$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa File: c46c93a2-fe57-309a-bee8-5628aca49d6b.roa (raw, json) Hash identifier: RJSqyRCXul7I+ighRuyNHd1+Pvl53CdKoJdsjRp/m/s= Subject key identifier: 3A:01:5D:B0:5F:76:7F:CB:41:8E:D2:6B:BF:D4:0C:04:8F:B7:71:26 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584AA85B988BE1C879D9DD8C3D80 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 54535 IP address blocks: 156.53.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:98:8b:e1:c8:79:d9:dd:8c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=1a454ecf-806d-4912-afd7-c0716206db1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:8a:cb:b6:29:92:2b:e0:ca:c7:fb:fa:0d: ac:19:99:07:40:d1:9d:56:28:1a:dd:06:3d:5c:16: 33:7f:aa:90:38:55:e3:4e:34:d3:48:69:b4:5b:91: ce:13:49:ef:36:2d:9f:a8:e6:ba:60:03:01:a9:34: ef:4a:c7:f4:3b:fb:40:76:60:0b:e2:4e:67:90:da: 2e:a2:cc:9a:94:49:87:3e:d0:28:7a:4e:67:d1:1f: 8c:37:3b:51:93:18:67:63:a7:30:3b:f8:cf:93:90: 62:a7:45:f3:c2:9b:da:de:52:03:91:8f:10:72:d0: 0c:96:46:c7:f0:99:08:73:6c:f8:fc:f6:0f:3a:23: 08:9b:4c:b6:af:d5:38:6f:5f:83:61:93:52:af:a1: fc:90:bc:11:26:c2:9d:01:f0:59:33:62:13:06:09: d1:99:b7:7c:79:57:9d:e5:73:f6:f8:15:cf:90:cd: 57:e5:ca:71:c8:a9:87:66:c6:f4:df:42:d9:c3:82: e6:4a:2d:dc:cd:7e:2c:48:05:64:1d:eb:2c:0e:e7: cf:d3:20:08:13:fe:16:96:8f:23:44:6d:e1:39:03: a2:9b:c3:fc:e4:c2:34:e9:8f:e4:16:be:b0:c6:9b: 86:c1:cf:8e:6d:fa:cb:de:44:44:9d:44:be:43:7b: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:01:5D:B0:5F:76:7F:CB:41:8E:D2:6B:BF:D4:0C:04:8F:B7:71:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c46c93a2-fe57-309a-bee8-5628aca49d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:df:dc:79:4b:18:70:c5:23:bf:27:7a:07:2a:f3:8a:ad:d0: 17:39:da:11:59:64:53:6f:46:4c:bb:db:60:15:99:52:b0:1e: 37:84:a2:5d:b7:74:cf:7e:58:8d:94:71:03:2c:68:02:63:d3: 38:25:a4:35:f5:54:df:ea:2f:a8:e0:ae:1a:f1:20:4b:4b:99: 6e:b0:30:21:fb:19:74:52:66:5f:0d:15:9a:cf:cd:9d:97:dc: dc:68:53:30:98:d0:d6:ed:92:f5:fb:59:9e:00:a8:9f:b5:9a: a7:79:da:1f:43:e5:34:14:52:be:a9:c3:02:47:43:be:ef:76: 15:90:7e:b4:b4:71:5e:c0:1f:05:1b:38:73:94:6e:e0:51:ab: 1c:d0:a7:77:dc:02:b9:e3:d1:1c:6e:30:09:c7:ad:45:da:9f: 23:a9:41:98:53:74:36:47:45:43:fa:28:f0:09:48:fe:ac:30: ea:e4:cc:c3:28:0e:c3:4f:4c:99:6a:41:da:93:d0:bf:27:d4: b3:a2:8c:f4:fd:ed:f6:44:cd:d1:af:63:fc:5f:ba:52:a4:ec: fa:2a:f4:18:c1:3a:ee:b0:1b:0b:09:e6:70:9a:ed:88:f1:52: f7:72:3f:e8:f7:3f:59:fd:dc:35:84:38:9c:16:10:00:f2:89: a7:97:c1:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW5iL4ch52d2MPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MWE0NTRlY2YtODA2ZC00OTEyLWFmZDctYzA3MTYyMDZkYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9uKy7Ypkivgysf7+g2sGZkHQNGdViga3QY9 XBYzf6qQOFXjTjTTSGm0W5HOE0nvNi2fqOa6YAMBqTTvSsf0O/tAdmAL4k5nkNou osyalEmHPtAoek5n0R+MNztRkxhnY6cwO/jPk5Bip0Xzwpva3lIDkY8QctAMlkbH 8JkIc2z4/PYPOiMIm0y2r9U4b1+DYZNSr6H8kLwRJsKdAfBZM2ITBgnRmbd8eVed 5XP2+BXPkM1X5cpxyKmHZsb030LZw4LmSi3czX4sSAVkHessDufP0yAIE/4Wlo8j RG3hOQOim8P85MI06Y/kFr6wxpuGwc+ObfrL3kREnUS+Q3vkUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoBXbBfdn/LQY7Sa7/UDASPt3EmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYzQ2YzkzYTItZmU1Ny0z MDlhLWJlZTgtNTYyOGFjYTQ5ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnDXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjf3HlLGHDFI78negcq84qt0Bc52hFZZFNvRky722AVmVKwHjeEol23 dM9+WI2UcQMsaAJj0zglpDX1VN/qL6jgrhrxIEtLmW6wMCH7GXRSZl8NFZrPzZ2X 3NxoUzCY0NbtkvX7WZ4AqJ+1mqd52h9D5TQUUr6pwwJHQ77vdhWQfrS0cV7AHwUb OHOUbuBRqxzQp3fcArnj0RxuMAnHrUXanyOpQZhTdDZHRUP6KPAJSP6sMOrkzMMo DsNPTJlqQdqT0L8n1LOijPT97fZEzdGvY/xfulKk7Poq9BjBOu6wGwsJ5nCa7Yjx UvdyP+j3P1n93DWEOJwWEADyiaeXwfQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:19:02 2025 by rpki-client