$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/07e46f16-baec-340c-8f41-f5f171a33ae8.roa File: 07e46f16-baec-340c-8f41-f5f171a33ae8.roa (raw, json) Hash identifier: viX7f1xF9UkZ7mn6fqZRmcX1sfOahf1TPZJjQ0luFd8= Subject key identifier: 5B:7D:17:15:A2:57:78:0B:95:90:B8:6D:FA:C7:5C:A1:35:D3:45:CC Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584B15897E917FBAB58097EE8600 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/07e46f16-baec-340c-8f41-f5f171a33ae8.roa Signing time: Thu 04 Sep 2025 15:36:43 +0000 ROA not before: Thu 04 Sep 2025 15:36:43 +0000 ROA not after: Wed 03 Dec 2025 16:36:43 +0000 asID: 8075 IP address blocks: 153.65.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:89:7e:91:7f:ba:b5:80:97:ee:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Sep 4 15:36:43 2025 GMT Not After : Dec 3 16:36:43 2025 GMT Subject: CN=0973f71b-3c3a-4a11-ba26-8f3bf428410b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:36:f7:c1:6e:3e:62:d6:48:2e:e2:08:43: 76:2f:ec:e1:32:dc:de:ca:dc:83:50:20:d8:6d:f1: 51:33:36:30:37:d8:ae:32:dd:8f:ba:11:b8:cb:f7: a1:af:63:13:d7:63:d0:55:f5:0b:1d:40:b1:ef:31: 11:17:e0:24:11:b2:0d:f4:b6:47:0d:7f:2e:46:e8: 58:c1:13:88:81:62:94:6f:64:d7:f8:7f:d5:5d:a1: 79:8b:92:a4:50:1d:4a:f7:3e:f3:29:ef:02:7e:ca: 86:fe:1e:d2:ef:99:b5:2f:20:bd:e4:f8:14:2b:0d: 6f:55:0e:44:e2:dd:e5:b3:51:a0:36:d2:fa:d1:c0: 2c:42:3e:c3:0c:a1:14:57:c5:75:7f:bf:b3:60:b7: 61:ae:74:54:e8:56:3e:f8:fa:d4:6a:e4:c1:5d:87: 0c:95:c0:18:bd:e6:dc:32:bd:45:4f:98:c8:39:69: 6d:e1:e7:63:83:0a:73:af:11:83:8f:88:bc:f0:53: fb:d4:f2:cc:93:5e:4a:17:35:ee:8c:26:52:89:37: 8b:c4:94:dc:fd:46:81:0f:1c:44:15:d9:ec:25:6b: 42:bd:81:12:2b:93:43:65:99:03:39:fe:82:28:f0: 19:d5:99:be:b2:ec:10:58:0a:6f:77:10:02:3d:98: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:17:15:A2:57:78:0B:95:90:B8:6D:FA:C7:5C:A1:35:D3:45:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/07e46f16-baec-340c-8f41-f5f171a33ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b9:8b:92:a3:9d:f4:1a:29:12:c9:ce:c2:30:e1:38:10:b7: 30:e5:f3:13:2c:ce:fc:d0:3f:e5:44:13:fc:b6:da:08:81:35: 4d:4e:3e:de:2e:b2:21:fd:82:fb:41:ba:38:f6:d9:c2:df:ae: 06:28:b2:43:7f:30:e9:75:cb:64:b2:8c:f3:3f:9e:5d:e9:e9: 07:03:0c:32:96:75:d5:c8:a7:88:9c:39:17:cc:10:f6:74:0f: cf:bf:54:6a:e9:15:71:d1:24:00:c5:9e:93:34:a8:87:d3:1b: e5:1c:8b:c1:95:e4:3a:a0:81:81:7a:8a:61:57:a3:3d:f7:75: 19:20:8f:76:cd:26:09:7f:d8:19:51:36:b0:b6:ca:5f:76:68: ea:ef:a2:b8:dd:a2:47:f0:d1:a2:b3:d5:d9:25:0a:0e:e9:40: f3:be:1e:a8:ad:e2:14:8a:bc:f3:d8:db:f5:cd:92:ed:fc:c8: 9c:1f:6b:e7:03:d2:53:9f:e7:3b:70:fb:70:0b:85:e6:29:45: a7:0a:44:e4:d3:77:34:62:f9:12:9c:d7:a5:d0:38:b1:58:59: 84:22:f0:51:81:3a:7d:11:ea:50:9a:7c:fe:2a:a3:e8:db:66: d7:32:6c:74:c4:3a:64:d7:f1:98:d8:2b:87:49:4c:c0:e4:f1: 8c:50:ea:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsViX6Rf7q1gJfuhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI1MDkwNDE1MzY0M1oXDTI1MTIwMzE2MzY0M1owLzEtMCsGA1UEAxMk MDk3M2Y3MWItM2MzYS00YTExLWJhMjYtOGYzYmY0Mjg0MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuQ298FuPmLWSC7iCEN2L+zhMtzeytyDUCDY bfFRMzYwN9iuMt2PuhG4y/ehr2MT12PQVfULHUCx7zERF+AkEbIN9LZHDX8uRuhY wROIgWKUb2TX+H/VXaF5i5KkUB1K9z7zKe8CfsqG/h7S75m1LyC95PgUKw1vVQ5E 4t3ls1GgNtL60cAsQj7DDKEUV8V1f7+zYLdhrnRU6FY++PrUauTBXYcMlcAYvebc Mr1FT5jIOWlt4edjgwpzrxGDj4i88FP71PLMk15KFzXujCZSiTeLxJTc/UaBDxxE FdnsJWtCvYESK5NDZZkDOf6CKPAZ1Zm+suwQWApvdxACPZh/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt9FxWiV3gLlZC4bfrHXKE100XMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvMDdlNDZmMTYtYmFlYy0z NDBjLThmNDEtZjVmMTcxYTMzYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC5i5KjnfQaKRLJzsIw4TgQtzDl8xMszvzQP+VEE/y22giBNU1OPt4u siH9gvtBujj22cLfrgYoskN/MOl1y2SyjPM/nl3p6QcDDDKWddXIp4icORfMEPZ0 D8+/VGrpFXHRJADFnpM0qIfTG+Uci8GV5DqggYF6imFXoz33dRkgj3bNJgl/2BlR NrC2yl92aOrvorjdokfw0aKz1dklCg7pQPO+Hqit4hSKvPPY2/XNku38yJwfa+cD 0lOf5ztw+3ALheYpRacKROTTdzRi+RKc16XQOLFYWYQi8FGBOn0R6lCafP4qo+jb ZtcybHTEOmTX8ZjYK4dJTMDk8YxQ6mE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:34 2025 by rpki-client