$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa File: d86a3712-c3b9-3045-ada8-f4f640a943be.roa (raw, json) Hash identifier: iqiP57ldb1rUcq5+d8E92X902XeR1wlZE/PWbJ8XWjM= Subject key identifier: 55:60:38:54:55:4C:9A:08:37:BA:E0:D9:0F:0F:C6:57:AE:CF:D0:39 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AE72BB7183B97366D359BAC42 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 18779 IP address blocks: 104.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b7:18:3b:97:36:6d:35:9b:ac:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=a4b5e078-ee6b-4ce3-a61f-757a02de1ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:80:67:9e:6b:56:ba:e4:0a:53:a0:08:af: b0:86:ea:4a:3b:64:38:0f:d2:96:03:1f:6c:20:0b: c8:04:13:10:8c:7e:a9:1c:f9:63:80:cd:e8:5c:de: 17:fd:2f:0b:4c:66:6f:64:ae:f6:e5:6a:24:90:fe: 9d:1c:d8:b7:61:79:55:45:70:70:38:f8:c0:24:43: 6f:dc:a8:b8:ea:fd:66:53:59:c0:bb:6b:5a:8b:e3: a2:27:19:e2:70:1d:4b:e4:40:79:9c:8d:7d:49:77: 8d:a9:63:25:f4:c3:8b:84:5b:45:f0:d6:e8:99:9e: 10:c1:8a:36:d8:6c:7c:b2:fe:19:96:f2:1d:48:0e: cd:52:aa:c3:a1:34:b2:34:5a:1c:ac:e6:66:bf:11: a2:e3:dc:c5:91:6b:12:43:a4:52:47:c1:44:c3:02: bb:24:f4:62:26:b1:db:09:f2:68:9d:58:09:a8:a1: 77:1e:3e:4f:5c:e8:ec:78:ec:d2:65:d2:bb:9e:5c: 97:f2:6d:37:81:45:e5:cb:14:ec:d3:e6:31:db:28: b5:9c:88:18:87:f0:02:e5:11:2b:1c:cb:6a:85:4f: 15:70:c5:0c:50:0a:f4:c4:3a:ef:93:6e:4d:b3:9c: 85:e3:87:1e:9e:dc:6b:a4:e9:0e:2d:5a:d4:5d:d6: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:60:38:54:55:4C:9A:08:37:BA:E0:D9:0F:0F:C6:57:AE:CF:D0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4d:02:50:44:d9:62:ec:61:a7:40:d7:5a:83:57:74:ef:bb: 38:ac:f3:54:40:b4:5c:29:d5:94:c9:7b:5b:18:59:65:37:32: 26:2f:e9:f8:0d:2b:ec:76:49:28:0f:c9:ca:f5:f9:8e:b8:ee: ce:13:27:5b:0b:44:27:88:93:ac:4a:43:a3:59:4d:1e:11:8b: 30:a2:4d:45:28:4a:67:31:59:bd:54:da:6d:85:8d:44:94:90: b1:3e:9e:27:f5:31:e3:ee:fa:b6:92:f6:11:67:c9:a8:0a:84: 40:81:f3:1e:25:20:ef:64:b8:c8:a3:fb:0f:da:46:6a:2e:19: d3:20:fe:40:72:94:56:4c:24:03:ff:eb:ee:f8:cf:05:b3:d7: d1:01:20:e2:09:72:a3:44:2a:6b:c6:9b:f3:6c:77:94:6d:c2: 35:d3:d7:18:34:7f:65:13:26:9d:40:43:5b:c6:e1:00:1f:82: 8f:7d:31:47:45:f1:2b:14:e4:cd:e6:1e:e9:59:49:21:2e:b5: 1e:de:bd:fb:fd:cc:29:fc:71:19:64:9f:fe:19:80:4d:e2:c1: 1a:ad:91:36:c5:59:aa:50:a5:34:1c:73:19:13:50:19:1c:bf: b0:b7:fd:11:04:93:c4:b9:8b:27:7b:44:f0:0c:d4:d8:c9:ba: 7b:ca:6c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7cYO5c2bTWbrEIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk YTRiNWUwNzgtZWU2Yi00Y2UzLWE2MWYtNzU3YTAyZGUxY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw86AZ55rVrrkClOgCK+whupKO2Q4D9KWAx9s IAvIBBMQjH6pHPljgM3oXN4X/S8LTGZvZK725WokkP6dHNi3YXlVRXBwOPjAJENv 3Ki46v1mU1nAu2tai+OiJxnicB1L5EB5nI19SXeNqWMl9MOLhFtF8NbomZ4QwYo2 2Gx8sv4ZlvIdSA7NUqrDoTSyNFocrOZmvxGi49zFkWsSQ6RSR8FEwwK7JPRiJrHb CfJonVgJqKF3Hj5PXOjseOzSZdK7nlyX8m03gUXlyxTs0+Yx2yi1nIgYh/AC5REr HMtqhU8VcMUMUAr0xDrvk25Ns5yF44centxrpOkOLVrUXdak1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVgOFRVTJoIN7rg2Q8Pxleuz9A5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZDg2YTM3MTItYzNiOS0z MDQ1LWFkYTgtZjRmNjQwYTk0M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhNAlBE2WLsYadA11qDV3Tvuzis81RAtFwp1ZTJe1sYWWU3MiYv6fgN K+x2SSgPycr1+Y647s4TJ1sLRCeIk6xKQ6NZTR4RizCiTUUoSmcxWb1U2m2FjUSU kLE+nif1MePu+raS9hFnyagKhECB8x4lIO9kuMij+w/aRmouGdMg/kBylFZMJAP/ 6+74zwWz19EBIOIJcqNEKmvGm/Nsd5RtwjXT1xg0f2UTJp1AQ1vG4QAfgo99MUdF 8SsU5M3mHulZSSEutR7evfv9zCn8cRlkn/4ZgE3iwRqtkTbFWapQpTQccxkTUBkc v7C3/REEk8S5iyd7RPAM1NjJunvKbGc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:14:30 2025 by rpki-client