$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa File: 03311caa-eedc-35f5-b4a3-a502fc212a0b.roa (raw, json) Hash identifier: Nq7aqlgi3s8i2hmGxu9BHVKLhBSOgCuw6H6nlzQvYXo= Subject key identifier: 4B:A3:00:FE:75:9B:2C:E5:6F:D3:32:38:2F:9C:91:CD:CA:52:96:C2 Certificate issuer: /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Certificate serial: 010D0C9F4328584B6BC75C73604587DA2EEB0060 Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 8075 IP address blocks: 156.20.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5c:73:60:45:87:da:2e:eb:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=4abde5bf-65bf-4ec2-8bb5-bae0dfb81f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:8e:3f:16:60:47:8b:54:f6:0b:d6:c2:0f: 8b:12:fd:fe:b9:b5:9e:72:84:02:b7:79:69:1f:8c: 83:24:44:29:9c:82:e0:30:21:a2:f8:9b:35:09:1f: c6:4b:fb:77:e0:6a:c4:83:ad:7c:31:40:b1:d5:4a: 06:da:71:c3:df:f4:e7:70:5e:d8:03:c3:96:6b:64: 4d:c0:4e:98:49:d8:b0:89:d9:67:73:0c:00:cd:2e: 81:46:73:29:f3:21:64:7f:ee:50:f3:a3:fa:a9:37: d8:c5:84:d8:eb:99:01:85:2b:48:28:6d:c9:3f:29: 93:0e:73:d1:3b:05:d6:a3:13:ad:4c:c5:7d:17:55: b0:6c:3f:06:f5:7c:b8:00:43:9a:80:ea:cd:63:03: ae:62:7a:5b:64:99:58:98:36:21:1e:a2:70:8a:e6: 28:bc:85:4f:09:e5:c2:e7:83:08:1c:ce:bf:ba:33: 35:22:e8:86:af:31:e3:29:62:a3:a0:c6:54:19:07: 33:34:2b:84:8a:57:6b:80:02:b6:74:de:79:89:e5: 3a:a7:51:ba:8a:24:fe:4c:4c:d4:b8:3d:d5:3b:ce: c7:6f:d4:d4:34:2c:09:a1:f8:35:a4:d9:d6:40:2e: 88:21:ea:b5:20:ca:22:ae:7f:bf:e8:82:a1:11:22: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A3:00:FE:75:9B:2C:E5:6F:D3:32:38:2F:9C:91:CD:CA:52:96:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl X509v3 Authority Key Identifier: keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer sbgp-ipAddrBlock: critical IPv4: 156.20.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e4:09:6e:9a:d4:17:c5:61:08:b0:c0:db:10:b4:d7:e7:98: 1a:a8:b8:aa:ab:93:49:1c:c2:c0:87:a4:7e:6b:7a:34:7b:87: b6:43:e2:34:4c:2a:78:fe:09:7c:09:09:e6:9d:0e:36:28:a7: 36:67:87:d3:8e:12:ab:92:a9:a3:fe:9a:2f:20:07:0c:0b:8a: fe:2a:c9:2f:dd:3c:b0:a2:bd:48:bd:c9:0d:57:1b:f8:6d:ed: fb:a9:a5:d2:35:6d:58:7e:29:36:74:eb:5c:49:76:8b:2e:9e: d6:91:5c:ed:5d:cf:48:69:dd:18:3f:db:4a:c8:a6:4f:0d:5a: 8d:41:c1:a6:3e:51:67:4f:a8:51:97:38:8a:cb:d8:8d:df:d3: c5:71:1b:df:43:c8:b7:7a:39:1f:b3:1e:39:e8:02:cd:18:18: 47:71:cb:78:f6:c1:20:10:30:d6:82:0f:92:be:2a:db:22:4c: f2:74:fb:07:ca:a0:34:8f:2f:6b:ed:40:77:15:4f:de:7a:eb: 1e:62:85:ca:9e:36:ff:34:d5:7b:45:5b:8b:b5:58:e7:33:df: 5c:51:c4:a2:6c:93:ad:dd:d9:42:3c:75:38:26:81:3f:53:8e: e5:95:e2:d4:9f:63:c3:58:01:f8:e9:2d:25:6d:60:41:69:b4: 6a:86:65:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1xzYEWH2i7rAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M2YzRmZTQtNTY0Mi00YWQwLTgzMjUtNjk5NDBiMmVk MDRkMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NGFiZGU1YmYtNjViZi00ZWMyLThiYjUtYmFlMGRmYjgxZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDSOPxZgR4tU9gvWwg+LEv3+ubWecoQCt3lp H4yDJEQpnILgMCGi+Js1CR/GS/t34GrEg618MUCx1UoG2nHD3/TncF7YA8OWa2RN wE6YSdiwidlncwwAzS6BRnMp8yFkf+5Q86P6qTfYxYTY65kBhStIKG3JPymTDnPR OwXWoxOtTMV9F1WwbD8G9Xy4AEOagOrNYwOuYnpbZJlYmDYhHqJwiuYovIVPCeXC 54MIHM6/ujM1IuiGrzHjKWKjoMZUGQczNCuEildrgAK2dN55ieU6p1G6iiT+TEzU uD3VO87Hb9TUNCwJofg1pNnWQC6IIeq1IMoirn+/6IKhESKNZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEujAP51myzlb9MyOC+ckc3KUpbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzZj NGZlNC01NjQyLTRhZDAtODMyNS02OTk0MGIyZWQwNGQvMDMzMTFjYWEtZWVkYy0z NWY1LWI0YTMtYTUwMmZjMjEyYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2M2YzRmZTQtNTY0Mi00YWQwLTgz MjUtNjk5NDBiMmVkMDRkLzdjNmM0ZmU0LTU2NDItNGFkMC04MzI1LTY5OTQwYjJl ZDA0ZC5jcmwwHwYDVR0jBBgwFoAUg+p7p+zvw3iKpenuLEuzG3NzvFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzZjNGZlNC01NjQyLTRhZDAtODMyNS02OTk0 MGIyZWQwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnBQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfkCW6a1BfFYQiwwNsQtNfnmBqouKqrk0kcwsCHpH5rejR7h7ZD4jRM Knj+CXwJCeadDjYopzZnh9OOEquSqaP+mi8gBwwLiv4qyS/dPLCivUi9yQ1XG/ht 7fuppdI1bVh+KTZ061xJdosuntaRXO1dz0hp3Rg/20rIpk8NWo1BwaY+UWdPqFGX OIrL2I3f08VxG99DyLd6OR+zHjnoAs0YGEdxy3j2wSAQMNaCD5K+KtsiTPJ0+wfK oDSPL2vtQHcVT9566x5ihcqeNv801XtFW4u1WOcz31xRxKJsk63d2UI8dTgmgT9T juWV4tSfY8NYAfjpLSVtYEFptGqGZaY= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:37 2025 by rpki-client