$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa File: 422a0f33-2965-34cf-afb3-c607d0e91cbb.roa (raw, json) Hash identifier: W0XV82UGezVZYrTgJd4Vj+jkjIQc9VokwblgvLZcgw4= Subject key identifier: 0C:3E:D4:8C:F1:A2:F4:99:42:FD:BA:83:88:9E:39:03:4D:7F:EB:8A Certificate issuer: /CN=15986e61-33e4-484c-ae89-1cac7765c365 Certificate serial: 010D0C9F4328584AECC1215FF2BC007A6C21B4C6 Authority key identifier: B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 397906 IP address blocks: 158.247.61.0/24 maxlen: 24 2606:b840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:21:5f:f2:bc:00:7a:6c:21:b4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15986e61-33e4-484c-ae89-1cac7765c365 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bfe50db5-1a3e-4fda-b174-87e6e4599363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:87:f5:78:ae:dd:7c:2c:5a:6e:3e:aa:cf: 6d:e8:d0:d4:83:dd:52:74:79:40:63:62:e0:31:55: c6:a1:63:7b:4c:ed:25:60:be:7c:60:26:43:2d:98: 8c:a5:67:7b:91:4d:f3:38:02:df:e7:2f:f6:4d:ec: d3:59:c7:4d:6d:cf:1c:a6:4c:aa:51:e3:21:4d:04: 51:b1:7e:35:a7:cb:bf:a4:44:09:33:ce:2e:5a:c6: 37:44:a8:45:f0:b8:2d:3d:ab:f9:c3:5c:1e:e6:c5: da:2e:cc:3f:72:1f:4a:ce:0a:b7:ac:d9:f1:ba:f1: 3f:5c:e3:fe:6d:15:74:2e:c6:e3:49:4f:52:fa:8b: 93:7f:83:e3:3e:46:31:ef:4b:a1:7f:b0:66:c8:75: a6:1c:08:dc:16:8c:d7:c6:fc:05:01:fb:dd:5f:a0: 6f:c5:ae:9d:c6:db:87:f5:76:c6:07:25:65:6a:d2: ab:95:19:de:2b:14:ae:bf:0e:18:dc:19:ec:71:6c: 00:43:89:cf:3b:12:02:80:82:4f:97:34:b1:22:a5: 4a:70:79:7a:77:db:5f:ef:c7:4f:b3:f3:25:8e:e9: 7e:55:9b:6f:32:99:ea:04:fa:3f:2e:59:41:e5:54: 7e:0f:95:e2:82:df:6d:94:dd:68:dc:e2:27:67:ab: 13:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3E:D4:8C:F1:A2:F4:99:42:FD:BA:83:88:9E:39:03:4D:7F:EB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl X509v3 Authority Key Identifier: keyid:B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer sbgp-ipAddrBlock: critical IPv4: 158.247.61.0/24 IPv6: 2606:b840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:30:c3:05:ee:55:82:6a:f9:70:29:22:6c:2d:c5:ed:d9:49: be:25:bb:9b:04:ef:9e:f9:c9:2b:26:ee:fc:69:7f:5c:65:51: 52:81:81:bd:9c:f3:f6:15:b8:03:89:8e:c9:3a:3f:17:5a:1b: 13:cf:57:80:fa:95:88:f7:15:38:1f:93:1e:60:81:4d:5b:ed: d2:ce:cf:ce:3f:07:79:b3:06:fa:f2:01:29:f5:2d:cd:e2:74: f3:37:36:96:2d:6c:eb:8c:ae:57:0f:12:4b:cf:b3:90:0d:43: 9a:c0:46:e4:1b:a2:f9:33:4b:0b:39:d0:18:88:9e:ea:f9:f9: 28:60:3e:c8:f3:15:5c:b9:18:de:81:15:74:60:23:93:5f:d4: 41:cb:53:79:1e:88:45:e0:52:bb:e3:f8:59:77:6e:5b:b2:e1: d6:24:5d:dc:6e:1f:cf:01:b0:e1:3d:62:56:ae:41:75:b2:c8: 40:54:b8:0c:1e:05:a2:b3:d5:e3:e5:72:c9:10:c5:a2:16:a1: ab:43:bf:db:66:9f:8d:02:2c:0d:c0:96:3b:1c:7f:43:2a:f1: 2d:9a:c6:94:7f:a8:1c:01:ed:85:8f:d4:fa:90:d0:c9:d1:cf: 3b:5b:37:b5:a9:62:db:fd:f5:07:0f:c5:5a:9b:d6:6e:16:2f: 5c:02:46:7e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErswSFf8rwAemwhtMYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU5ODZlNjEtMzNlNC00ODRjLWFlODktMWNhYzc3NjVj MzY1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmZlNTBkYjUtMWEzZS00ZmRhLWIxNzQtODdlNmU0NTk5MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgqH9Xiu3XwsWm4+qs9t6NDUg91SdHlAY2Lg MVXGoWN7TO0lYL58YCZDLZiMpWd7kU3zOALf5y/2TezTWcdNbc8cpkyqUeMhTQRR sX41p8u/pEQJM84uWsY3RKhF8LgtPav5w1we5sXaLsw/ch9Kzgq3rNnxuvE/XOP+ bRV0LsbjSU9S+ouTf4PjPkYx70uhf7BmyHWmHAjcFozXxvwFAfvdX6Bvxa6dxtuH 9XbGByVlatKrlRneKxSuvw4Y3BnscWwAQ4nPOxICgIJPlzSxIqVKcHl6d9tf78dP s/Mljul+VZtvMpnqBPo/LllB5VR+D5Xigt9tlN1o3OInZ6sTnwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAw+1IzxovSZQv26g4ieOQNNf+uKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNTk4 NmU2MS0zM2U0LTQ4NGMtYWU4OS0xY2FjNzc2NWMzNjUvNDIyYTBmMzMtMjk2NS0z NGNmLWFmYjMtYzYwN2QwZTkxY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTU5ODZlNjEtMzNlNC00ODRjLWFl ODktMWNhYzc3NjVjMzY1LzE1OTg2ZTYxLTMzZTQtNDg0Yy1hZTg5LTFjYWM3NzY1 YzM2NS5jcmwwHwYDVR0jBBgwFoAUtME+izwf73jnT71Vd/pG+xOH82QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNTk4NmU2MS0zM2U0LTQ4NGMtYWU4OS0xY2Fj Nzc2NWMzNjUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAnvc9MA0E AgACMAcDBQAmBrhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADUwwwXuVYJq+XApImwtxe3ZSb4lu5sE7575 ySsm7vxpf1xlUVKBgb2c8/YVuAOJjsk6PxdaGxPPV4D6lYj3FTgfkx5ggU1b7dLO z84/B3mzBvryASn1Lc3idPM3NpYtbOuMrlcPEkvPs5ANQ5rARuQbovkzSws50BiI nur5+ShgPsjzFVy5GN6BFXRgI5Nf1EHLU3keiEXgUrvj+Fl3bluy4dYkXdxuH88B sOE9YlauQXWyyEBUuAweBaKz1ePlcskQxaIWoatDv9tmn40CLA3Aljscf0Mq8S2a xpR/qBwB7YWP1PqQ0MnRzztbN7WpYtv99QcPxVqb1m4WL1wCRn4= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:12 2025 by rpki-client