$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa File: cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa (raw, json) Hash identifier: o9kS+H8vuMMokOcTaPo/5prl8OQifhlDXLVa3RCr7Q4= Subject key identifier: A9:CF:5E:60:1C:DF:3D:7F:2B:A4:A1:8F:C6:B7:54:73:21:AE:06:8D Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584B21CC1CFEA36C8D4A6A381334 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 5769 IP address blocks: 147.253.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1c:fe:a3:6c:8d:4a:6a:38:13:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=606bbe76-128e-40ed-801f-32cdd23574bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:a5:fa:d7:de:5f:05:fe:21:2b:cd:9a:91: b6:b3:5d:88:23:c1:5a:01:59:e8:f0:b1:7e:13:99: 06:47:19:e2:43:17:98:a5:60:25:45:51:4c:b2:54: f7:6a:07:4e:bf:ae:65:33:8d:a6:19:5f:9c:3d:d2: 21:e0:ca:f2:e3:d8:9a:21:78:85:47:83:6c:f7:30: 11:82:53:77:33:e2:37:16:99:69:ec:61:cc:e8:bb: 09:76:9e:ea:8f:ec:ae:dd:db:91:9c:1b:ea:f2:3e: 93:6a:b0:a5:b3:38:d0:0a:3f:48:b4:e5:66:a4:18: 04:ce:49:3f:f9:76:f1:dc:9d:a7:18:af:3b:aa:48: 28:9f:8f:de:97:dd:ac:03:32:c3:b7:c4:48:85:cb: b4:6e:b3:99:07:aa:42:12:2b:1e:69:96:e2:ec:51: eb:e8:ea:e7:10:8a:99:e9:f7:6d:c8:60:14:9b:b0: ff:69:4e:12:bb:ab:89:9c:ef:20:41:92:e1:3e:74: 9e:f0:a8:d7:ba:78:8c:ca:26:f6:f5:14:66:32:f8: 81:d6:ee:32:6a:18:3d:2e:f2:15:35:35:3d:7c:be: 06:a7:8e:73:27:99:74:7e:31:cc:1f:06:69:56:22: 15:55:21:56:e9:64:b6:a5:1f:66:15:50:5c:1e:56: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CF:5E:60:1C:DF:3D:7F:2B:A4:A1:8F:C6:B7:54:73:21:AE:06:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/cb39228d-326a-3a43-b2b2-2339eb5ab4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 147.253.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:40:8d:a3:0e:2c:b5:8e:9d:ae:2b:40:97:0a:be:da:12:8c: 8a:36:5e:7b:2b:52:56:ba:32:8f:94:55:86:88:c0:aa:dd:0a: 71:b5:2f:e8:0e:38:ef:94:05:11:4a:1a:28:c1:26:0d:00:0d: d0:70:f4:fd:3b:de:ad:97:ad:b2:c8:64:26:13:06:18:1a:0a: 17:be:f0:bf:65:3b:17:ee:2e:85:68:4b:5c:ee:9c:ed:64:c5: fa:67:69:a8:5e:46:6e:dc:e4:17:ca:0f:ef:15:e3:95:bf:87: 87:34:55:b6:e8:80:df:7d:e3:4d:2d:79:1b:96:8e:dc:0f:89: 0c:07:21:24:72:a8:69:e5:bb:ab:68:91:83:11:80:ab:b5:7c: 66:22:9c:93:6a:f8:4c:de:2a:eb:41:1f:fd:f2:11:94:84:df: 8b:3d:20:ca:09:11:f1:75:d0:db:4a:c3:c9:46:52:3c:4f:d3: bc:71:19:73:82:77:44:1b:28:42:4d:87:26:9b:b8:2d:be:82: 8c:c9:db:3d:22:24:3c:aa:38:0d:ca:3e:b6:dc:cd:ee:e7:11: 20:c5:c5:5d:9a:49:82:a5:8e:7c:0d:c5:98:0f:01:be:81:c1: a8:66:cf:7e:73:58:25:a8:a4:22:38:27:78:33:82:ab:b0:62: ce:17:a1:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBz+o2yNSmo4EzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NjA2YmJlNzYtMTI4ZS00MGVkLTgwMWYtMzJjZGQyMzU3NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop+l+tfeXwX+ISvNmpG2s12II8FaAVno8LF+ E5kGRxniQxeYpWAlRVFMslT3agdOv65lM42mGV+cPdIh4Mry49iaIXiFR4Ns9zAR glN3M+I3Fplp7GHM6LsJdp7qj+yu3duRnBvq8j6TarClszjQCj9ItOVmpBgEzkk/ +Xbx3J2nGK87qkgon4/el92sAzLDt8RIhcu0brOZB6pCEiseaZbi7FHr6OrnEIqZ 6fdtyGAUm7D/aU4Su6uJnO8gQZLhPnSe8KjXuniMyib29RRmMviB1u4yahg9LvIV NTU9fL4Gp45zJ5l0fjHMHwZpViIVVSFW6WS2pR9mFVBcHlajEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnPXmAc3z1/K6Shj8a3VHMhrgaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvY2IzOTIyOGQtMzI2YS0z YTQzLWIyYjItMjMzOWViNWFiNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGk/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNAjaMOLLWOna4rQJcKvtoSjIo2XnsrUla6Mo+UVYaIwKrdCnG1L+gO OO+UBRFKGijBJg0ADdBw9P073q2XrbLIZCYTBhgaChe+8L9lOxfuLoVoS1zunO1k xfpnaaheRm7c5BfKD+8V45W/h4c0VbbogN99400teRuWjtwPiQwHISRyqGnlu6to kYMRgKu1fGYinJNq+EzeKutBH/3yEZSE34s9IMoJEfF10NtKw8lGUjxP07xxGXOC d0QbKEJNhyabuC2+gozJ2z0iJDyqOA3KPrbcze7nESDFxV2aSYKljnwNxZgPAb6B wahmz35zWCWopCI4J3gzgquwYs4XoXQ= -----END CERTIFICATE-----Generated at Thu Sep 18 05:47:58 2025 by rpki-client