$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa File: a4734617-44c5-3289-bf66-4cbaa145cc8b.roa (raw, json) Hash identifier: jzrvw/sVVGjzhQsqm1wrNDQ+rzSJM4M4TJrqO8XBGa8= Subject key identifier: C1:F0:A0:D6:DA:C3:3C:F6:62:CA:7C:C3:23:F3:4C:E6:FB:D2:30:5F Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584B79BCC873F7133A53E2699500 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c8:73:f7:13:3a:53:e2:69:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=bf82e854-b31e-4813-855c-7b337c129315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:69:10:37:7f:3d:3b:97:d5:8f:1e:80:41: da:5b:8f:18:85:e1:82:5c:c1:12:03:6e:52:2a:86: 69:05:b5:72:97:57:53:34:1a:76:23:12:84:c5:23: e7:68:b6:b1:cd:8e:1f:ae:ca:85:53:2b:61:39:b5: d3:64:d5:b1:65:1e:78:77:62:72:d5:76:91:53:ba: 1e:7a:67:c6:cd:65:df:5e:19:5d:1e:41:20:ff:f1: b9:40:66:37:d3:67:16:c4:2f:0b:eb:9c:df:a7:86: 5d:a5:7c:ad:6d:08:f1:61:2b:de:98:8e:69:f5:03: 86:e7:cb:11:e9:67:a9:05:74:57:9d:b9:99:19:84: 36:5f:c7:f6:84:c8:a0:ab:11:df:19:20:42:1b:e5: 9f:1b:1a:4b:dc:28:e4:67:16:cd:8d:89:27:08:59: ad:7a:5e:a7:2b:ab:d6:03:8f:13:af:71:a4:c9:ed: 23:b7:34:90:33:9d:0b:18:b6:41:7f:64:12:21:a5: 0f:d9:ca:7c:40:54:dd:a2:44:40:35:c8:25:9a:1b: c4:d7:a0:4e:13:6c:dc:c6:2b:00:b7:f7:a2:09:b7: e2:32:39:42:8a:23:35:86:d5:57:1a:e9:58:91:ff: e2:21:8d:88:67:92:85:e5:13:f4:85:00:bf:27:6c: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:A0:D6:DA:C3:3C:F6:62:CA:7C:C3:23:F3:4C:E6:FB:D2:30:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fb:5a:bf:eb:d2:37:e7:5b:1e:b0:9b:ba:2d:5c:95:5c:c9: e2:50:a4:a1:30:32:b9:f9:ac:01:8c:32:e0:f0:ee:6e:44:d6: 36:5b:47:1a:6e:84:28:6f:0a:58:41:e7:11:11:ca:dd:16:0a: 3a:a0:c5:39:bf:10:92:b3:9a:37:48:28:50:45:b6:8c:c8:8a: 0f:45:9c:04:b6:47:4f:fa:6c:e0:e1:6c:27:da:56:03:8f:19: 34:4a:14:f3:ac:67:72:67:88:7f:4e:38:85:ca:78:32:80:d6: 87:71:3b:1d:d0:55:7b:b6:fd:cd:ca:b7:57:29:48:b9:ab:42: cf:be:91:fc:5e:95:e3:c2:cf:4f:7e:39:34:6a:d2:aa:4e:77: 71:fa:25:ee:63:fd:9c:54:17:e3:bf:df:d6:6d:5c:10:98:ad: c9:ee:fb:8f:c2:93:fc:85:0e:7d:85:9b:be:36:65:99:a9:69: 9b:25:64:60:cd:4c:37:56:1a:81:52:47:e6:80:ba:9e:15:50: 6c:23:39:79:20:0a:a6:8e:60:d5:07:75:8a:40:0d:e4:f8:5d: 72:c6:b8:57:0e:38:b3:58:99:7e:86:ea:88:ca:1b:59:90:9b: 59:51:4e:bc:bd:7d:83:36:46:12:77:20:82:e6:00:56:d8:03: 34:a0:b9:1d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEt5vMhz9xM6U+JplQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YmY4MmU4NTQtYjMxZS00ODEzLTg1NWMtN2IzMzdjMTI5MzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUtpEDd/PTuX1Y8egEHaW48YheGCXMESA25S KoZpBbVyl1dTNBp2IxKExSPnaLaxzY4frsqFUythObXTZNWxZR54d2Jy1XaRU7oe emfGzWXfXhldHkEg//G5QGY302cWxC8L65zfp4ZdpXytbQjxYSvemI5p9QOG58sR 6WepBXRXnbmZGYQ2X8f2hMigqxHfGSBCG+WfGxpL3CjkZxbNjYknCFmtel6nK6vW A48Tr3Gkye0jtzSQM50LGLZBf2QSIaUP2cp8QFTdokRANcglmhvE16BOE2zcxisA t/eiCbfiMjlCiiM1htVXGulYkf/iIY2IZ5KF5RP0hQC/J2x2ZQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMHwoNbawzz2Ysp8wyPzTOb70jBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvYTQ3MzQ2MTctNDRjNS0z Mjg5LWJmNjYtNGNiYWExNDVjYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcftav+vSN+dbHrCbui1clVzJ4lCkoTAyufmsAYwy4PDu bkTWNltHGm6EKG8KWEHnERHK3RYKOqDFOb8QkrOaN0goUEW2jMiKD0WcBLZHT/ps 4OFsJ9pWA48ZNEoU86xncmeIf044hcp4MoDWh3E7HdBVe7b9zcq3VylIuatCz76R /F6V48LPT345NGrSqk53cfol7mP9nFQX47/f1m1cEJitye77j8KT/IUOfYWbvjZl malpmyVkYM1MN1YagVJH5oC6nhVQbCM5eSAKpo5g1Qd1ikAN5Phdcsa4Vw44s1iZ fobqiMobWZCbWVFOvL19gzZGEncgguYAVtgDNKC5HQ== -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:03 2025 by rpki-client