$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa File: 524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa (raw, json) Hash identifier: mX/KMP7RMkX2NZXvaYVQG+5EWuaS4P0S7Ueo/xaauYg= Subject key identifier: 43:CB:3F:CA:41:97:B1:56:C2:D9:18:68:37:E7:DE:D6:D2:F5:65:D7 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B3A0F48FE27DCDC59E47DA000 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa Signing time: Wed 17 Sep 2025 17:35:23 +0000 ROA not before: Wed 17 Sep 2025 17:35:23 +0000 ROA not after: Tue 16 Dec 2025 18:35:23 +0000 asID: 393559 IP address blocks: 156.70.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:0f:48:fe:27:dc:dc:59:e4:7d:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 17 17:35:23 2025 GMT Not After : Dec 16 18:35:23 2025 GMT Subject: CN=e7726717-3e02-437f-b47f-f28c30c0a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:02:1c:90:9e:ea:80:f1:5e:ab:37:01:39: 47:51:a2:36:a2:4c:bd:15:13:3f:cd:b2:01:6c:84: 46:ed:d4:73:e8:72:c6:e4:b2:c0:36:b8:92:c1:01: 3e:21:05:1e:de:a8:d3:bd:88:8d:a4:f5:89:89:39: 10:47:00:40:11:91:30:be:e5:fe:66:b0:d4:32:47: 0f:37:4b:65:c0:b7:b0:aa:cc:37:71:68:b4:9d:b6: b8:75:ee:9c:78:78:85:fd:2c:9b:f7:fe:7f:76:b1: f9:9d:57:2e:bd:bf:0e:6f:45:4f:a0:78:89:87:3a: 37:8d:0e:ef:a5:b8:10:d2:b6:58:de:fd:79:ba:00: 59:b9:60:06:97:ee:c5:b8:6e:e1:4e:8e:14:40:d7: 19:d8:69:ec:bd:b2:f2:39:69:ed:e2:f3:86:ad:de: db:c9:46:c0:b7:c2:c4:a8:51:f0:b9:08:04:56:85: 1d:61:6f:a6:d9:93:21:0e:e6:24:76:47:c8:b2:bd: 12:10:ee:3d:f1:fd:51:f3:8f:98:6a:da:0f:6d:b6: 53:7c:96:86:e3:57:c9:bc:4a:8e:9a:67:2e:1b:eb: 92:1b:21:d2:51:be:6f:4f:33:99:61:48:c9:d9:bc: a6:ce:54:90:11:36:eb:b2:f2:0d:47:42:62:81:1a: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:3F:CA:41:97:B1:56:C2:D9:18:68:37:E7:DE:D6:D2:F5:65:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/524fd4b3-4b65-3a97-bf7b-1181128b18e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:03:4e:e1:b4:05:e8:4b:ca:01:82:54:db:57:45:49:50:7f: 55:e8:b6:56:af:8f:b9:07:30:47:70:41:26:db:d6:fe:db:db: 7b:31:aa:cd:ef:4a:9b:c8:24:ce:94:5a:7e:59:25:e8:f2:9a: eb:c3:08:41:a7:26:ad:0d:a3:c6:aa:c5:6d:59:68:fc:9c:ba: 3f:fd:c4:d8:eb:d0:cf:54:22:1a:5f:01:92:df:f4:61:a1:24: 24:62:0b:be:f2:0a:23:4a:ec:73:ed:27:d1:fc:b4:52:39:78: df:ae:e4:cd:d3:a5:65:01:55:5c:a8:17:a4:38:4a:a8:e9:ef: 27:d0:8a:93:77:65:05:b5:5b:ac:bf:df:4c:99:11:33:d7:5c: da:8c:3c:41:80:4a:fb:c3:5f:2e:29:ee:f2:58:14:ff:79:8a: 1d:2a:e2:f9:59:48:cb:3a:38:a4:b6:37:a0:40:95:ac:59:6c: 6c:13:1a:57:33:ad:2c:d9:e2:17:eb:bd:f4:5e:63:77:fa:dc: fa:d2:d1:25:dd:2f:a9:f3:84:9d:b0:20:98:32:2b:04:16:29: 9b:e5:ca:28:a9:67:b6:b9:fa:1d:54:7e:bb:50:e4:c8:f2:af: 30:e1:75:91:f0:49:20:87:7a:0a:a4:a7:49:05:d6:ad:bb:c8: be:d5:9c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs6D0j+J9zcWeR9oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDkxNzE3MzUyM1oXDTI1MTIxNjE4MzUyM1owLzEtMCsGA1UEAxMk ZTc3MjY3MTctM2UwMi00MzdmLWI0N2YtZjI4YzMwYzBhNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKcCHJCe6oDxXqs3ATlHUaI2oky9FRM/zbIB bIRG7dRz6HLG5LLANriSwQE+IQUe3qjTvYiNpPWJiTkQRwBAEZEwvuX+ZrDUMkcP N0tlwLewqsw3cWi0nba4de6ceHiF/Syb9/5/drH5nVcuvb8Ob0VPoHiJhzo3jQ7v pbgQ0rZY3v15ugBZuWAGl+7FuG7hTo4UQNcZ2GnsvbLyOWnt4vOGrd7byUbAt8LE qFHwuQgEVoUdYW+m2ZMhDuYkdkfIsr0SEO498f1R84+YatoPbbZTfJaG41fJvEqO mmcuG+uSGyHSUb5vTzOZYUjJ2bymzlSQETbrsvINR0JigRqymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPLP8pBl7FWwtkYaDfn3tbS9WXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNTI0ZmQ0YjMtNGI2NS0z YTk3LWJmN2ItMTE4MTEyOGIxOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgDTuG0BehLygGCVNtXRUlQf1Xotlavj7kHMEdwQSbb1v7b23sxqs3v SpvIJM6UWn5ZJejymuvDCEGnJq0No8aqxW1ZaPycuj/9xNjr0M9UIhpfAZLf9GGh JCRiC77yCiNK7HPtJ9H8tFI5eN+u5M3TpWUBVVyoF6Q4Sqjp7yfQipN3ZQW1W6y/ 30yZETPXXNqMPEGASvvDXy4p7vJYFP95ih0q4vlZSMs6OKS2N6BAlaxZbGwTGlcz rSzZ4hfrvfReY3f63PrS0SXdL6nzhJ2wIJgyKwQWKZvlyiipZ7a5+h1UfrtQ5Mjy rzDhdZHwSSCHegqkp0kF1q27yL7VnMI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:04 2025 by rpki-client