$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa File: d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json) Hash identifier: wSWuAYEIgBHjvMqedllAo/l8qLIB385d1QH1roFIngc= Subject key identifier: 88:2D:BB:53:C9:16:8E:65:81:41:AD:39:1A:59:64:41:63:15:82:7F Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584AD93674A54C75BB6E8DA10D20 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 54535 IP address blocks: 156.37.196.0/24 maxlen: 24 156.37.197.0/24 maxlen: 24 156.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:74:a5:4c:75:bb:6e:8d:a1:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=6d6a41e6-79e5-4315-9f7a-fa8dde9615f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:11:1a:13:6e:af:e9:ef:36:f0:a5:9a:77: 71:5a:ae:ab:b2:9b:32:b2:e8:1a:a7:5b:0e:1a:d5: 94:fc:7c:60:99:e7:b2:96:ef:75:48:a2:34:67:00: 5a:e4:44:33:3e:54:ea:da:87:93:b8:fd:60:34:5a: 6e:98:bd:f8:17:4a:a6:3e:0a:e8:0f:c3:b3:91:2d: 02:95:99:d5:4e:78:5a:ce:08:75:2e:21:6b:eb:d1: e2:04:5a:31:54:c1:d6:43:a9:cc:36:0a:fe:a1:63: c7:fb:a1:f5:c9:5d:5f:64:94:de:f2:f8:65:f2:0f: d9:49:06:37:34:82:d1:10:aa:53:06:72:ac:25:6d: a7:3e:5e:1e:26:27:55:f6:71:ae:e2:fc:46:35:e2: 3c:36:f4:3c:bb:9c:f4:0f:28:37:af:06:d7:a7:2f: 08:f0:97:98:e2:d1:b5:81:b0:df:75:1a:b6:b1:4b: 59:5e:4a:fd:44:b7:0c:7c:ac:32:cf:3c:b9:67:e3: 04:b3:ff:74:f9:66:b2:9e:9b:6a:aa:b3:f9:f2:91: 55:14:5f:f9:f2:90:6c:5e:07:93:ee:66:21:42:ae: 73:ea:36:58:fb:ae:15:16:f5:f7:1f:84:04:73:c1: 31:ad:bf:1a:ef:fb:86:59:4c:81:d6:b1:8d:45:f7: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:BB:53:C9:16:8E:65:81:41:AD:39:1A:59:64:41:63:15:82:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.196.0-156.37.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:11:48:7d:1e:3a:f0:06:6e:64:43:bc:01:92:a8:e1:0d:61: 75:88:22:31:85:19:af:92:eb:b7:ae:d1:f4:74:a2:1c:0d:3f: af:ba:ff:01:4a:e3:71:51:12:76:25:8e:da:9c:6e:79:11:a9: 8f:81:18:f8:e4:9c:69:6a:c0:54:e6:a3:28:5f:aa:9d:c5:dd: 34:7c:5e:51:1a:14:47:ee:3c:d5:43:2d:05:5f:5d:0d:a9:91: 5a:c6:12:e8:50:a7:52:91:0d:16:ce:03:81:38:e4:e1:12:b1: 76:4e:fe:82:cc:82:ca:57:7e:e2:77:cc:fd:7c:fa:c1:07:25: 07:4b:1d:1c:53:a3:05:79:1e:9a:7e:cd:fa:aa:d3:69:ef:db: b6:cf:9e:cc:93:0a:91:42:59:8c:1a:1f:b5:dc:cf:56:7f:50: bf:fd:eb:1c:41:15:43:35:aa:55:23:e4:60:fe:c6:af:7a:af: e0:ba:00:db:a9:8f:ba:b5:30:f0:f5:10:04:41:13:f9:1f:48: 2b:a8:e0:0b:ce:f2:a6:3c:4b:4d:fe:57:2f:15:80:0b:06:d7: 33:d4:34:e8:8e:46:6a:3b:41:b5:4c:19:3d:df:0e:13:a9:d8: 10:10:de:51:57:e1:94:39:d1:b4:cd:b0:d9:6c:7a:38:44:7d: d1:49:1e:14 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErZNnSlTHW7bo2hDSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NmQ2YTQxZTYtNzllNS00MzE1LTlmN2EtZmE4ZGRlOTYxNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0IRGhNur+nvNvClmndxWq6rspsysugap1sO GtWU/Hxgmeeylu91SKI0ZwBa5EQzPlTq2oeTuP1gNFpumL34F0qmPgroD8OzkS0C lZnVTnhazgh1LiFr69HiBFoxVMHWQ6nMNgr+oWPH+6H1yV1fZJTe8vhl8g/ZSQY3 NILREKpTBnKsJW2nPl4eJidV9nGu4vxGNeI8NvQ8u5z0Dyg3rwbXpy8I8JeY4tG1 gbDfdRq2sUtZXkr9RLcMfKwyzzy5Z+MEs/90+WaynptqqrP58pFVFF/58pBsXgeT 7mYhQq5z6jZY+64VFvX3H4QEc8Exrb8a7/uGWUyB1rGNRfeixwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIgtu1PJFo5lgUGtORpZZEFjFYJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZDVjZjgzMTktNDAzYi0z ODdjLWE3OWItODRhNTkyNzdlM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKcJcQD BACcJcYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPxFIfR468AZuZEO8AZKo4Q1hdYgiMYUZr5Lrt67R9HSi HA0/r7r/AUrjcVESdiWO2pxueRGpj4EY+OScaWrAVOajKF+qncXdNHxeURoUR+48 1UMtBV9dDamRWsYS6FCnUpENFs4DgTjk4RKxdk7+gsyCyld+4nfM/Xz6wQclB0sd HFOjBXkemn7N+qrTae/bts+ezJMKkUJZjBoftdzPVn9Qv/3rHEEVQzWqVSPkYP7G r3qv4LoA26mPurUw8PUQBEET+R9IK6jgC87ypjxLTf5XLxWACwbXM9Q06I5GajtB tUwZPd8OE6nYEBDeUVfhlDnRtM2w2Wx6OER90UkeFA== -----END CERTIFICATE-----Generated at Sat Aug 23 20:04:45 2025 by rpki-client