$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa File: 3581304a-962f-3365-9bef-ffc42b70f1cf.roa (raw, json) Hash identifier: 3zs/v/CVgwHE7DIGS2xXH7rPNSIFKhV5S21UzAXaRO4= Subject key identifier: F3:9D:0D:59:4B:C8:70:69:5D:54:B5:DB:12:B2:0C:0E:9C:B5:CC:F0 Certificate issuer: /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530 Certificate serial: 010D0C9F4328584B95A78840F2F00A44F045E540 Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 19050 IP address blocks: 156.40.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:88:40:f2:f0:0a:44:f0:45:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0ba222fc-b3e9-4314-abd8-49eb8d75578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:d3:07:10:88:b0:91:40:93:8f:0b:84:61: 90:58:57:4d:1e:e7:be:68:d9:c5:01:41:d8:ab:4e: 97:f3:7e:01:cd:73:45:21:6c:e1:26:17:af:c8:e5: e6:d3:6a:61:08:d6:eb:7c:6b:8d:b4:e4:94:4c:b7: 63:43:05:ba:cf:8f:b6:c7:e2:5a:da:9a:12:ae:79: 37:d7:8d:13:ef:43:0a:52:27:7e:a6:71:51:74:14: ff:28:2d:88:41:65:05:f5:b3:6f:c9:28:ad:eb:28: 08:e2:4b:27:24:f7:50:81:b9:f3:6c:3c:30:e3:5b: 9b:9a:43:53:18:49:94:4b:e8:47:e9:fb:ba:ad:ac: 66:ce:73:f3:54:31:a1:27:7a:14:9d:d9:f8:65:2e: 80:03:f3:72:fc:95:c0:aa:e3:bd:da:3a:da:26:d0: dd:48:3d:e3:78:86:3f:21:a5:60:f4:61:77:c1:2e: 89:a1:0a:ca:b3:f0:e0:bb:72:e8:a3:db:ac:68:51: d6:8e:0f:37:ef:0d:8d:f5:a5:bd:20:d8:95:96:f4: 4c:d5:33:ee:64:8a:a2:eb:6e:53:05:41:54:51:28: 75:af:69:3e:b5:e5:70:2c:97:cd:0a:5d:c6:4c:57: ed:95:bd:58:34:bf:7f:47:ee:75:06:d3:3a:9c:09: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:0D:59:4B:C8:70:69:5D:54:B5:DB:12:B2:0C:0E:9C:B5:CC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl X509v3 Authority Key Identifier: keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer sbgp-ipAddrBlock: critical IPv4: 156.40.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:94:0c:21:30:f1:81:3a:4e:4b:cd:ae:26:e7:67:ce:9f:f6: 9f:1f:2d:ec:6c:54:a0:28:68:c4:9c:e7:08:74:d7:cf:5c:4f: 7f:23:45:b6:47:1a:93:9c:a3:b3:0e:c1:7f:8c:b1:d0:f7:ec: 6d:12:77:13:c7:f4:72:e4:f9:85:25:78:4d:fb:09:ca:5f:2f: f2:b9:14:11:8e:a2:62:c1:5c:c3:1d:dd:03:9d:1d:31:07:87: b4:17:8b:b6:7b:8d:03:34:08:a9:60:65:fe:ae:00:18:f2:b7: a5:12:ea:8e:50:8f:60:39:3b:92:3b:ac:36:08:4f:dd:44:fe: 7f:7b:79:2f:70:8a:5d:58:19:60:9f:73:82:ad:8e:b1:e3:a2: f8:87:73:c3:d5:43:3e:c3:38:2b:1a:c1:0a:e0:ab:29:f3:c4: c6:bf:75:8d:09:a9:9e:3c:6f:c0:e1:cf:ae:b0:4a:eb:4e:79: 39:a3:c8:16:4d:70:11:a8:55:e2:94:1c:34:7f:87:ab:4a:e7: 74:a4:3d:93:38:5e:b0:d5:30:aa:c7:ab:c0:11:4d:75:70:99: 9d:90:89:f1:b0:21:80:fa:ac:a9:20:03:dc:23:93:47:f3:56: a9:a7:4f:bd:b4:bb:34:c5:b3:e0:0e:1b:74:2b:76:23:5e:d6: 74:31:5f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4hA8vAKRPBF5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdmNDcwNTEtMjRlOS00YzZkLWE3ZjEtMjE2NTI5MmM1 NTMwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGJhMjIyZmMtYjNlOS00MzE0LWFiZDgtNDllYjhkNzU1NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fTBxCIsJFAk48LhGGQWFdNHue+aNnFAUHY q06X834BzXNFIWzhJhevyOXm02phCNbrfGuNtOSUTLdjQwW6z4+2x+Ja2poSrnk3 140T70MKUid+pnFRdBT/KC2IQWUF9bNvySit6ygI4ksnJPdQgbnzbDww41ubmkNT GEmUS+hH6fu6raxmznPzVDGhJ3oUndn4ZS6AA/Ny/JXAquO92jraJtDdSD3jeIY/ IaVg9GF3wS6JoQrKs/Dgu3Loo9usaFHWjg837w2N9aW9INiVlvRM1TPuZIqi625T BUFUUSh1r2k+teVwLJfNCl3GTFftlb1YNL9/R+51BtM6nAmQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOdDVlLyHBpXVS12xKyDA6ctczwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0 NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1MjkyYzU1MzAvMzU4MTMwNGEtOTYyZi0z MzY1LTliZWYtZmZjNDJiNzBmMWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjdmNDcwNTEtMjRlOS00YzZkLWE3 ZjEtMjE2NTI5MmM1NTMwL2I3ZjQ3MDUxLTI0ZTktNGM2ZC1hN2YxLTIxNjUyOTJj NTUzMC5jcmwwHwYDVR0jBBgwFoAUb2chWIkPmgmxclYLeTq51x3dPP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1 MjkyYzU1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnChfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqUDCEw8YE6TkvNribnZ86f9p8fLexsVKAoaMSc5wh0189cT38jRbZH GpOco7MOwX+MsdD37G0SdxPH9HLk+YUleE37CcpfL/K5FBGOomLBXMMd3QOdHTEH h7QXi7Z7jQM0CKlgZf6uABjyt6US6o5Qj2A5O5I7rDYIT91E/n97eS9wil1YGWCf c4KtjrHjoviHc8PVQz7DOCsawQrgqynzxMa/dY0JqZ48b8Dhz66wSutOeTmjyBZN cBGoVeKUHDR/h6tK53SkPZM4XrDVMKrHq8ARTXVwmZ2QifGwIYD6rKkgA9wjk0fz VqmnT720uzTFs+AOG3QrdiNe1nQxX1M= -----END CERTIFICATE-----Generated at Mon Oct 20 16:07:29 2025 by rpki-client