$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa File: a4734617-44c5-3289-bf66-4cbaa145cc8b.roa (raw, json) Hash identifier: NBvmQ8HD6RSjIlLLlwQ1ihn7IgCGXhDzXwkJpTaL9L8= Subject key identifier: 49:0C:22:D0:F4:07:5B:D3:07:0C:E1:21:48:CF:61:91:81:F7:71:B4 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584A9900B24042D5B0706A607CE0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b2:40:42:d5:b0:70:6a:60:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=1eb96797-3093-4c35-aec8-0ef5706b1210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:ff:6e:e0:5f:9a:0e:da:10:5e:52:dd:fb: 3f:cb:6c:73:ee:50:ca:3f:58:85:34:e4:57:bf:48: 1f:34:19:94:e3:aa:1a:97:97:20:95:b3:40:38:7e: fe:be:bd:f5:79:cb:80:25:60:3d:f3:0d:10:de:86: 88:75:98:85:8a:d8:c4:4d:4b:3f:c8:68:9a:d4:62: ab:71:2f:44:43:89:df:f1:2d:10:00:45:7a:08:36: ec:f1:97:2a:69:a8:c3:f7:b5:16:0c:f5:08:9a:16: 38:fa:dd:4f:a7:fd:e6:18:92:89:28:c0:b1:5c:78: 76:47:30:b5:3c:26:ac:7c:7b:ec:4c:37:2d:5f:7d: 44:8f:ed:5b:f8:a9:ae:b4:f3:98:8e:e1:df:0b:94: 94:3a:6e:1f:2f:af:c9:2d:d1:90:11:ae:89:a5:48: bb:5b:ef:98:cc:b1:6f:8e:de:73:83:e8:8c:49:61: fd:84:dc:57:f3:78:67:e1:d6:55:a4:2b:9d:15:97: 56:3c:f6:c2:93:a6:aa:d2:11:6e:8e:1b:ea:fe:81: 33:5e:49:8c:a1:e2:22:a4:3f:f0:d2:aa:14:da:e7: eb:4a:38:51:dd:51:8b:86:54:fa:f7:87:8e:2c:0d: f6:6e:87:6e:cb:bb:83:3c:6b:3a:60:49:c3:51:8e: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0C:22:D0:F4:07:5B:D3:07:0C:E1:21:48:CF:61:91:81:F7:71:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1e:ff:e3:33:49:6e:9d:21:5b:15:d0:63:33:55:2c:47:d2: 30:61:fc:72:f5:07:97:cc:44:28:17:b3:97:c4:a3:a0:3a:e8: cb:0e:5c:5a:a9:91:0c:f6:d3:9d:ce:69:bc:f6:b1:e0:be:85: d3:10:76:dd:09:07:41:2f:88:a7:e1:a0:f9:5d:30:50:df:77: cf:71:c9:a7:04:fa:7a:60:c2:cc:09:54:b7:85:91:e1:cd:5c: 78:b0:e8:1c:36:ee:bc:28:2c:92:dc:8b:bb:7e:f6:80:ee:78: b4:2a:7b:93:00:5c:5f:b1:f5:49:39:43:04:6e:35:7d:15:55: b0:92:96:23:e8:50:11:77:0b:ff:57:40:67:45:8a:1f:42:87: bb:b7:43:ba:86:37:1d:8c:1e:f4:90:37:ec:99:0f:be:50:0c: d8:60:bc:54:01:aa:c3:f1:51:93:a5:1d:fc:8b:fb:a4:8c:34: 32:6d:98:a9:d5:be:7a:4f:30:27:1c:ba:26:00:9a:61:66:e1: b8:3c:52:db:a9:02:10:29:86:d7:b0:ec:0a:a9:9a:e5:9c:70: ef:d8:bd:69:55:20:51:23:f5:2d:2c:0f:65:fa:f9:92:24:14: 43:c4:89:98:2a:a4:a1:1f:53:37:54:82:1f:2b:89:c1:7d:51: 36:9e:64:c7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqZALJAQtWwcGpgfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MWViOTY3OTctMzA5My00YzM1LWFlYzgtMGVmNTcwNmIxMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghv/buBfmg7aEF5S3fs/y2xz7lDKP1iFNORX v0gfNBmU46oal5cglbNAOH7+vr31ecuAJWA98w0Q3oaIdZiFitjETUs/yGia1GKr cS9EQ4nf8S0QAEV6CDbs8ZcqaajD97UWDPUImhY4+t1Pp/3mGJKJKMCxXHh2RzC1 PCasfHvsTDctX31Ej+1b+KmutPOYjuHfC5SUOm4fL6/JLdGQEa6JpUi7W++YzLFv jt5zg+iMSWH9hNxX83hn4dZVpCudFZdWPPbCk6aq0hFujhvq/oEzXkmMoeIipD/w 0qoU2ufrSjhR3VGLhlT694eOLA32boduy7uDPGs6YEnDUY4J9wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEkMItD0B1vTBwzhIUjPYZGB93G0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvYTQ3MzQ2MTctNDRjNS0z Mjg5LWJmNjYtNGNiYWExNDVjYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAex7/4zNJbp0hWxXQYzNVLEfSMGH8cvUHl8xEKBezl8Sj oDroyw5cWqmRDPbTnc5pvPax4L6F0xB23QkHQS+Ip+Gg+V0wUN93z3HJpwT6emDC zAlUt4WR4c1ceLDoHDbuvCgsktyLu372gO54tCp7kwBcX7H1STlDBG41fRVVsJKW I+hQEXcL/1dAZ0WKH0KHu7dDuoY3HYwe9JA37JkPvlAM2GC8VAGqw/FRk6Ud/Iv7 pIw0Mm2YqdW+ek8wJxy6JgCaYWbhuDxS26kCECmG17DsCqma5Zxw79i9aVUgUSP1 LSwPZfr5kiQUQ8SJmCqkoR9TN1SCHyuJwX1RNp5kxw== -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:42 2025 by rpki-client