$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa File: 2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa (raw, json) Hash identifier: JotD3ij3vbhi9D4mtTnpLJlSePH0VPnmrBQ+CpiLKYQ= Subject key identifier: 14:C0:2D:B9:4B:6F:C9:68:29:A3:B8:54:C9:91:8F:6A:D1:81:F4:E0 Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584B15892566ACA0CB2EAAA8B680 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa Signing time: Thu 04 Sep 2025 15:36:00 +0000 ROA not before: Thu 04 Sep 2025 15:36:00 +0000 ROA not after: Wed 03 Dec 2025 16:36:00 +0000 asID: 395516 IP address blocks: 153.65.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:89:25:66:ac:a0:cb:2e:aa:a8:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Sep 4 15:36:00 2025 GMT Not After : Dec 3 16:36:00 2025 GMT Subject: CN=f655edb0-19bf-40e5-afcb-720233658566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:6a:aa:c0:e8:8b:07:18:ed:e6:27:a0:9b: 5f:aa:27:13:bf:1c:33:22:96:ff:3e:1f:69:2e:5a: 44:ef:dd:c0:f8:90:bc:c4:e5:51:76:06:f0:90:0a: 0d:b8:4f:87:a4:99:8d:d2:18:e1:a9:07:a2:c0:28: 98:29:59:13:fb:11:72:62:7f:be:b8:50:4e:ac:c5: 45:c6:c9:9d:73:82:0b:85:00:18:be:40:18:fe:37: c2:1c:e3:e6:8c:0d:a9:c5:a1:5a:6a:6b:76:1f:d8: ab:92:50:ca:61:fa:a9:9c:37:9d:99:9a:15:29:ac: 12:8b:75:ca:f8:65:b3:48:67:4a:a9:01:1b:f3:70: e5:dc:66:be:cf:16:1c:f3:cd:5b:bd:81:b5:e1:37: 32:fe:ef:6a:14:6b:39:61:31:50:53:f8:ac:6b:fd: ca:23:d5:1c:36:6c:14:ef:88:c9:03:db:24:ba:7d: 80:90:86:75:a6:4e:89:e2:f0:7e:59:d4:56:4b:21: 94:c4:f3:33:98:31:24:03:b8:c0:b6:55:49:49:cd: 05:38:4c:23:35:9d:a3:9c:93:92:9b:5d:f5:ab:aa: a2:7f:f7:dc:30:d0:6e:0c:f1:42:80:db:e9:c4:9c: 03:8a:3b:38:77:ea:ec:b5:34:3d:a1:4d:f5:4e:a5: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:2D:B9:4B:6F:C9:68:29:A3:B8:54:C9:91:8F:6A:D1:81:F4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:33:fc:0c:d0:1d:14:1a:80:36:bb:36:7d:80:b7:8d:70:f2: b4:54:d7:35:a8:b6:30:58:dc:c5:e8:63:e4:bd:f3:26:2e:c4: a1:53:59:8f:ff:0e:b6:6a:6d:a4:83:6b:1c:ca:af:70:d1:2e: 8a:92:4e:c3:58:14:69:66:f8:c3:4f:fc:aa:25:ec:2e:52:0c: d8:38:e5:f0:31:bb:04:f9:04:47:69:22:ab:d7:51:32:bd:35: 6b:d3:eb:3d:1c:42:58:bd:0e:de:ab:54:79:18:f5:6a:4b:37: 50:16:e2:56:b0:d7:5a:3c:e0:60:a5:46:d8:c8:42:c2:2b:c8: f9:bd:f5:85:53:be:cb:85:ba:e2:b4:4d:a7:8e:2e:3c:2f:1c: 87:ea:62:b9:99:eb:05:dd:06:48:70:58:51:c5:db:5f:54:47: f0:15:b9:80:54:6d:c2:37:bb:12:e1:70:77:cb:ca:7b:24:51: 1c:63:ec:00:99:0c:0f:bb:f2:d0:9e:47:64:32:ec:a7:8e:68: dd:e6:ae:06:35:1e:cf:ea:2d:b9:02:a6:6a:fe:80:83:fc:72: 9f:70:4a:73:30:37:cd:27:b2:cd:bb:00:49:55:00:85:96:68: 25:73:11:9a:17:85:09:61:a4:1a:41:26:81:1d:94:de:d7:78: 04:66:77:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsViSVmrKDLLqqotoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI1MDkwNDE1MzYwMFoXDTI1MTIwMzE2MzYwMFowLzEtMCsGA1UEAxMk ZjY1NWVkYjAtMTliZi00MGU1LWFmY2ItNzIwMjMzNjU4NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx1qqsDoiwcY7eYnoJtfqicTvxwzIpb/Ph9p LlpE793A+JC8xOVRdgbwkAoNuE+HpJmN0hjhqQeiwCiYKVkT+xFyYn++uFBOrMVF xsmdc4ILhQAYvkAY/jfCHOPmjA2pxaFaamt2H9irklDKYfqpnDedmZoVKawSi3XK +GWzSGdKqQEb83Dl3Ga+zxYc881bvYG14Tcy/u9qFGs5YTFQU/isa/3KI9UcNmwU 74jJA9skun2AkIZ1pk6J4vB+WdRWSyGUxPMzmDEkA7jAtlVJSc0FOEwjNZ2jnJOS m131q6qif/fcMNBuDPFCgNvpxJwDijs4d+rstTQ9oU31TqX7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTALblLb8loKaO4VMmRj2rRgfTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvMmEyZDUwM2QtNmNiMy0z OWEzLTgwNWUtYTlmNDFkM2Y4ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4z/AzQHRQagDa7Nn2At41w8rRU1zWotjBY3MXoY+S98yYuxKFTWY// DrZqbaSDaxzKr3DRLoqSTsNYFGlm+MNP/Kol7C5SDNg45fAxuwT5BEdpIqvXUTK9 NWvT6z0cQli9Dt6rVHkY9WpLN1AW4law11o84GClRtjIQsIryPm99YVTvsuFuuK0 TaeOLjwvHIfqYrmZ6wXdBkhwWFHF219UR/AVuYBUbcI3uxLhcHfLynskURxj7ACZ DA+78tCeR2Qy7KeOaN3mrgY1Hs/qLbkCpmr+gIP8cp9wSnMwN80nss27AElVAIWW aCVzEZoXhQlhpBpBJoEdlN7XeARmd98= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:28 2025 by rpki-client