$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/bbfd1f22-20cc-36d2-b1da-ac5cf50b1033.roa File: bbfd1f22-20cc-36d2-b1da-ac5cf50b1033.roa (raw, json) Hash identifier: wx0isZF1C106jPyPTYNo/JI5nHTgq73xHYr2ZGoqVT8= Subject key identifier: 9D:DF:3F:B0:E5:13:F3:4C:A7:AB:60:5A:DF:AE:A8:1C:47:C6:20:2D Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B78574B36E2F09F5F6C7E3538 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/bbfd1f22-20cc-36d2-b1da-ac5cf50b1033.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 393559 IP address blocks: 156.70.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4b:36:e2:f0:9f:5f:6c:7e:35:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=76bb81a8-9c4f-47e6-8ae9-d4738b9827ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:20:78:e2:6f:93:21:5a:3c:f9:97:bc:ac:d5: 1d:db:9b:14:66:28:f1:0e:63:38:6a:5e:0c:6f:20: 3a:f3:d3:bb:f2:3d:1e:2e:51:5e:74:49:dd:bc:56: 33:9a:24:61:95:a7:7c:d0:25:d5:4e:ec:e0:3b:3d: 81:76:a7:88:c3:57:49:32:69:01:e6:0c:f7:8b:0b: 57:70:76:d3:d1:a5:94:ef:73:f3:4a:1f:dd:88:2b: 4a:ec:f0:e6:e5:45:a6:10:0d:01:35:64:d4:35:99: 97:99:f1:e7:84:2c:5c:34:b1:b0:d2:58:cb:27:36: db:53:6f:7c:aa:7c:76:ed:68:bb:c7:10:7c:02:66: 24:8c:85:1e:49:60:9a:65:83:60:ce:d1:e6:bd:39: fe:10:87:fb:ee:a6:87:f8:69:2f:e1:80:4c:b5:1e: c0:5e:c0:a3:54:5d:54:03:c5:ec:0a:9a:9d:ed:0a: 4f:bb:37:c3:fa:ec:d6:c3:0b:63:a4:54:50:dc:99: 9c:33:51:2b:9a:b9:67:68:7c:44:c0:c2:66:bb:fa: 7d:4e:29:c9:ad:d3:d0:04:cd:45:a5:76:7e:ce:85: 4f:52:9a:f6:a8:99:42:58:b4:80:ff:5c:6d:3c:f1: a7:4b:1d:4a:ff:8a:5d:f8:5f:52:75:14:f3:42:fc: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DF:3F:B0:E5:13:F3:4C:A7:AB:60:5A:DF:AE:A8:1C:47:C6:20:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/bbfd1f22-20cc-36d2-b1da-ac5cf50b1033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:44:23:6d:87:33:5a:24:9f:e8:ca:dc:f7:e8:c4:66:67:cd: a4:44:e9:b1:1c:b2:3b:bb:c6:2d:68:9b:23:4e:d1:9b:ee:a3: c0:5b:c1:13:40:fb:cb:dd:c4:a2:55:92:18:69:f6:1c:0a:64: 74:62:78:da:c3:56:a5:37:fe:f1:70:0f:91:13:a8:ad:1d:4e: 18:ae:b1:a1:cb:b1:c4:b1:d9:b8:df:bd:c5:7d:c0:ff:03:34: 81:55:58:0c:d8:bc:86:2f:63:34:cb:05:d8:40:95:d2:a6:45: 7c:36:c0:a3:68:f7:dc:7e:41:19:48:d3:58:b2:dc:8b:12:64: 3d:4e:d6:72:cc:3e:3f:67:f9:f1:95:54:c3:1b:64:d2:23:85: f3:ae:38:e0:c8:57:1c:bb:29:5b:31:03:4b:b6:a7:9c:b5:49: ba:ad:f5:f8:20:c6:8a:a0:83:48:90:15:55:87:6c:be:21:b5: ad:12:f5:e4:34:a5:de:06:e5:79:5a:67:87:c3:d0:d6:e7:41: 69:9e:df:6c:13:de:3d:ba:42:4d:ec:24:ac:ec:88:7f:a1:bf: 93:5b:32:f0:63:8e:56:38:5b:04:e5:3c:ab:b1:4b:92:02:07: 79:67:a5:02:5e:16:3e:d3:e9:1a:98:b4:39:22:ec:ad:0a:25: e8:35:23:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0s24vCfX2x+NTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NzZiYjgxYTgtOWM0Zi00N2U2LThhZTktZDQ3MzhiOTgyN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiB44m+TIVo8+Ze8rNUd25sUZijxDmM4al4M byA689O78j0eLlFedEndvFYzmiRhlad80CXVTuzgOz2BdqeIw1dJMmkB5gz3iwtX cHbT0aWU73PzSh/diCtK7PDm5UWmEA0BNWTUNZmXmfHnhCxcNLGw0ljLJzbbU298 qnx27Wi7xxB8AmYkjIUeSWCaZYNgztHmvTn+EIf77qaH+Gkv4YBMtR7AXsCjVF1U A8XsCpqd7QpPuzfD+uzWwwtjpFRQ3JmcM1ErmrlnaHxEwMJmu/p9TinJrdPQBM1F pXZ+zoVPUpr2qJlCWLSA/1xtPPGnSx1K/4pd+F9SdRTzQvzvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3fP7DlE/NMp6tgWt+uqBxHxiAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvYmJmZDFmMjItMjBjYy0z NmQyLWIxZGEtYWM1Y2Y1MGIxMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJEI22HM1okn+jK3PfoxGZnzaRE6bEcsju7xi1omyNO0Zvuo8BbwRNA +8vdxKJVkhhp9hwKZHRieNrDVqU3/vFwD5ETqK0dThiusaHLscSx2bjfvcV9wP8D NIFVWAzYvIYvYzTLBdhAldKmRXw2wKNo99x+QRlI01iy3IsSZD1O1nLMPj9n+fGV VMMbZNIjhfOuOODIVxy7KVsxA0u2p5y1Sbqt9fggxoqgg0iQFVWHbL4hta0S9eQ0 pd4G5XlaZ4fD0NbnQWme32wT3j26Qk3sJKzsiH+hv5NbMvBjjlY4WwTlPKuxS5IC B3lnpQJeFj7T6RqYtDki7K0KJeg1Izs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:42:06 2025 by rpki-client