$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa File: 13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa (raw, json) Hash identifier: avBYhjNbgJRaQ4aLCJ3ygE1633ZqTvnVIGF63j6NkAM= Subject key identifier: E5:C3:E3:80:56:C0:CE:C6:22:E9:B3:04:1A:EE:41:61:E5:1A:D5:58 Certificate issuer: /CN=65e9fec4-d05e-44ad-aff7-d6fce635c53a Certificate serial: 010D0C9F4328584AE5C674A01FF3002970B5C200 Authority key identifier: D5:1A:B7:88:B9:7E:57:08:7C:67:A5:47:7D:EC:D6:FB:AC:3C:5F:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 13509 IP address blocks: 159.123.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:74:a0:1f:f3:00:29:70:b5:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e9fec4-d05e-44ad-aff7-d6fce635c53a Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=31c61528-5bc1-436c-90e9-32c04e9a7682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:2f:75:73:a7:43:4e:23:8e:61:cc:e0:17: d5:e6:74:58:56:d5:53:06:d2:dd:21:75:0d:2b:55: 91:e8:47:35:84:c7:bc:3a:39:85:de:e8:40:14:76: 04:43:ca:25:30:9c:aa:69:23:29:fa:cb:73:b4:30: 52:c3:11:1b:9d:7c:60:1f:da:78:54:44:89:25:b1: 96:da:c1:a0:12:2f:47:11:fd:5c:5b:f8:2d:65:02: c2:b1:1b:d7:18:9d:48:b8:51:14:78:f1:f6:2e:ba: d8:3f:50:d6:fa:69:7b:b5:7e:dc:d8:41:68:34:08: f2:fc:22:63:8c:57:98:c2:58:2d:6e:05:5d:70:24: 8c:5c:07:08:11:03:78:58:c6:31:ed:eb:05:b3:6f: f4:b0:80:eb:ab:17:df:a5:28:60:3e:44:d4:c8:e7: ea:93:af:04:03:4b:4f:51:c5:71:fc:3d:34:bd:73: cc:30:85:06:36:62:af:95:20:82:6f:d9:13:6d:89: ba:0f:09:e9:1d:89:e6:e6:5e:f3:a1:a6:51:13:43: d9:e4:fd:35:ce:02:65:72:3c:91:67:8c:3d:26:cc: 3d:19:f0:c9:3f:7a:ad:a7:ef:b6:53:ef:3e:d6:5f: 88:31:73:ab:ec:53:67:b9:1e:32:71:ee:9e:0c:a0: 76:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:E3:80:56:C0:CE:C6:22:E9:B3:04:1A:EE:41:61:E5:1A:D5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl X509v3 Authority Key Identifier: keyid:D5:1A:B7:88:B9:7E:57:08:7C:67:A5:47:7D:EC:D6:FB:AC:3C:5F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer sbgp-ipAddrBlock: critical IPv4: 159.123.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:3c:24:66:35:7e:59:e6:f1:b9:a2:79:62:30:9f:fe:04:0a: 38:55:f3:14:dc:59:21:29:9f:ee:28:21:cc:7c:c2:1d:67:db: 97:78:bc:75:7d:0a:77:64:a8:4f:eb:49:f9:60:89:04:5c:48: b5:2a:73:48:19:1d:87:56:a7:d0:96:e6:e8:1d:ba:17:a0:54: 30:11:28:22:bc:35:c0:72:25:e7:d1:f9:06:e2:5f:d5:c8:f1: c7:80:34:23:14:64:a0:49:98:03:95:f7:33:46:fa:7d:16:aa: e9:01:b0:df:5b:37:48:a2:da:f2:17:0f:8c:e0:43:b3:f1:ff: a4:a1:c9:b9:35:6e:68:96:2b:9a:70:69:58:c5:6f:41:8d:4f: dd:72:6a:3c:cb:5a:0a:99:c7:22:c2:b9:b0:83:c3:fe:5d:25: 31:1f:ff:6f:39:0d:d1:a0:cd:45:6d:9b:19:f1:8c:c8:26:3e: 1f:0f:0e:42:41:17:9c:26:11:df:df:39:24:40:ba:7f:8b:5d: 18:6f:ad:fb:88:1a:dd:aa:92:e2:91:3b:c1:07:f0:ae:a7:2b: 2a:11:27:10:fd:32:c0:45:c1:6d:9b:37:c7:8b:75:78:98:db: 45:9c:e3:6a:c1:9a:62:b0:fd:56:88:6e:c5:d3:18:62:f9:cd: 45:b6:69:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnSgH/MAKXC1wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVlOWZlYzQtZDA1ZS00NGFkLWFmZjctZDZmY2U2MzVj NTNhMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MzFjNjE1MjgtNWJjMS00MzZjLTkwZTktMzJjMDRlOWE3NjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhIvdXOnQ04jjmHM4BfV5nRYVtVTBtLdIXUN K1WR6Ec1hMe8OjmF3uhAFHYEQ8olMJyqaSMp+stztDBSwxEbnXxgH9p4VESJJbGW 2sGgEi9HEf1cW/gtZQLCsRvXGJ1IuFEUePH2LrrYP1DW+ml7tX7c2EFoNAjy/CJj jFeYwlgtbgVdcCSMXAcIEQN4WMYx7esFs2/0sIDrqxffpShgPkTUyOfqk68EA0tP UcVx/D00vXPMMIUGNmKvlSCCb9kTbYm6DwnpHYnm5l7zoaZRE0PZ5P01zgJlcjyR Z4w9Jsw9GfDJP3qtp++2U+8+1l+IMXOr7FNnuR4yce6eDKB2rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXD44BWwM7GIumzBBruQWHlGtVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NWU5 ZmVjNC1kMDVlLTQ0YWQtYWZmNy1kNmZjZTYzNWM1M2EvMTNiODkyYWItMGYwYy0z YTUzLWFlMWUtZWQyYmI2N2MyNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjVlOWZlYzQtZDA1ZS00NGFkLWFm ZjctZDZmY2U2MzVjNTNhLzY1ZTlmZWM0LWQwNWUtNDRhZC1hZmY3LWQ2ZmNlNjM1 YzUzYS5jcmwwHwYDVR0jBBgwFoAU1Rq3iLl+Vwh8Z6VHfezW+6w8X94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NWU5ZmVjNC1kMDVlLTQ0YWQtYWZmNy1kNmZj ZTYzNWM1M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3u/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA8JGY1flnm8bmieWIwn/4ECjhV8xTcWSEpn+4oIcx8wh1n25d4vHV9 CndkqE/rSflgiQRcSLUqc0gZHYdWp9CW5ugduhegVDARKCK8NcByJefR+QbiX9XI 8ceANCMUZKBJmAOV9zNG+n0WqukBsN9bN0ii2vIXD4zgQ7Px/6Shybk1bmiWK5pw aVjFb0GNT91yajzLWgqZxyLCubCDw/5dJTEf/285DdGgzUVtmxnxjMgmPh8PDkJB F5wmEd/fOSRAun+LXRhvrfuIGt2qkuKRO8EH8K6nKyoRJxD9MsBFwW2bN8eLdXiY 20Wc42rBmmKw/VaIbsXTGGL5zUW2abE= -----END CERTIFICATE-----Generated at Sun Aug 24 09:46:07 2025 by rpki-client