$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa File: cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa (raw, json) Hash identifier: AsPKzq7v+sBL4BIumI/tLVtnGfEYJ7WAPELSq1Yi5wI= Subject key identifier: E5:30:21:9B:D3:75:D8:40:F6:5A:42:C2:11:68:8D:AF:FF:D2:32:99 Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F4328584AA160C9F7F43C416B225740C0 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 87 IP address blocks: 149.165.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c9:f7:f4:3c:41:6b:22:57:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d6b16d6b-6d4b-4d7d-888d-13b00713d2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:14:0a:8b:c8:9d:fe:d9:b1:1c:ac:d1:17: 0c:92:48:cb:35:a5:05:b2:79:cc:af:32:53:f6:6b: d9:39:9e:4d:79:e0:5d:2f:65:07:e4:1d:bc:a9:d3: ac:1f:3e:c3:49:f0:34:6c:55:f4:92:40:ff:65:4d: e2:3d:09:fa:b3:e2:60:8b:52:6f:79:5e:8e:33:60: 8b:33:ef:11:15:2c:21:0e:d1:ec:60:d5:44:3b:f3: 75:82:3b:52:47:d2:64:4c:68:4a:f2:90:0b:23:ba: f0:09:b8:72:3a:eb:e6:a2:af:2f:d1:35:19:c5:5e: 4e:e8:7c:ff:b1:cb:eb:5b:53:7d:06:38:4d:5c:fb: e6:69:3a:b3:e8:e8:c7:4e:29:21:04:f6:8d:b0:3d: ba:b1:d6:34:b0:b4:42:3d:ef:31:e9:a9:c5:70:ed: 16:3b:1d:25:68:e3:f2:0a:f2:5d:75:7f:1b:18:86: 4c:2a:cf:a2:f6:56:02:bf:17:4d:8c:cc:5b:32:db: 43:8c:86:1d:d4:1c:dc:c5:6a:42:1a:d6:28:ed:55: 50:40:44:c0:e9:a8:68:d4:e0:7e:55:30:0b:6c:5f: 15:d2:98:a7:d5:69:90:1e:d3:aa:ab:67:34:b6:0c: 51:8d:41:50:5d:47:66:cb:ba:7f:ae:4f:cd:ff:db: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:21:9B:D3:75:D8:40:F6:5A:42:C2:11:68:8D:AF:FF:D2:32:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 149.165.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1f:f9:16:a4:45:69:82:64:50:1d:dc:79:42:2e:e9:41:1a: a0:8f:15:d5:bd:de:30:1f:82:f6:ad:dc:f8:40:eb:2a:98:69: 60:22:d3:c5:cb:83:f4:fb:c0:99:1a:e2:87:35:e0:3d:c9:22: f7:a8:28:d9:fa:a2:6a:97:75:16:12:28:5c:9a:ac:9f:6e:f4: 9c:aa:37:f2:3a:d8:58:09:d3:fc:8e:2e:23:ee:8a:3d:e7:2f: 7f:50:55:79:f5:15:ee:71:9f:f9:ac:46:ed:a6:a8:8f:6a:88: c1:90:ec:36:5b:24:6f:99:0d:8b:5f:d8:89:8a:de:2e:7f:88: 5b:a2:d0:d7:6e:e7:b0:ae:25:c4:5d:84:e0:23:2b:c1:5d:c0: 07:dd:96:b3:70:fb:43:1f:c1:01:42:81:d8:fb:02:ae:da:2e: 1a:e1:6b:07:18:97:ca:ea:c1:95:6a:02:ba:ed:fc:43:0a:df: b2:e9:74:2c:74:cb:0f:ae:6c:9a:28:e4:50:90:2d:9f:9f:e5: f7:0c:f3:1e:e6:3b:a4:79:d4:cd:4a:e1:92:dc:d9:9f:ff:cc: 5c:8f:33:85:90:00:c3:e1:48:4f:b9:e0:0a:20:a8:de:16:30: 7e:8c:c9:95:60:b5:15:2c:1f:8f:80:5a:7d:f7:b8:4b:f4:cc: 34:0e:5e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMn39DxBayJXQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDZiMTZkNmItNmQ0Yi00ZDdkLTg4OGQtMTNiMDA3MTNkMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbIUCovInf7ZsRys0RcMkkjLNaUFsnnMrzJT 9mvZOZ5NeeBdL2UH5B28qdOsHz7DSfA0bFX0kkD/ZU3iPQn6s+Jgi1JveV6OM2CL M+8RFSwhDtHsYNVEO/N1gjtSR9JkTGhK8pALI7rwCbhyOuvmoq8v0TUZxV5O6Hz/ scvrW1N9BjhNXPvmaTqz6OjHTikhBPaNsD26sdY0sLRCPe8x6anFcO0WOx0laOPy CvJddX8bGIZMKs+i9lYCvxdNjMxbMttDjIYd1BzcxWpCGtYo7VVQQETA6aho1OB+ VTALbF8V0pin1WmQHtOqq2c0tgxRjUFQXUdmy7p/rk/N/9uFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUwIZvTddhA9lpCwhFoja//0jKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvY2Q4MWUyZjEtYjFlZS0z MzM5LThmZTUtZWNkYzUxZDEwODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlaUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEf+RakRWmCZFAd3HlCLulBGqCPFdW93jAfgvat3PhA6yqYaWAi08XL g/T7wJka4oc14D3JIveoKNn6omqXdRYSKFyarJ9u9JyqN/I62FgJ0/yOLiPuij3n L39QVXn1Fe5xn/msRu2mqI9qiMGQ7DZbJG+ZDYtf2ImK3i5/iFui0Ndu57CuJcRd hOAjK8FdwAfdlrNw+0MfwQFCgdj7Aq7aLhrhawcYl8rqwZVqArrt/EMK37LpdCx0 yw+ubJoo5FCQLZ+f5fcM8x7mO6R51M1K4ZLc2Z//zFyPM4WQAMPhSE+54AogqN4W MH6MyZVgtRUsH4+AWn33uEv0zDQOXto= -----END CERTIFICATE-----Generated at Fri Aug 1 17:53:18 2025 by rpki-client