$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa File: 457189b9-d3a9-3217-8a43-0445470cc4ed.roa (raw, json) Hash identifier: rGKlZK3yhz4/KcQp4Gr8eVYSrICrUVez2FxBhmLFG+o= Subject key identifier: AC:A3:6D:09:51:4C:23:25:22:50:96:06:BA:87:1A:09:22:78:39:62 Certificate issuer: /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Certificate serial: 010D0C9F4328584B0A11689A97664234670D58C0 Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 271 IP address blocks: 192.146.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:68:9a:97:66:42:34:67:0d:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=a346c913-a94c-497d-b449-a11cac5895a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:07:37:08:43:ca:e4:8a:07:8e:65:48:77: 87:b8:90:e4:a0:97:5f:c1:76:88:4d:7d:23:4e:fe: 6d:96:40:e7:f3:09:cc:64:7e:29:aa:14:25:be:e8: 4f:96:02:ee:a6:12:b9:42:6e:52:f7:28:b8:dd:62: 1c:a4:82:86:96:b2:45:f5:17:72:16:6c:de:5b:86: 10:af:22:a6:22:3e:bf:49:bc:5a:80:a1:f7:89:0b: 66:e8:14:d4:ce:2b:f9:ce:7d:48:5c:cc:82:c8:40: 3a:5a:72:04:10:33:df:49:22:1b:e4:19:30:c2:2d: de:8e:db:78:47:f1:b9:39:6d:9c:7f:22:f1:11:e0: 91:33:fa:25:b7:ea:02:dc:54:37:80:f1:f7:ff:7b: 13:dc:e1:c0:88:c6:2a:79:0b:b1:fb:6b:50:5b:85: c2:e4:2e:24:32:b1:2c:7d:b0:f7:c1:07:17:b8:8e: ca:d1:c9:b8:d8:52:0e:40:d6:e4:d9:ef:33:b1:27: c3:cc:95:59:6e:7f:dc:12:66:11:9f:78:46:00:3f: 6e:b6:02:2e:fb:4c:89:4b:17:7a:24:ae:97:a3:6a: cc:f7:16:62:2a:fb:33:9d:6b:50:6a:cb:82:70:7d: e7:5d:9e:49:e7:27:33:d9:61:09:54:93:25:b5:80: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A3:6D:09:51:4C:23:25:22:50:96:06:BA:87:1A:09:22:78:39:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl X509v3 Authority Key Identifier: keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer sbgp-ipAddrBlock: critical IPv4: 192.146.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c2:b7:8c:9c:10:69:06:f2:be:54:1b:f2:f9:9f:3e:e0:f5: cb:09:4b:8d:d5:28:b4:fc:08:85:3f:22:c6:cd:ba:d4:3c:d0: 9e:3d:e2:00:51:6f:54:d1:38:4f:7e:62:5e:74:b1:3b:8b:6b: ad:04:33:cb:f2:cf:57:36:7a:5d:a2:a3:6f:df:a7:e6:75:dc: 0a:41:47:db:77:98:1f:77:2e:74:9b:8c:e8:8c:46:82:56:c5: 4c:93:99:c2:bb:b3:0b:9f:17:fd:22:b5:49:d4:60:0d:4e:34: f3:a4:15:6a:cc:24:6e:7c:65:5d:6c:cc:b1:16:96:f2:c8:ac: bd:56:0a:8a:4b:8a:5b:ce:e1:4d:c4:17:df:b7:09:54:73:be: 80:c3:c2:b9:13:e0:56:78:e9:17:40:ae:cf:01:5b:ba:39:8d: bc:3c:27:48:60:86:97:8c:f5:25:38:6d:8a:20:ae:00:68:85: 27:85:9f:37:78:86:16:f6:b6:5d:5b:f2:99:69:28:bb:70:95: eb:d8:64:57:12:8e:63:f1:88:2a:34:07:63:7c:40:ab:05:6a: c1:93:08:f8:7f:a4:11:f6:0b:d1:00:44:4a:b8:d0:b8:ea:f2: 9e:c6:d2:9e:5c:b3:b2:ca:65:73:8b:f7:40:8e:52:6e:98:a0: 37:84:b9:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWial2ZCNGcNWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiNjQ2MTMtNWIwZC00OTY4LWI2MDEtZTJmMmNmMDUz ZjE4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YTM0NmM5MTMtYTk0Yy00OTdkLWI0NDktYTExY2FjNTg5NWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli0HNwhDyuSKB45lSHeHuJDkoJdfwXaITX0j Tv5tlkDn8wnMZH4pqhQlvuhPlgLuphK5Qm5S9yi43WIcpIKGlrJF9RdyFmzeW4YQ ryKmIj6/SbxagKH3iQtm6BTUziv5zn1IXMyCyEA6WnIEEDPfSSIb5Bkwwi3ejtt4 R/G5OW2cfyLxEeCRM/olt+oC3FQ3gPH3/3sT3OHAiMYqeQux+2tQW4XC5C4kMrEs fbD3wQcXuI7K0cm42FIOQNbk2e8zsSfDzJVZbn/cEmYRn3hGAD9utgIu+0yJSxd6 JK6Xo2rM9xZiKvsznWtQasuCcH3nXZ5J5ycz2WEJVJMltYD/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyjbQlRTCMlIlCWBrqHGgkieDliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2 NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYyY2YwNTNmMTgvNDU3MTg5YjktZDNhOS0z MjE3LThhNDMtMDQ0NTQ3MGNjNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGNiNjQ2MTMtNWIwZC00OTY4LWI2 MDEtZTJmMmNmMDUzZjE4LzhjYjY0NjEzLTViMGQtNDk2OC1iNjAxLWUyZjJjZjA1 M2YxOC5jcmwwHwYDVR0jBBgwFoAUmFXdTZzJoIFeqTEMx78iaxZ96QgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYy Y2YwNTNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfCt4ycEGkG8r5UG/L5nz7g9csJS43VKLT8CIU/IsbNutQ80J494gBR b1TROE9+Yl50sTuLa60EM8vyz1c2el2io2/fp+Z13ApBR9t3mB93LnSbjOiMRoJW xUyTmcK7swufF/0itUnUYA1ONPOkFWrMJG58ZV1szLEWlvLIrL1WCopLilvO4U3E F9+3CVRzvoDDwrkT4FZ46RdArs8BW7o5jbw8J0hghpeM9SU4bYogrgBohSeFnzd4 hhb2tl1b8plpKLtwlevYZFcSjmPxiCo0B2N8QKsFasGTCPh/pBH2C9EAREq40Ljq 8p7G0p5cs7LKZXOL90COUm6YoDeEua8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:59 2025 by rpki-client