$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa File: 6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa (raw, json) Hash identifier: 5mxWHL5C1DvAk4EsfOr+QxHwLYAc8VEagd5ZeFBDm20= Subject key identifier: FC:38:95:42:8E:09:9A:4C:67:41:00:0E:5A:AA:9D:77:47:A1:EE:80 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B3A0FC31B77E457C8C17338C0 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa Signing time: Wed 17 Sep 2025 17:36:21 +0000 ROA not before: Wed 17 Sep 2025 17:36:21 +0000 ROA not after: Tue 16 Dec 2025 18:36:21 +0000 asID: 198949 IP address blocks: 156.70.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:0f:c3:1b:77:e4:57:c8:c1:73:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 17 17:36:21 2025 GMT Not After : Dec 16 18:36:21 2025 GMT Subject: CN=230fda97-a4f1-49f7-9d7a-c94e718f2a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:28:b1:80:e1:fa:86:a8:ca:42:79:c0:3e: f0:a1:4e:9c:47:52:e0:da:ac:80:de:6b:32:24:bf: c1:4a:fb:fb:21:12:a3:06:11:78:cd:eb:a4:ef:a4: 65:5c:36:53:8d:30:9c:be:08:77:a4:02:c6:7a:aa: e3:6b:77:df:12:fe:85:35:4c:b3:88:50:88:75:62: 3b:95:9b:92:2f:ee:4a:7e:ec:83:c6:44:3e:a6:94: e8:cb:32:53:e6:83:d2:92:e0:6f:fd:42:db:f2:48: 35:5a:17:48:24:42:c9:95:e7:df:b3:2f:3d:7a:6a: 06:7d:8f:94:b6:17:7d:fe:27:ca:e5:94:4f:e3:23: 62:09:70:00:2f:30:81:ee:47:4e:ae:1b:98:f0:14: 7f:96:c6:c2:b3:26:74:fe:46:e7:5a:96:fd:2b:39: 3b:46:78:2f:1b:47:fe:76:ae:fb:0b:5a:de:aa:f2: 39:a5:f8:06:20:f5:95:ec:6c:22:e8:61:f3:27:85: 13:c4:9d:32:ba:a2:02:e3:60:ed:7f:62:21:a4:78: 5a:43:90:91:b2:50:2c:fc:01:50:c0:56:d9:86:35: 6f:22:86:79:62:0b:9e:40:33:bc:f8:02:e2:47:6c: b1:0d:f9:a5:6e:4a:66:4e:91:6e:9b:eb:7f:d6:21: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:95:42:8E:09:9A:4C:67:41:00:0E:5A:AA:9D:77:47:A1:EE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3c:9c:43:80:f9:6e:4a:06:13:79:97:c9:aa:97:a8:c1:a5: 53:5f:bb:d1:52:90:6e:42:54:5b:ad:d0:9f:b0:88:a9:93:ff: 29:f1:a1:09:da:09:e8:7b:ec:8c:ee:e9:5c:7c:b0:15:51:81: 91:f4:0b:8c:5c:ba:43:b4:41:ef:3c:34:92:0b:46:25:83:15: 9d:48:1e:cd:36:50:aa:a5:b7:1e:29:67:5e:da:97:59:31:28: 4e:fd:4e:ba:22:27:64:40:e5:53:f9:fa:83:d3:1c:00:24:b8: 8e:9c:11:7e:6f:11:ac:1d:39:25:80:cd:42:cb:6c:8c:48:77: e7:52:ca:9b:9c:6b:47:e9:07:a5:24:b3:de:87:78:d3:68:b9: 96:0f:8c:b4:8a:fd:a3:f6:62:f3:f9:4e:a7:c0:5d:d6:d7:3e: 31:6d:ce:6b:05:62:dc:80:74:ca:0b:63:05:d0:66:ef:6f:23: 6c:31:35:3c:f1:4a:15:17:68:bb:04:db:3d:de:30:31:58:54: 71:1d:c4:0d:33:77:08:9b:66:68:4f:f8:78:89:42:38:f4:33: 93:1a:d5:ac:bc:e0:7f:73:c2:51:12:54:c9:a3:e4:5f:94:49: 7c:18:f8:4e:9d:57:66:08:a6:da:a7:e0:c0:07:d6:11:62:70: 42:13:a1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs6D8Mbd+RXyMFzOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDkxNzE3MzYyMVoXDTI1MTIxNjE4MzYyMVowLzEtMCsGA1UEAxMk MjMwZmRhOTctYTRmMS00OWY3LTlkN2EtYzk0ZTcxOGYyYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfQosYDh+oaoykJ5wD7woU6cR1Lg2qyA3msy JL/BSvv7IRKjBhF4zeuk76RlXDZTjTCcvgh3pALGeqrja3ffEv6FNUyziFCIdWI7 lZuSL+5KfuyDxkQ+ppToyzJT5oPSkuBv/ULb8kg1WhdIJELJleffsy89emoGfY+U thd9/ifK5ZRP4yNiCXAALzCB7kdOrhuY8BR/lsbCsyZ0/kbnWpb9Kzk7RngvG0f+ dq77C1reqvI5pfgGIPWV7Gwi6GHzJ4UTxJ0yuqIC42Dtf2IhpHhaQ5CRslAs/AFQ wFbZhjVvIoZ5YgueQDO8+ALiR2yxDfmlbkpmTpFum+t/1iFxpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw4lUKOCZpMZ0EADlqqnXdHoe6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNjg4NGMzZmUtMTRlYy0z ZDUxLTk0YTMtOWFkZTljMGU0MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw8nEOA+W5KBhN5l8mql6jBpVNfu9FSkG5CVFut0J+wiKmT/ynxoQna Ceh77Izu6Vx8sBVRgZH0C4xcukO0Qe88NJILRiWDFZ1IHs02UKqltx4pZ17al1kx KE79TroiJ2RA5VP5+oPTHAAkuI6cEX5vEawdOSWAzULLbIxId+dSypuca0fpB6Uk s96HeNNouZYPjLSK/aP2YvP5TqfAXdbXPjFtzmsFYtyAdMoLYwXQZu9vI2wxNTzx ShUXaLsE2z3eMDFYVHEdxA0zdwibZmhP+HiJQjj0M5Ma1ay84H9zwlESVMmj5F+U SXwY+E6dV2YIptqn4MAH1hFicEIToQI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:06:13 2025 by rpki-client