$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa File: 2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa (raw, json) Hash identifier: /fOE8m7iBmR0yr63SbBlE3aq6joFQr+Ha6X0E38LYO0= Subject key identifier: E3:39:09:FA:A2:A4:F2:96:DE:48:6E:A7:A6:35:EC:86:17:39:A8:EC Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F4328584A9900C9364B39052042CDF780 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 15191 IP address blocks: 198.135.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c9:36:4b:39:05:20:42:cd:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=ec47c257-1774-4d49-9166-f510b94b0aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:fe:c5:8c:26:cf:86:91:37:1a:6b:93:21: 00:a8:1f:30:11:14:06:42:1a:38:12:cf:4c:79:b8: f5:81:bc:ac:47:39:17:04:a9:e6:d0:03:20:5c:9a: 7b:df:a6:c4:29:dd:d7:d6:ef:cd:4d:85:b5:da:c8: ce:61:15:3b:07:10:4f:e3:f2:66:57:b2:69:99:5c: fe:de:d5:64:c7:41:e8:8b:94:27:cf:78:11:d6:54: 9e:74:63:6c:49:ab:f4:61:bb:14:14:9a:58:75:9b: de:19:0d:69:09:a6:e8:f6:13:2e:a3:ff:c0:bd:5b: 59:4a:92:5f:a1:89:97:a5:58:c1:30:ee:29:24:66: ab:6d:15:e6:c0:d5:70:b9:76:89:76:1a:f3:cb:45: 51:36:ea:59:32:f6:9c:0f:6f:5e:a5:11:4d:eb:8d: 01:a6:9f:d9:14:41:ca:e6:33:b9:a1:e5:51:31:e1: dd:39:8d:6e:76:e7:4e:9c:db:71:1c:3e:a6:3d:1a: 2a:45:ca:55:dc:cb:0b:fe:19:62:62:36:14:6f:9d: ea:3e:8b:25:ba:07:eb:d9:1a:fa:f1:81:77:fc:dc: 88:ea:eb:72:21:c1:48:6b:2e:6e:da:42:12:98:f3: 22:4c:3b:ae:60:10:4b:68:59:c4:c6:4c:21:4c:4c: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:09:FA:A2:A4:F2:96:DE:48:6E:A7:A6:35:EC:86:17:39:A8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/2088f5bb-7c63-3c26-a8c4-d9dde15a73e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.135.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c1:68:f6:62:51:ac:65:96:b1:1b:e3:4c:b3:e4:40:6b:54: 6d:15:60:d0:87:6b:8d:e2:2b:a7:33:e6:e3:d4:bc:09:c5:1e: 44:b4:81:7d:03:ba:36:ab:db:c4:3c:ce:84:b9:37:39:0d:04: d5:25:73:34:1b:a2:57:16:f6:6a:74:2a:9b:78:ba:84:7d:7d: e3:f6:9e:29:12:94:0d:ea:f6:0a:a4:72:51:6d:54:09:c0:73: 20:15:d5:48:ce:3a:1d:6a:f7:6e:9b:e9:f6:7a:9d:8e:c1:89: 69:59:52:7a:d9:ec:ff:7e:52:88:9e:61:19:77:f4:f0:b1:54: 97:c6:11:5e:73:78:0d:94:4a:b4:73:8f:22:12:b0:55:c1:07: 40:16:f3:d4:29:16:18:47:59:3f:27:18:fd:9a:91:77:fc:74: 0d:3e:ee:99:16:6d:ee:2e:08:db:8e:5a:cf:39:f6:95:89:c5: 46:c4:cb:f5:8f:cb:68:ad:26:81:4c:24:3b:fe:52:bb:5d:3e: 43:f5:67:7d:d8:af:6d:e2:ec:66:7d:08:c3:94:e9:9c:02:4c: 94:cb:3e:31:56:a7:86:62:24:7b:4a:07:30:80:ac:0c:14:fc: c6:0b:21:d5:18:9e:bb:4c:bb:15:80:3f:f8:e4:69:01:9f:5f: f4:48:e4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMk2SzkFIELN94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWM0N2MyNTctMTc3NC00ZDQ5LTkxNjYtZjUxMGI5NGIwYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5j+xYwmz4aRNxprkyEAqB8wERQGQho4Es9M ebj1gbysRzkXBKnm0AMgXJp736bEKd3X1u/NTYW12sjOYRU7BxBP4/JmV7JpmVz+ 3tVkx0Hoi5Qnz3gR1lSedGNsSav0YbsUFJpYdZveGQ1pCabo9hMuo//AvVtZSpJf oYmXpVjBMO4pJGarbRXmwNVwuXaJdhrzy0VRNupZMvacD29epRFN640Bpp/ZFEHK 5jO5oeVRMeHdOY1ududOnNtxHD6mPRoqRcpV3MsL/hliYjYUb53qPoslugfr2Rr6 8YF3/NyI6utyIcFIay5u2kISmPMiTDuuYBBLaFnExkwhTEzLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM5CfqipPKW3khup6Y17IYXOajsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMjA4OGY1YmItN2M2My0z YzI2LWE4YzQtZDlkZGUxNWE3M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxoecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrBaPZiUaxllrEb40yz5EBrVG0VYNCHa43iK6cz5uPUvAnFHkS0gX0D ujar28Q8zoS5NzkNBNUlczQbolcW9mp0Kpt4uoR9feP2nikSlA3q9gqkclFtVAnA cyAV1UjOOh1q926b6fZ6nY7BiWlZUnrZ7P9+UoieYRl39PCxVJfGEV5zeA2USrRz jyISsFXBB0AW89QpFhhHWT8nGP2akXf8dA0+7pkWbe4uCNuOWs859pWJxUbEy/WP y2itJoFMJDv+UrtdPkP1Z33Yr23i7GZ9CMOU6ZwCTJTLPjFWp4ZiJHtKBzCArAwU /MYLIdUYnrtMuxWAP/jkaQGfX/RI5Kw= -----END CERTIFICATE-----Generated at Tue Aug 12 22:42:08 2025 by rpki-client