$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa File: fb7a217d-e822-3be1-b05d-382454b43eb4.roa (raw, json) Hash identifier: gRxKIuOxBr5mLZvHxDe8AYvz6urjHhNqgPbQ9z+BNx0= Subject key identifier: 87:C7:FA:AE:A3:91:E3:EE:52:8A:FF:2D:A2:CB:CE:27:4B:85:6E:4F Certificate issuer: /CN=b89f752a-b36c-4af5-938d-969edb017937 Certificate serial: 010D0C9F4328584AF9513CD1CE3BD232B9F02370 Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 9025 IP address blocks: 153.46.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3c:d1:ce:3b:d2:32:b9:f0:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=811f7763-41db-4479-9d4e-f5addabb7d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9e:89:5f:c0:5f:79:b4:cd:dc:ad:58:95:7e: 13:35:7c:0e:00:05:08:2a:a9:52:94:b8:af:11:35: 29:a8:ff:d4:4b:11:c0:3b:97:ae:60:1c:42:70:a1: d6:9f:83:b7:7a:7b:ce:b5:d4:58:61:3d:9c:71:cb: d0:e7:f7:69:52:db:fb:59:4d:0a:22:f2:d1:39:c6: 8d:60:4d:ff:2e:eb:c5:f1:2f:7e:0e:fd:13:ed:c5: 21:0f:9b:99:41:54:f8:d7:b3:a8:ab:8a:0c:0d:93: 41:d2:8b:65:77:97:0c:dc:64:a9:6d:be:06:d9:54: e2:9d:c8:0d:56:9d:ee:05:0e:96:13:00:b1:17:7d: 23:18:c5:6e:6d:26:26:11:91:95:ba:a5:4f:1e:bf: 46:a0:ad:37:dd:a7:04:ec:fd:62:4d:9c:78:d2:db: b6:29:9c:b0:dc:ab:8b:75:01:d0:a9:e3:d8:5f:ba: 75:c7:40:d3:5d:b0:bc:7c:3d:51:7b:2c:e0:ab:39: 3d:39:01:a8:13:39:35:b6:e0:7c:81:b0:b5:c1:c5: 2a:e6:be:d2:bf:55:ef:8c:8a:2b:5f:1f:05:31:2c: ac:49:3f:70:0b:32:7d:ad:bf:53:af:5f:35:eb:15: 4c:8b:02:69:5c:85:ce:9a:ba:f8:cb:ec:30:6c:64: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:FA:AE:A3:91:E3:EE:52:8A:FF:2D:A2:CB:CE:27:4B:85:6E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl X509v3 Authority Key Identifier: keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer sbgp-ipAddrBlock: critical IPv4: 153.46.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b0:d0:52:2f:9d:bd:15:9e:e6:07:88:de:22:e4:44:c2:08: 54:b6:68:30:e2:e3:50:b6:f9:2f:f0:d8:51:10:c8:12:3b:b9: 8a:78:5c:80:06:cc:85:65:5c:2e:77:b6:df:ce:b3:e0:22:ab: 40:de:a4:d5:9c:37:b6:43:29:03:bd:aa:16:23:f5:0b:ac:12: 8a:4c:fc:8b:a3:ad:fa:5e:33:e5:fe:69:ae:eb:d6:f3:3d:b9: fa:fe:fa:ca:a7:c5:a2:6d:fd:ca:73:9a:6c:e8:8f:1c:3c:4f: 8b:12:19:e9:55:b9:2a:a0:98:eb:4d:f0:50:28:06:b3:74:ef: ce:72:c6:51:04:04:0c:e8:52:e0:f0:d5:c3:c6:19:6b:4f:41: 62:4e:3a:e7:16:81:9a:fe:6e:e0:af:a3:1a:16:9b:c0:61:c1: 3e:ce:d8:99:94:8f:8b:9b:c6:6e:44:c1:a5:44:05:a3:ac:e7: cc:cb:09:e1:a6:39:b6:46:4c:22:ec:a2:48:d1:cb:d6:bd:21: 11:3a:03:e1:15:b7:16:8b:c7:12:05:93:5f:a5:53:b0:e8:a2: 78:ec:66:2f:36:9e:f9:ea:41:c4:69:80:ff:b9:6f:d9:9f:12: bc:75:57:ee:df:b0:a2:a4:6a:f1:1c:9f:50:8b:bb:69:ef:48: 60:76:7e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UTzRzjvSMrnwI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg5Zjc1MmEtYjM2Yy00YWY1LTkzOGQtOTY5ZWRiMDE3 OTM3MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODExZjc3NjMtNDFkYi00NDc5LTlkNGUtZjVhZGRhYmI3ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p6JX8BfebTN3K1YlX4TNXwOAAUIKqlSlLiv ETUpqP/USxHAO5euYBxCcKHWn4O3envOtdRYYT2cccvQ5/dpUtv7WU0KIvLROcaN YE3/LuvF8S9+Dv0T7cUhD5uZQVT417Ooq4oMDZNB0otld5cM3GSpbb4G2VTincgN Vp3uBQ6WEwCxF30jGMVubSYmEZGVuqVPHr9GoK033acE7P1iTZx40tu2KZyw3KuL dQHQqePYX7p1x0DTXbC8fD1Reyzgqzk9OQGoEzk1tuB8gbC1wcUq5r7Sv1XvjIor Xx8FMSysST9wCzJ9rb9Tr1816xVMiwJpXIXOmrr4y+wwbGRgXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfH+q6jkePuUor/LaLLzidLhW5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iODlm NzUyYS1iMzZjLTRhZjUtOTM4ZC05NjllZGIwMTc5MzcvZmI3YTIxN2QtZTgyMi0z YmUxLWIwNWQtMzgyNDU0YjQzZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjg5Zjc1MmEtYjM2Yy00YWY1LTkz OGQtOTY5ZWRiMDE3OTM3L2I4OWY3NTJhLWIzNmMtNGFmNS05MzhkLTk2OWVkYjAx NzkzNy5jcmwwHwYDVR0jBBgwFoAUuonUM4+GSs6IR1dJ8iuEb2su+c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iODlmNzUyYS1iMzZjLTRhZjUtOTM4ZC05Njll ZGIwMTc5MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmS6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGw0FIvnb0VnuYHiN4i5ETCCFS2aDDi41C2+S/w2FEQyBI7uYp4XIAG zIVlXC53tt/Os+Aiq0DepNWcN7ZDKQO9qhYj9QusEopM/IujrfpeM+X+aa7r1vM9 ufr++sqnxaJt/cpzmmzojxw8T4sSGelVuSqgmOtN8FAoBrN0785yxlEEBAzoUuDw 1cPGGWtPQWJOOucWgZr+buCvoxoWm8BhwT7O2JmUj4ubxm5EwaVEBaOs58zLCeGm ObZGTCLsokjRy9a9IRE6A+EVtxaLxxIFk1+lU7DoonjsZi82nvnqQcRpgP+5b9mf Erx1V+7fsKKkavEcn1CLu2nvSGB2fjg= -----END CERTIFICATE-----Generated at Tue Aug 26 09:02:23 2025 by rpki-client