$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa File: a31fe149-f14e-36f1-82c6-a4875e810e1b.roa (raw, json) Hash identifier: dXw7DLcyjc2bEQZ6CvaW4md5ECSocOiZ+LtV7AU9Tw8= Subject key identifier: 17:56:8A:64:76:48:58:29:3D:DB:EC:5D:B9:74:87:5A:C4:5F:22:98 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584AD93674BA6FAA1F0ED7F18390 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 54535 IP address blocks: 156.37.202.0/24 maxlen: 24 156.37.203.0/24 maxlen: 24 156.37.250.0/24 maxlen: 24 156.37.251.0/24 maxlen: 24 156.37.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:74:ba:6f:aa:1f:0e:d7:f1:83:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=3cf60389-3dca-46fc-a2ef-f37c616ef8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ba:e2:fb:a3:a4:90:04:a8:b5:95:6a:20:ae: 9e:5b:83:16:79:00:e3:92:ab:85:e1:ad:e6:6c:42: 6b:4e:47:69:45:53:0b:54:28:a3:68:d6:38:f5:82: 23:5d:31:81:2b:bc:02:fb:f4:3d:3a:43:54:cb:d8: 79:dd:71:1a:c5:ad:1e:21:97:1b:78:32:09:ab:5a: ca:4f:8c:4c:04:c7:34:bb:10:16:19:04:77:3d:0a: 6d:bc:08:7c:48:df:da:19:26:0b:b9:a0:df:61:87: d3:0f:c2:a2:fe:4c:32:4c:91:4b:e7:69:1c:ef:f6: 89:8e:0c:0c:3c:c8:c2:de:df:ad:e6:51:a1:27:cf: b9:84:be:86:35:7e:18:59:df:ce:27:66:09:20:f9: 60:a4:e5:3d:1d:07:e1:5f:a0:27:ee:66:40:eb:a0: 9b:a2:0f:63:cd:54:82:e3:e0:b6:47:68:44:73:7e: b8:bb:b9:3d:98:e5:ca:de:74:cd:0b:bf:82:e4:01: 00:a1:22:50:50:f0:88:77:f5:d0:e5:ae:82:15:0f: 36:be:9f:98:ed:69:7b:a3:cc:e7:ac:8d:a4:ff:e2: cd:2f:c7:ca:3d:d6:8c:cd:18:0c:4d:33:31:54:ef: 4a:d7:b4:7c:68:76:24:e0:f4:c0:f2:a8:32:4b:d2: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:56:8A:64:76:48:58:29:3D:DB:EC:5D:B9:74:87:5A:C4:5F:22:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.202.0/23 156.37.250.0/23 156.37.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ff:6a:bd:74:ac:87:c1:63:a4:66:04:a5:41:4d:28:dd:1c: 04:0b:b9:cc:f4:ac:54:68:79:03:f0:8a:be:08:8d:ec:09:34: 27:ff:d6:c4:47:00:e5:08:92:bc:1a:80:23:d6:9f:12:c3:d5: 68:62:da:3a:67:66:26:01:1b:ec:fd:17:49:b0:e1:6d:6a:cd: 10:57:8d:e8:87:30:e2:3b:cb:2e:30:b1:02:f4:53:5c:f4:2b: 9b:8f:d2:70:77:98:f2:9d:18:24:b5:d4:6b:36:98:bf:40:db: 47:e5:fa:24:0a:b1:ea:82:6d:e7:33:b0:ae:7b:46:b6:77:9e: fb:54:6b:aa:26:e6:95:92:ba:c7:61:85:c1:ab:24:35:18:10: 1a:c2:7f:c6:69:2b:01:71:06:17:d9:f2:56:ed:52:0c:2c:6c: a9:2f:56:0b:2d:c2:55:84:3d:5e:97:45:db:e8:6d:3a:7e:04: 73:42:bc:2b:7a:1d:6b:65:5f:99:6a:86:a3:16:5c:e0:62:28: b4:23:89:24:52:97:d0:b2:1d:0f:f4:79:37:f5:6f:16:18:3b: 53:11:df:ad:0d:5d:d6:d6:75:c2:f7:5c:5b:e2:92:7c:e4:01: 79:47:64:87:1e:71:9a:35:f9:fd:64:6c:31:8e:33:69:a4:0b: 9e:c5:25:28 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErZNnS6b6ofDtfxg5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk M2NmNjAzODktM2RjYS00NmZjLWEyZWYtZjM3YzYxNmVmOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ri+6OkkASotZVqIK6eW4MWeQDjkquF4a3m bEJrTkdpRVMLVCijaNY49YIjXTGBK7wC+/Q9OkNUy9h53XEaxa0eIZcbeDIJq1rK T4xMBMc0uxAWGQR3PQptvAh8SN/aGSYLuaDfYYfTD8Ki/kwyTJFL52kc7/aJjgwM PMjC3t+t5lGhJ8+5hL6GNX4YWd/OJ2YJIPlgpOU9HQfhX6An7mZA66Cbog9jzVSC 4+C2R2hEc364u7k9mOXK3nTNC7+C5AEAoSJQUPCId/XQ5a6CFQ82vp+Y7Wl7o8zn rI2k/+LNL8fKPdaMzRgMTTMxVO9K17R8aHYk4PTA8qgyS9L5NQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBdWimR2SFgpPdvsXbl0h1rEXyKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYTMxZmUxNDktZjE0ZS0z NmYxLTgyYzYtYTQ4NzVlODEwZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnCXKAwQB nCX6AwQAnCX9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH3/ar10rIfBY6RmBKVBTSjdHAQLucz0rFRoeQPw ir4IjewJNCf/1sRHAOUIkrwagCPWnxLD1Whi2jpnZiYBG+z9F0mw4W1qzRBXjeiH MOI7yy4wsQL0U1z0K5uP0nB3mPKdGCS11Gs2mL9A20fl+iQKseqCbeczsK57RrZ3 nvtUa6om5pWSusdhhcGrJDUYEBrCf8ZpKwFxBhfZ8lbtUgwsbKkvVgstwlWEPV6X RdvobTp+BHNCvCt6HWtlX5lqhqMWXOBiKLQjiSRSl9CyHQ/0eTf1bxYYO1MR360N XdbWdcL3XFviknzkAXlHZIcecZo1+f1kbDGOM2mkC57FJSg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:07:15 2025 by rpki-client