8C:B5:CB:2F:98:51:19:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7b:e8:51:21:f0:3d:2a:58:4e:8a:f2:5f:a7:9a:84:9e:77: 77:76:e2:77:13:dd:c4:10:36:86:31:ad:dd:7d:b3:5b:7c:bd: 4a:07:0d:5d:71:66:cb:7a:3d:86:6a:78:fc:37:86:26:53:69: bf:38:d7:93:7a:bb:0b:94:73:ad:08:0e:c2:ab:a5:a0:cf:5a: c8:c2:9b:fd:cf:9f:14:e9:0c:22:3b:3c:c5:26:e3:7d:2d:4b: c7:4a:a9:b8:f4:45:02:4e:97:27:67:5e:d2:c6:f4:43:9b:73: 5d:b9:79:14:46:83:26:7a:dd:a5:63:e0:3b:23:df:a4:03:89: 3f:c8:7b:da:78:70:06:4e:4b:6e:53:15:1a:c6:10:7f:86:3f: fd:bc:71:65:61:0f:6e:bc:8d:6f:05:1e:06:a8:39:21:aa:6b: 38:11:9f:95:6b:d7:06:76:d9:b4:00:80:17:46:a3:82:70:68: 8b:7b:1f:af:76:87:44:33:ef:9c:5b:82:5f:bf:3e:a5:74:9d: ef:b1:e7:dc:08:f7:14:9b:9a:54:e7:a6:fd:e1:13:3c:a2:55: 84:2d:4f:1f:8d:2f:3b:42:05:dd:ce:74:10:5b:c2:d1:4c:d8: 2b:bd:66:ea:cc:95:73:5a:bb:47:74:ac:7c:e4:0a:c3:a7:6f: 84:9e:6e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSXkLOFY3GEmJvEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk N2YyNWFiNzItMjU4MC00ZjZhLTg2OTctMDFlNmU2ZTU5Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXjBIlEwZUzrehv+eJUtnSENwV9jNw7LG7s6 KdPwX0bhQbdDqxEWZO6hVlHBzrqlY1IJ4L6x22xXzeA9KkBG8XIMVxvBWY6J4Msj xM7nR511T8ZgWNoQsby1atDE2EajoICOjBduw9eWmUGnOwroD4+D0CIl8taejfTz uBsPheCezWcrNLh5F18YIF++c3jy1/1tZdCbQ1kqtrrHg65/1OC2ITbkqmxfoV25 YdRxbnHZYOVU019cE8RLBtvm1644F2FMOGe9uUHxSohIE+iePgtO21KBDsvK6WEN GYdAr/wIJ3jYaKGXli3bJMHPqiTRqTrja3BPpUIp/uzWvKLHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAQIbhr58plHPkX74y1yy+YURmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvNWI4OTZlNmUtNTc4ZS0z ZTZhLWEyMjktYzg1YTI5Mzg2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt76FEh8D0qWE6K8l+nmoSed3d24ncT3cQQNoYxrd19s1t8vUoHDV1x Zst6PYZqePw3hiZTab8415N6uwuUc60IDsKrpaDPWsjCm/3PnxTpDCI7PMUm430t S8dKqbj0RQJOlydnXtLG9EObc125eRRGgyZ63aVj4Dsj36QDiT/Ie9p4cAZOS25T FRrGEH+GP/28cWVhD268jW8FHgaoOSGqazgRn5Vr1wZ22bQAgBdGo4JwaIt7H692 h0Qz75xbgl+/PqV0ne+x59wI9xSbmlTnpv3hEzyiVYQtTx+NLztCBd3OdBBbwtFM 2Cu9ZurMlXNau0d0rHzkCsOnb4Sebq0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:24 2025 by rpki-client