$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa File: 2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa (raw, json) Hash identifier: ocoBarDiu3hbcHgrJMmI9kWwR73/obA30yOgD200q9k= Subject key identifier: FC:F3:88:E7:7F:A9:21:6E:B2:D9:B1:4D:A1:8B:17:4F:D8:0B:0D:C7 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584AF6868E2BC473F82AFBA45F80 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8011 IP address blocks: 159.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8e:2b:c4:73:f8:2a:fb:a4:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=d39b8386-d46e-46fa-ac37-896731503608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e2:2a:b4:45:f3:df:ed:3b:d3:db:e8:e2:6f: 87:2b:47:9c:37:54:7e:a6:31:80:61:af:1c:2c:1f: 40:03:3f:d1:86:82:de:b9:8e:0c:a3:bc:8b:c4:9b: ff:23:bb:eb:a8:0b:c1:3f:15:0e:83:f6:05:25:7b: e3:04:7d:d2:e3:76:82:b1:94:e9:88:91:30:46:53: c8:7e:b8:29:20:e4:26:bf:96:9c:f4:42:f6:cc:df: a1:b8:0f:f3:1f:1d:24:2b:19:1f:3a:6a:5d:46:f8: f3:ef:f8:0d:e9:25:f6:f8:4f:ce:ff:3a:96:bc:37: cc:56:77:6f:bb:55:f2:5d:63:7b:75:36:20:9a:7f: b8:f3:34:9a:30:41:b0:5b:9e:15:e5:da:9a:25:9a: 36:9f:0f:2e:d3:15:d9:85:aa:ed:14:5e:09:46:3e: 8d:4f:b8:7d:e6:b7:65:2a:5a:ae:3e:7e:6f:8e:fb: 4e:e1:90:d8:28:4d:d2:4f:02:b0:25:fd:27:2b:da: 23:9d:80:74:a2:ac:77:72:22:15:a7:c6:dd:cc:fc: 0f:9c:31:ae:84:43:4e:fd:38:a1:d5:7f:b1:fb:61: f6:7f:9e:10:99:db:3c:14:86:3c:2a:3c:ca:95:d2: 86:41:e1:01:63:ba:2b:af:eb:a2:02:3a:2d:1d:db: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F3:88:E7:7F:A9:21:6E:B2:D9:B1:4D:A1:8B:17:4F:D8:0B:0D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2433653b-f7bb-3611-ad46-9d42b5e8adc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 159.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e7:46:4b:85:59:fd:94:3a:d4:b2:78:7e:c6:db:18:ad:ff: d0:21:fc:48:c5:99:de:a8:a8:75:f9:72:6c:37:9a:7c:55:87: 3d:1d:27:0a:72:ab:63:aa:20:da:bd:24:51:22:76:e1:5b:e5: e5:17:28:17:03:d8:17:71:f1:8e:8f:9c:45:56:c3:5f:ce:6d: c5:ff:d9:00:13:05:24:c1:b1:fa:52:8c:80:28:cf:9f:93:e4: 65:c5:db:c5:c9:c6:19:aa:96:c0:38:31:a9:16:0c:99:84:82: 1c:ed:f3:4d:86:cd:7d:fd:3b:69:78:04:1b:e4:fc:e9:ef:21: 73:40:86:15:fb:34:3c:ed:ad:71:ae:1c:c5:f7:b7:8c:a2:f7: c4:4d:fe:ab:d9:a5:30:51:28:25:48:86:10:1f:d1:a1:08:66: 4e:e9:66:39:aa:8c:b7:97:5e:b0:98:88:ed:d8:a5:f1:1b:ae: 05:46:49:3a:20:41:ea:d5:a6:cd:0e:e5:ac:8f:6b:f2:ac:97: e3:04:f1:27:b6:e9:23:b4:e8:5b:00:07:a1:e7:5c:25:47:b6: 8a:20:54:b8:6c:0d:91:f0:1d:db:38:5e:1d:d3:8a:80:8d:d6: 48:b7:88:5e:d3:df:ac:e5:c4:11:a8:41:e9:49:6f:87:bf:fd: e7:32:c5:31 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEr2ho4rxHP4KvukX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDM5YjgzODYtZDQ2ZS00NmZhLWFjMzctODk2NzMxNTAzNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeIqtEXz3+0709vo4m+HK0ecN1R+pjGAYa8c LB9AAz/RhoLeuY4Mo7yLxJv/I7vrqAvBPxUOg/YFJXvjBH3S43aCsZTpiJEwRlPI frgpIOQmv5ac9EL2zN+huA/zHx0kKxkfOmpdRvjz7/gN6SX2+E/O/zqWvDfMVndv u1XyXWN7dTYgmn+48zSaMEGwW54V5dqaJZo2nw8u0xXZhartFF4JRj6NT7h95rdl KlquPn5vjvtO4ZDYKE3STwKwJf0nK9ojnYB0oqx3ciIVp8bdzPwPnDGuhENO/Tih 1X+x+2H2f54Qmds8FIY8KjzKldKGQeEBY7orr+uiAjotHds87wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPzziOd/qSFustmxTaGLF0/YCw3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMjQzMzY1M2ItZjdiYi0z NjExLWFkNDYtOWQ0MmI1ZThhZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkOdGS4VZ/ZQ61LJ4fsbbGK3/0CH8SMWZ3qiodflybDeafFWHPR0nCnKr Y6og2r0kUSJ24Vvl5RcoFwPYF3Hxjo+cRVbDX85txf/ZABMFJMGx+lKMgCjPn5Pk ZcXbxcnGGaqWwDgxqRYMmYSCHO3zTYbNff07aXgEG+T86e8hc0CGFfs0PO2tca4c xfe3jKL3xE3+q9mlMFEoJUiGEB/RoQhmTulmOaqMt5desJiI7dil8RuuBUZJOiBB 6tWmzQ7lrI9r8qyX4wTxJ7bpI7ToWwAHoedcJUe2iiBUuGwNkfAd2zheHdOKgI3W SLeIXtPfrOXEEahB6Ulvh7/95zLFMQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:55 2025 by rpki-client