$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa File: 0409d953-fb93-3031-9957-e0cd196421fa.roa (raw, json) Hash identifier: RDBTSBRetNcKUaA6iG5UUkASZDwllY1K83GoOsgQaJY= Subject key identifier: 82:94:CD:7B:62:86:BD:F0:E7:2F:52:ED:DB:DC:2F:5E:BA:DE:F3:B4 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584AB91BA57A43DD1279CB803200 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 159.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a5:7a:43:dd:12:79:cb:80:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1c021776-a861-4ea2-b99c-35f5d734826d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:22:0e:09:bb:b3:f5:7f:43:96:7c:d4:7b: 17:b2:17:39:f3:85:32:e9:90:3e:3f:4e:2e:7d:f4: 8f:ad:f2:bc:68:9c:01:17:3b:fa:1b:da:0e:ca:e3: 2a:db:7c:20:b7:c3:04:c5:75:a3:f7:3d:2e:70:fa: 77:aa:60:44:ec:94:5a:df:70:72:9c:bc:4b:78:11: 89:45:47:9c:a2:29:1a:39:af:04:a2:a0:25:a5:55: ba:c4:3d:71:bf:d5:d9:cd:e3:78:73:e6:0b:90:90: 81:e3:8c:9e:06:4a:66:30:aa:9f:88:1e:ac:3e:c3: 36:40:2d:47:ea:51:2d:21:25:57:5e:84:37:da:df: e3:7c:db:0d:e3:8c:70:c0:ae:07:7f:b1:4c:1a:29: 3e:05:02:23:ba:01:88:e7:7e:11:8b:d3:ff:34:98: 11:5f:9f:6f:17:c8:50:d9:f2:16:6d:28:64:aa:87: f0:25:ea:f9:17:a7:81:55:05:6f:e2:22:1e:db:0d: 71:49:6e:34:94:c4:25:48:49:05:b2:36:6b:90:1c: 2a:b7:43:fe:6d:a9:7f:53:d3:6f:46:0c:08:ac:b5: a5:83:25:5d:8e:d9:5e:51:db:c5:43:45:5a:83:36: 61:4a:bd:04:10:f7:9f:6e:11:a9:5d:e0:b8:52:cb: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:CD:7B:62:86:BD:F0:E7:2F:52:ED:DB:DC:2F:5E:BA:DE:F3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:dd:84:ef:71:6f:f4:25:3a:bb:0f:3c:b2:10:1a:d2:1b:8f: 55:ba:dd:b9:89:44:e5:78:6d:53:84:85:f3:b9:35:3d:e0:5a: 81:6b:d1:09:9e:a8:e7:4f:96:14:38:24:7a:25:4b:91:b5:00: 55:7b:de:0c:2e:41:88:5b:66:15:39:2e:dd:60:ae:18:cd:f9: 72:c1:70:13:35:df:bd:63:26:d6:f7:ca:4d:da:04:de:f5:f4: cc:16:a8:41:a4:86:76:6d:71:b7:eb:f2:a4:30:e8:85:45:9b: cc:a1:68:c8:b7:30:5c:d2:ad:3f:e2:58:92:96:69:b6:94:7a: 0d:bf:f7:5a:3b:2c:da:62:79:cc:6d:3c:08:25:cf:12:4e:90: a2:56:a4:f0:05:fc:88:e4:7e:b5:a0:1d:3e:18:3c:46:cb:ef: 3d:b6:a3:d6:a9:7f:ea:bb:07:6c:c0:be:61:9c:8a:af:db:07: e5:ae:fa:06:46:54:e2:08:71:73:61:d9:78:fc:86:61:82:e8: 77:ba:50:71:7a:6b:f8:f7:4a:39:c4:b2:92:1d:04:f8:5e:e6: cf:e3:2d:73:49:55:d4:af:2b:ac:f2:b4:5a:ab:95:09:08:8c: 46:e0:26:2a:48:b2:09:17:f5:e9:14:7c:d1:a0:33:8b:46:35: f6:42:fd:54 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq5G6V6Q90SecuAMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWMwMjE3NzYtYTg2MS00ZWEyLWI5OWMtMzVmNWQ3MzQ4MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpQiDgm7s/V/Q5Z81HsXshc584Uy6ZA+P04u ffSPrfK8aJwBFzv6G9oOyuMq23wgt8MExXWj9z0ucPp3qmBE7JRa33BynLxLeBGJ RUecoikaOa8EoqAlpVW6xD1xv9XZzeN4c+YLkJCB44yeBkpmMKqfiB6sPsM2QC1H 6lEtISVXXoQ32t/jfNsN44xwwK4Hf7FMGik+BQIjugGI534Ri9P/NJgRX59vF8hQ 2fIWbShkqofwJer5F6eBVQVv4iIe2w1xSW40lMQlSEkFsjZrkBwqt0P+bal/U9Nv RgwIrLWlgyVdjtleUdvFQ0VagzZhSr0EEPefbhGpXeC4UssUHQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIKUzXtihr3w5y9S7dvcL1663vO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMDQwOWQ5NTMtZmI5My0z MDMxLTk5NTctZTBjZDE5NjQyMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAt2E73Fv9CU6uw88shAa0huPVbrduYlE5XhtU4SF87k1PeBagWvRCZ6o 50+WFDgkeiVLkbUAVXveDC5BiFtmFTku3WCuGM35csFwEzXfvWMm1vfKTdoE3vX0 zBaoQaSGdm1xt+vypDDohUWbzKFoyLcwXNKtP+JYkpZptpR6Db/3Wjss2mJ5zG08 CCXPEk6Qolak8AX8iOR+taAdPhg8RsvvPbaj1ql/6rsHbMC+YZyKr9sH5a76BkZU 4ghxc2HZePyGYYLod7pQcXpr+PdKOcSykh0E+F7mz+Mtc0lV1K8rrPK0WquVCQiM RuAmKkiyCRf16RR80aAzi0Y19kL9VA== -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:12 2025 by rpki-client