$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/5af1d580-7a66-3246-a9cd-9306b532172d.roa File: 5af1d580-7a66-3246-a9cd-9306b532172d.roa (raw, json) Hash identifier: 1fxRloXYVD0HetiHcIlWmDr3ycZLTX85dl1iCnHr4wc= Subject key identifier: C1:5C:C6:E4:BE:94:76:5D:87:C3:B3:8E:60:29:2A:8A:AF:32:7D:D2 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B02246376CD38A1E55D35B9E0 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/5af1d580-7a66-3246-a9cd-9306b532172d.roa Signing time: Thu 28 Aug 2025 16:52:38 +0000 ROA not before: Thu 28 Aug 2025 16:52:38 +0000 ROA not after: Wed 26 Nov 2025 17:52:38 +0000 asID: 16504 IP address blocks: 157.96.128.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:24:63:76:cd:38:a1:e5:5d:35:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Aug 28 16:52:38 2025 GMT Not After : Nov 26 17:52:38 2025 GMT Subject: CN=b8e6b33a-ebef-491d-bb32-fe1564aec6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:dd:b7:67:56:01:26:05:8e:18:8b:52:d7: 50:33:18:ca:99:70:b1:dd:9b:c2:a0:8e:39:cf:1b: 94:e5:f0:f1:e3:69:f5:f3:3c:46:be:b2:ee:e6:40: 22:f1:06:54:c8:9e:f8:ab:89:90:24:ae:dc:d8:55: a8:43:7b:44:4c:91:14:af:f5:77:f9:95:15:2a:82: 16:42:12:16:59:ed:b6:60:bf:05:fb:91:94:55:12: 36:e7:e1:1f:5c:de:c9:a3:14:d7:6c:f8:75:b3:5b: 5d:28:40:fc:18:77:e6:12:b5:fb:9d:19:a7:43:52: dc:c4:2a:2b:49:cd:e6:84:ef:2c:e2:2d:a8:bb:82: a6:9b:13:e7:55:72:4f:e5:14:ad:99:dd:d8:92:11: e4:35:d5:b6:14:ef:be:39:3f:17:82:e1:13:30:0c: ac:02:06:a2:ee:37:d6:f5:0c:d8:56:d2:e8:52:82: 28:d5:67:5c:3d:6a:d8:7c:13:65:b0:59:40:57:c0: 53:9e:a7:ed:7d:b7:17:26:17:66:ab:06:b6:54:18: 81:9a:ad:3b:9d:28:8f:ce:90:f3:cc:32:a7:70:37: 01:68:ac:b2:1e:5a:b2:b4:e0:7f:31:b5:8d:08:b9: 68:46:0a:ef:1f:07:62:2f:25:87:ef:fa:3c:43:cf: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5C:C6:E4:BE:94:76:5D:87:C3:B3:8E:60:29:2A:8A:AF:32:7D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/5af1d580-7a66-3246-a9cd-9306b532172d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 157.96.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:79:1f:05:47:3a:b8:53:34:52:ea:7c:b4:10:ed:b5:d1:25: a8:ce:43:4f:2f:17:6f:68:6e:2b:aa:d8:fb:9a:60:f9:fd:40: 82:e2:33:e3:06:6c:7c:99:58:5c:2a:21:a8:80:fe:da:d6:eb: 73:9f:ee:3f:1f:c6:f0:8a:4f:e1:92:e7:3b:6b:25:5b:b2:b9: 45:f6:40:bc:29:d1:5a:b4:36:ac:b3:99:25:c5:44:25:9e:72: 6d:03:da:7b:54:f0:36:ce:e8:17:05:bf:aa:95:7e:68:d3:b9: 7c:1a:86:0b:e6:ac:73:c1:ca:4d:68:ba:35:87:16:a2:f8:2a: d3:a5:fd:d0:ff:1e:4b:48:e6:fc:d7:93:ec:61:b6:28:68:d4: c9:c2:f1:43:d9:c1:11:f3:81:19:75:2a:59:21:d7:c4:7f:62: 1f:97:9d:5f:32:32:a9:44:2a:de:c9:1b:d9:ca:a2:31:28:cc: 19:86:2e:47:d4:ae:2f:5f:85:02:2e:90:15:da:20:e2:2b:29: b5:f8:be:07:60:81:74:e0:f6:65:2b:ee:c7:e6:3f:4b:cc:72: 32:4e:6e:51:7d:5b:c6:7d:c5:6d:d1:64:3e:01:1d:e7:01:77: fb:34:ab:07:6b:b9:45:7a:74:71:9a:0c:81:00:f2:dc:cf:a5: ee:cb:3f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsCJGN2zTih5V01ueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDgyODE2NTIzOFoXDTI1MTEyNjE3NTIzOFowLzEtMCsGA1UEAxMk YjhlNmIzM2EtZWJlZi00OTFkLWJiMzItZmUxNTY0YWVjNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinHdt2dWASYFjhiLUtdQMxjKmXCx3ZvCoI45 zxuU5fDx42n18zxGvrLu5kAi8QZUyJ74q4mQJK7c2FWoQ3tETJEUr/V3+ZUVKoIW QhIWWe22YL8F+5GUVRI25+EfXN7JoxTXbPh1s1tdKED8GHfmErX7nRmnQ1LcxCor Sc3mhO8s4i2ou4KmmxPnVXJP5RStmd3YkhHkNdW2FO++OT8XguETMAysAgai7jfW 9QzYVtLoUoIo1WdcPWrYfBNlsFlAV8BTnqftfbcXJhdmqwa2VBiBmq07nSiPzpDz zDKncDcBaKyyHlqytOB/MbWNCLloRgrvHwdiLyWH7/o8Q88itwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFcxuS+lHZdh8OzjmApKoqvMn3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNWFmMWQ1ODAtN2E2Ni0z MjQ2LWE5Y2QtOTMwNmI1MzIxNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnWCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANd5HwVHOrhTNFLqfLQQ7bXRJajOQ08vF29obiuq2PuaYPn9QILiM+MG bHyZWFwqIaiA/trW63Of7j8fxvCKT+GS5ztrJVuyuUX2QLwp0Vq0NqyzmSXFRCWe cm0D2ntU8DbO6BcFv6qVfmjTuXwahgvmrHPByk1oujWHFqL4KtOl/dD/HktI5vzX k+xhtiho1MnC8UPZwRHzgRl1Klkh18R/Yh+XnV8yMqlEKt7JG9nKojEozBmGLkfU ri9fhQIukBXaIOIrKbX4vgdggXTg9mUr7sfmP0vMcjJOblF9W8Z9xW3RZD4BHecB d/s0qwdruUV6dHGaDIEA8tzPpe7LP+A= -----END CERTIFICATE-----Generated at Wed Nov 5 06:41:07 2025 by rpki-client