$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/2322e0c0-19f8-3f97-a16b-24c9839c02b4.roa File: 2322e0c0-19f8-3f97-a16b-24c9839c02b4.roa (raw, json) Hash identifier: wsYLjW6bxyYj9wFwKBZja9cjEG/X7nn9K+B66neYjvA= Subject key identifier: 96:E5:FA:84:8C:3D:5E:8C:72:7C:3F:F9:4A:CC:29:11:5B:F6:F5:1D Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584A9E961E4DB8B0FD37D5E91BC0 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/2322e0c0-19f8-3f97-a16b-24c9839c02b4.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 8075 IP address blocks: 158.86.31.0/24 maxlen: 24 158.86.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1e:4d:b8:b0:fd:37:d5:e9:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=b90e3853-fb44-4394-9e58-d6a8b05abf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:46:ae:f3:fb:5d:b8:16:22:29:09:bd:84:dc: be:e5:2b:51:9e:ed:63:54:25:30:e8:c5:75:b7:45: 36:0f:6f:55:79:30:f9:4c:d7:e6:ee:2a:77:46:1f: 25:77:de:95:d2:df:eb:dd:2d:be:22:94:12:5c:21: 03:33:ea:98:88:8e:68:4d:0b:ab:b6:1e:67:af:9b: 7b:57:75:aa:22:fc:a3:40:f6:9c:67:a6:1e:b5:1e: 87:4c:4c:f6:76:fa:ee:61:0f:4c:61:a6:97:99:e0: 60:12:3a:a9:d4:a8:e2:62:c2:33:b1:c7:d7:9f:2d: 7c:c7:c1:72:7c:2d:a4:8c:3d:54:9b:d6:8f:87:57: e7:ec:a3:cc:21:66:e4:c3:53:4b:59:8b:37:96:9e: 11:ef:d6:d3:f6:cd:75:40:17:54:fe:e3:37:b4:d8: 1c:b0:20:8b:4b:c9:98:4e:be:ef:b9:88:f1:f1:f4: 66:cd:57:3f:39:3d:f0:59:b4:26:47:36:f5:cb:13: 21:fb:98:08:2f:ad:64:b1:80:1c:84:2e:a7:a3:20: 36:09:e7:a9:89:86:de:97:4f:60:42:f7:11:df:55: a6:fa:f4:98:d8:0c:16:ea:05:6e:24:c6:c0:72:30: fa:66:c2:25:ce:61:ac:30:85:2d:c2:86:5f:3b:3c: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E5:FA:84:8C:3D:5E:8C:72:7C:3F:F9:4A:CC:29:11:5B:F6:F5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/2322e0c0-19f8-3f97-a16b-24c9839c02b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 158.86.31.0/24 158.86.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0a:2e:0a:64:01:df:7e:52:73:5b:b3:be:f1:55:81:fa:06: 48:bd:0f:e7:c5:a1:b5:9c:c5:d6:71:d2:2a:f8:85:ce:5b:90: 5e:78:ea:14:ea:59:6b:86:6f:b4:33:19:8d:32:b3:ab:0e:b1: 28:60:10:1a:64:f5:cc:ae:de:20:2f:47:c6:5e:f5:8b:da:35: 2e:51:b5:28:56:be:33:a5:0f:69:f1:14:0c:28:5a:89:22:70: 35:a7:ea:9e:ce:8f:81:a4:3b:8e:63:5d:e8:50:5b:14:d0:48: 2e:ab:9f:2e:98:bc:d2:9a:d6:d5:0d:d0:c4:55:1c:c5:81:70: f0:06:b9:8b:ee:b9:c6:84:d3:1e:71:f8:f0:d3:17:66:5b:e8: d5:52:33:b5:e8:6c:ae:1b:f8:8c:d7:ac:29:5f:2b:3e:cf:b6: 64:ce:a4:fe:83:dd:1f:b1:cb:a8:b3:b6:79:41:2b:55:1c:51: db:6e:f1:55:fc:3d:1e:e8:94:e8:b8:02:61:5e:5c:56:df:3f: 05:d5:7e:88:08:f1:f8:13:da:02:29:2d:56:c6:b7:20:64:dc: 07:2a:dc:17:f4:24:8f:a5:aa:7e:e4:32:b3:23:f0:a7:cb:c8: fb:d8:d6:3c:d4:aa:d8:2f:02:f9:bc:f6:e7:0b:b3:35:42:63: 79:5c:ca:55 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqelh5NuLD9N9XpG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YjkwZTM4NTMtZmI0NC00Mzk0LTllNTgtZDZhOGIwNWFiZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEau8/tduBYiKQm9hNy+5StRnu1jVCUw6MV1 t0U2D29VeTD5TNfm7ip3Rh8ld96V0t/r3S2+IpQSXCEDM+qYiI5oTQurth5nr5t7 V3WqIvyjQPacZ6YetR6HTEz2dvruYQ9MYaaXmeBgEjqp1KjiYsIzscfXny18x8Fy fC2kjD1Um9aPh1fn7KPMIWbkw1NLWYs3lp4R79bT9s11QBdU/uM3tNgcsCCLS8mY Tr7vuYjx8fRmzVc/OT3wWbQmRzb1yxMh+5gIL61ksYAchC6noyA2CeepiYbel09g QvcR31Wm+vSY2AwW6gVuJMbAcjD6ZsIlzmGsMIUtwoZfOzzJdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJbl+oSMPV6Mcnw/+UrMKRFb9vUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvMjMyMmUwYzAtMTlmOC0z Zjk3LWExNmItMjRjOTgzOWMwMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnlYfAwQA nlZfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG0KLgpkAd9+UnNbs77xVYH6Bki9D+fFobWcxdZx0ir4hc5b kF546hTqWWuGb7QzGY0ys6sOsShgEBpk9cyu3iAvR8Ze9YvaNS5RtShWvjOlD2nx FAwoWokicDWn6p7Oj4GkO45jXehQWxTQSC6rny6YvNKa1tUN0MRVHMWBcPAGuYvu ucaE0x5x+PDTF2Zb6NVSM7XobK4b+IzXrClfKz7PtmTOpP6D3R+xy6iztnlBK1Uc Udtu8VX8PR7olOi4AmFeXFbfPwXVfogI8fgT2gIpLVbGtyBk3Acq3Bf0JI+lqn7k MrMj8KfLyPvY1jzUqtgvAvm89ucLszVCY3lcylU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:05 2025 by rpki-client