$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa File: 533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa (raw, json) Hash identifier: IVtuXGCxveKNgSNoQ7RntBx/+aOoJuO4woxwzAe2XXk= Subject key identifier: 55:78:C0:63:DB:B6:F4:4C:EB:26:B6:FF:0B:7A:B6:79:D0:60:3C:3B Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B0CDC0961EA70337B2CA34900 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 62610 IP address blocks: 128.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:09:61:ea:70:33:7b:2c:a3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=80c0c8f2-9de0-4077-a355-6260797991b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:26:ff:89:af:c0:1a:83:1a:bc:e3:0e:f1: 5d:47:7d:c0:e9:8e:a0:28:0c:90:5d:bd:32:91:d7: 46:38:56:b6:da:e0:73:c6:13:2c:52:9e:ca:26:81: d7:21:4c:37:30:24:12:7c:3c:6d:3a:f6:4e:c3:ca: f9:87:5c:6d:d8:cd:bb:61:d1:68:bd:6d:2b:55:ae: 46:e8:7a:2d:86:dc:0b:b3:f5:85:08:e5:6d:bc:95: 02:ca:20:4f:3c:eb:cc:06:6c:66:8e:09:8c:56:a6: 3c:1e:de:c4:b3:1d:54:51:03:82:cb:28:4e:16:21: 7c:cf:ff:6c:84:4a:e3:e4:03:26:a6:9e:3a:93:18: 9a:d4:54:92:88:9e:c0:e4:f6:88:ff:7c:9b:ef:3e: f1:4d:29:46:73:32:2e:70:bb:23:ed:1c:35:ab:fb: 65:68:5a:d9:a4:04:cb:2d:ae:da:27:d7:24:38:dd: 05:1f:3a:61:5b:6e:06:28:67:85:ce:d4:19:05:0b: 8f:fe:3d:13:40:60:f9:50:06:df:e3:72:37:13:2a: a5:0b:a5:2f:28:de:9d:ea:5b:25:ee:55:17:e5:b6: c4:df:5b:e5:e1:a0:5c:e9:d3:fb:74:e0:67:ee:e7: 1e:5b:10:ba:e3:71:1b:e0:54:55:c5:9e:73:3b:f1: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:78:C0:63:DB:B6:F4:4C:EB:26:B6:FF:0B:7A:B6:79:D0:60:3C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e4:9d:67:4a:9d:53:87:f5:4a:95:7b:49:52:be:99:d1:a6: 0a:09:61:96:85:75:f8:21:97:aa:34:41:dd:4f:88:c2:ca:5f: a3:2e:9b:68:18:04:af:05:56:bb:f7:0c:6a:3a:ba:e1:75:09: e5:48:6c:fa:d8:93:06:77:d6:d0:3f:9b:c7:c5:58:1a:f6:ee: 54:d7:65:ba:37:8b:15:94:60:94:f3:41:f6:24:83:2a:31:a8: 37:79:cc:0e:f4:ce:71:10:e9:78:db:d6:c8:6b:31:20:a6:44: ed:a4:dd:58:09:4d:df:84:38:e6:72:b5:c8:d8:a4:e2:9c:63: dd:ec:e8:7b:5d:3b:3f:6c:06:4a:41:b5:bc:dc:a6:10:a3:1d: d7:9f:6f:e8:05:ec:1d:a3:26:13:ae:4f:78:33:a2:8f:93:cc: 69:54:57:24:a3:2e:24:d6:79:bb:d3:3b:7b:26:e8:1c:05:88: 6c:e7:27:ec:cc:eb:7f:aa:db:c4:6c:b4:24:7d:ab:8b:46:0c: 00:67:be:c1:3c:62:ce:17:96:15:ad:32:94:d7:6a:dd:9d:d2: 2c:e9:1d:6c:3c:e4:6e:d7:be:81:4e:cd:2d:89:9c:0c:4d:88: 34:21:8d:16:7e:4c:d8:a8:4a:8a:7a:d1:02:42:28:2d:ae:21: 29:71:73:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Alh6nAzeyyjSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ODBjMGM4ZjItOWRlMC00MDc3LWEzNTUtNjI2MDc5Nzk5MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcEm/4mvwBqDGrzjDvFdR33A6Y6gKAyQXb0y kddGOFa22uBzxhMsUp7KJoHXIUw3MCQSfDxtOvZOw8r5h1xt2M27YdFovW0rVa5G 6HothtwLs/WFCOVtvJUCyiBPPOvMBmxmjgmMVqY8Ht7Esx1UUQOCyyhOFiF8z/9s hErj5AMmpp46kxia1FSSiJ7A5PaI/3yb7z7xTSlGczIucLsj7Rw1q/tlaFrZpATL La7aJ9ckON0FHzphW24GKGeFztQZBQuP/j0TQGD5UAbf43I3EyqlC6UvKN6d6lsl 7lUX5bbE31vl4aBc6dP7dOBn7uceWxC643Eb4FRVxZ5zO/ERTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV4wGPbtvRM6ya2/wt6tnnQYDw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTMzZDU4NTgtMGFmNy0z ZTdhLWIxYzEtZGIyMDRlNjZlNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjknWdKnVOH9UqVe0lSvpnRpgoJYZaFdfghl6o0Qd1PiMLKX6Mum2gY BK8FVrv3DGo6uuF1CeVIbPrYkwZ31tA/m8fFWBr27lTXZbo3ixWUYJTzQfYkgyox qDd5zA70znEQ6Xjb1shrMSCmRO2k3VgJTd+EOOZytcjYpOKcY93s6HtdOz9sBkpB tbzcphCjHdefb+gF7B2jJhOuT3gzoo+TzGlUVySjLiTWebvTO3sm6BwFiGznJ+zM 63+q28RstCR9q4tGDABnvsE8Ys4XlhWtMpTXat2d0izpHWw85G7XvoFOzS2JnAxN iDQhjRZ+TNioSop60QJCKC2uISlxcy0= -----END CERTIFICATE-----Generated at Sun Sep 7 01:55:32 2025 by rpki-client