$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/cf4097f1-0bcb-33ca-92b9-40e9da949cfd.roa File: cf4097f1-0bcb-33ca-92b9-40e9da949cfd.roa (raw, json) Hash identifier: yAq9c9SPHK7fflxOr+ahyghPMp43Lud/H8b842wanos= Subject key identifier: 55:A4:E7:10:16:BD:FC:83:0E:A7:02:5C:98:B7:04:CB:FD:91:47:9F Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2 Certificate serial: 010D0C9F4328584ADB20A29AF9A33F6DFF135BA0 Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/cf4097f1-0bcb-33ca-92b9-40e9da949cfd.roa Signing time: Thu 14 Aug 2025 17:28:33 +0000 ROA not before: Thu 14 Aug 2025 17:28:33 +0000 ROA not after: Wed 12 Nov 2025 18:28:33 +0000 asID: 1766 IP address blocks: 158.26.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:20:a2:9a:f9:a3:3f:6d:ff:13:5b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Validity Not Before: Aug 14 17:28:33 2025 GMT Not After : Nov 12 18:28:33 2025 GMT Subject: CN=40248232-4c4b-4bd1-a8f0-549bea544e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:6f:c5:43:c9:54:a8:99:b6:b9:76:61:23: e1:73:b5:68:f2:56:3d:15:5b:1d:b9:40:37:77:2a: e3:0f:33:0b:3e:ee:59:2c:5f:b8:84:f3:06:dd:8a: 93:11:a0:10:2a:2a:ab:f1:ed:b4:85:42:ff:2f:32: 7e:f5:57:dc:47:a4:d1:fb:df:0c:bc:48:01:a1:16: f8:ab:ec:93:b4:44:60:d8:4d:20:93:1d:9f:f1:90: 5a:9a:cf:d5:8b:ca:61:7d:70:47:f6:2b:16:46:b2: 55:ef:ef:83:9c:79:fd:09:2d:28:05:b2:63:3f:46: 32:16:eb:00:d6:ec:3d:c8:42:09:14:cc:e1:f6:b7: 7e:fd:31:44:1f:d8:cc:e2:7a:e9:bc:a4:a7:07:48: a3:34:11:45:c7:01:3f:a2:06:7d:e6:5e:0d:c5:ae: 80:f3:de:42:9f:e1:20:e2:34:a0:5e:f7:d1:09:fb: cf:0e:8a:71:dc:28:20:68:74:c0:df:62:c5:3e:28: b0:cc:58:61:ff:34:b6:43:d2:84:c3:31:4b:78:f3: 93:af:29:88:ed:06:a2:30:c9:b0:85:67:11:a2:af: 55:3b:cc:f5:7b:9e:a7:70:e6:ae:5d:d7:c4:9e:d9: 02:1a:b0:7c:97:2c:e8:95:53:c5:d6:5b:64:2f:5b: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:E7:10:16:BD:FC:83:0E:A7:02:5C:98:B7:04:CB:FD:91:47:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/cf4097f1-0bcb-33ca-92b9-40e9da949cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl X509v3 Authority Key Identifier: keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer sbgp-ipAddrBlock: critical IPv4: 158.26.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:27:72:27:4e:c4:18:0b:99:8f:47:af:6f:7e:91:8b:fe:35: 4f:6e:16:94:ae:59:e1:f8:63:72:80:4a:23:7a:e9:15:89:27: ee:1e:20:8c:a9:3f:bb:d4:7a:8d:97:bf:63:27:d8:8a:1d:43: df:18:b3:80:e4:32:d8:68:f0:88:86:74:65:0d:43:57:5e:1d: 7a:e4:bd:53:ac:91:c6:56:cc:b1:81:ce:6f:da:c2:d8:8d:45: 75:f2:1f:d4:2e:b0:ba:69:81:3c:4d:ae:0e:2d:5c:97:23:29: 19:67:b8:47:4a:df:bf:da:71:a9:8c:9e:8f:08:82:0d:f5:a9: 22:07:97:2f:bf:9a:d9:b9:a8:54:8a:fb:5a:7d:1c:dc:ac:42: 3b:64:ee:e0:64:3f:ed:2b:93:d3:ed:a1:b0:28:c0:40:b4:ee: 9e:80:0c:38:c9:ee:70:a9:26:31:25:8e:2c:23:b2:0c:8e:b1: c5:b5:c1:a1:31:8c:bf:32:b2:07:fc:9f:44:60:e1:16:12:d8: a6:ae:cc:ca:fb:fc:a2:da:38:e2:c3:c8:ed:b9:e8:ed:37:a7: d1:c0:1f:9d:37:88:ac:02:6c:01:6f:1e:58:17:9a:d8:7e:f2: df:94:87:62:a5:b1:37:39:3a:f4:a9:18:74:07:bf:43:eb:a9: df:6b:43:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErbIKKa+aM/bf8TW6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1 ZGIyMB4XDTI1MDgxNDE3MjgzM1oXDTI1MTExMjE4MjgzM1owLzEtMCsGA1UEAxMk NDAyNDgyMzItNGM0Yi00YmQxLWE4ZjAtNTQ5YmVhNTQ0ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRhvxUPJVKiZtrl2YSPhc7Vo8lY9FVsduUA3 dyrjDzMLPu5ZLF+4hPMG3YqTEaAQKiqr8e20hUL/LzJ+9VfcR6TR+98MvEgBoRb4 q+yTtERg2E0gkx2f8ZBams/Vi8phfXBH9isWRrJV7++DnHn9CS0oBbJjP0YyFusA 1uw9yEIJFMzh9rd+/TFEH9jM4nrpvKSnB0ijNBFFxwE/ogZ95l4Nxa6A895Cn+Eg 4jSgXvfRCfvPDopx3CggaHTA32LFPiiwzFhh/zS2Q9KEwzFLePOTrymI7QaiMMmw hWcRoq9VO8z1e56ncOauXdfEntkCGrB8lyzolVPF1ltkL1vDEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWk5xAWvfyDDqcCXJi3BMv9kUefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2 NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvY2Y0MDk3ZjEtMGJjYi0z M2NhLTkyYjktNDBlOWRhOTQ5Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDVhNjU0ZjUtNDMwNi00MmY4LWE1 NDctMGEyMTI2NWQ1ZGIyLzA1YTY1NGY1LTQzMDYtNDJmOC1hNTQ3LTBhMjEyNjVk NWRiMi5jcmwwHwYDVR0jBBgwFoAUcqZ1c3d2/kvn4Dnlhd2Pwvp/3WMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIx MjY1ZDVkYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnhr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4ncidOxBgLmY9Hr29+kYv+NU9uFpSuWeH4Y3KASiN66RWJJ+4eIIyp P7vUeo2Xv2Mn2IodQ98Ys4DkMtho8IiGdGUNQ1deHXrkvVOskcZWzLGBzm/awtiN RXXyH9QusLppgTxNrg4tXJcjKRlnuEdK37/acamMno8Igg31qSIHly+/mtm5qFSK +1p9HNysQjtk7uBkP+0rk9PtobAowEC07p6ADDjJ7nCpJjEljiwjsgyOscW1waEx jL8ysgf8n0Rg4RYS2KauzMr7/KLaOOLDyO256O03p9HAH503iKwCbAFvHlgXmth+ 8t+Uh2KlsTc5OvSpGHQHv0Prqd9rQ84= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:24 2025 by rpki-client