$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/09ec274f-da2c-3656-b306-6333a9599045.roa File: 09ec274f-da2c-3656-b306-6333a9599045.roa (raw, json) Hash identifier: k/g0rP8vqIr8V8Udy0m6CjCxm8Q4UWUpv46inM/j4Nc= Subject key identifier: 52:F5:EA:2C:FD:57:5E:1C:11:15:64:45:38:B4:F5:F7:36:C2:8D:81 Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0 Certificate serial: 010D0C9F4328584B13D6A9C1B23ED1FBA445BB60 Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/09ec274f-da2c-3656-b306-6333a9599045.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 40916 IP address blocks: 163.123.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:a9:c1:b2:3e:d1:fb:a4:45:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e0a18281-37cb-4fb4-bdd6-efece8ca700b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:06:0b:f2:f3:04:be:50:e2:3c:0e:12:78:fc: 6f:4b:71:08:79:75:2e:c4:bc:92:9c:89:53:db:8f: 75:5a:11:9e:0d:f7:9e:32:80:85:58:b6:cd:0b:e1: 67:b8:c3:d7:c8:d0:5b:06:6b:d9:73:ad:cf:e5:fe: d5:6c:28:34:eb:18:65:3a:14:dc:95:8a:24:b6:35: da:41:cf:a2:38:d7:3b:ac:11:3d:c2:4b:d0:87:db: d7:e4:74:33:e8:95:4f:7e:f1:37:c6:bf:8b:a8:e5: ba:67:f1:a9:ba:a8:69:5d:ad:8d:a5:64:c9:03:ee: 4a:ee:5c:60:47:bc:2c:5d:1c:75:f0:19:72:2e:bd: 5e:d4:92:2a:5b:7e:32:f9:6b:99:57:7f:db:00:32: 21:59:95:7a:64:21:4b:fa:71:e1:74:a5:ed:76:23: 36:2f:28:cb:ea:aa:5e:4e:7f:22:62:df:fe:85:38: 3d:e4:77:d8:95:4e:04:97:f4:3b:ee:0b:9f:d2:d9: 72:e2:7d:cb:ba:b4:b4:1b:93:2d:1f:bb:80:df:68: 3e:c1:48:eb:0c:84:07:f5:92:04:d1:6a:70:23:fc: b2:0d:9d:b6:a0:c1:89:22:85:77:fd:9c:58:89:a8: 69:94:fb:1f:fa:b5:e3:34:ff:a4:d3:8a:c2:dd:76: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F5:EA:2C:FD:57:5E:1C:11:15:64:45:38:B4:F5:F7:36:C2:8D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/09ec274f-da2c-3656-b306-6333a9599045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl X509v3 Authority Key Identifier: keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer sbgp-ipAddrBlock: critical IPv4: 163.123.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5a:2e:08:f1:12:16:f5:cf:b7:df:a6:c3:64:84:1b:ef:4c: 0b:ad:5a:66:4e:cb:16:5c:95:22:b7:f7:b1:2d:43:45:82:ab: af:da:68:cf:a0:8a:55:08:e8:91:3e:b6:c4:ac:2c:88:1b:c6: cc:d7:61:b9:f9:76:5d:53:bb:b0:a0:d2:96:87:01:2a:1a:59: 4b:19:6d:1f:3c:0b:3f:0e:4e:37:26:fb:ce:50:00:54:6b:2b: 0d:0b:0b:c0:57:02:09:1f:dc:ff:fe:5e:4e:16:a9:5c:3f:ad: d8:5d:24:d5:6e:e6:6e:a1:c5:bb:f1:19:c7:49:b0:d3:88:02: e4:1c:0f:58:6e:63:17:0c:76:3d:0d:69:02:71:04:33:0c:af: ae:c8:65:2f:0e:7f:1d:d9:16:e4:97:3d:2e:d2:38:dc:a5:ce: e7:11:e3:7c:6b:ff:c7:f2:76:f4:a9:63:dc:3c:ea:8e:fb:c6: 8a:44:a2:df:7f:3f:24:fc:3f:ba:1c:b5:e6:a7:56:75:61:45: 52:2c:c1:1e:7c:72:e8:3a:18:41:64:ca:51:0f:46:cb:99:90: 2d:d9:2d:1e:3d:be:f1:d5:a9:d4:18:0a:29:4f:72:10:57:78: 6c:b5:0c:85:9d:c3:b6:c2:04:b7:ee:8a:e4:e5:21:95:32:e6: 76:d6:5f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qnBsj7R+6RFu2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5 ZmUwMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTBhMTgyODEtMzdjYi00ZmI0LWJkZDYtZWZlY2U4Y2E3MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AYL8vMEvlDiPA4SePxvS3EIeXUuxLySnIlT 2491WhGeDfeeMoCFWLbNC+FnuMPXyNBbBmvZc63P5f7VbCg06xhlOhTclYoktjXa Qc+iONc7rBE9wkvQh9vX5HQz6JVPfvE3xr+LqOW6Z/GpuqhpXa2NpWTJA+5K7lxg R7wsXRx18BlyLr1e1JIqW34y+WuZV3/bADIhWZV6ZCFL+nHhdKXtdiM2LyjL6qpe Tn8iYt/+hTg95HfYlU4El/Q77guf0tly4n3LurS0G5MtH7uA32g+wUjrDIQH9ZIE 0WpwI/yyDZ22oMGJIoV3/ZxYiahplPsf+rXjNP+k04rC3XbOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL16iz9V14cERVkRTi09fc2wo2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1 NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvMDllYzI3NGYtZGEyYy0z NjU2LWIzMDYtNjMzM2E5NTk5MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1 OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh ZmMwNTlmZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3uZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFaLgjxEhb1z7ffpsNkhBvvTAutWmZOyxZclSK397EtQ0WCq6/aaM+g ilUI6JE+tsSsLIgbxszXYbn5dl1Tu7Cg0paHASoaWUsZbR88Cz8OTjcm+85QAFRr Kw0LC8BXAgkf3P/+Xk4WqVw/rdhdJNVu5m6hxbvxGcdJsNOIAuQcD1huYxcMdj0N aQJxBDMMr67IZS8Ofx3ZFuSXPS7SONylzucR43xr/8fydvSpY9w86o77xopEot9/ PyT8P7octeanVnVhRVIswR58cug6GEFkylEPRsuZkC3ZLR49vvHVqdQYCilPchBX eGy1DIWdw7bCBLfuiuTlIZUy5nbWX/w= -----END CERTIFICATE-----Generated at Mon Sep 15 17:54:05 2025 by rpki-client