$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa File: aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa (raw, json) Hash identifier: h2aM/d78D7ZwUgcpKRvcfmDgNHWffn6vaBooihfLFU8= Subject key identifier: A7:F8:95:D3:6F:1E:73:EA:9E:1A:18:23:C7:7F:2A:E6:B7:9C:D9:28 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584ACE0B931AC85F4CA29E9D0C80 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 92 IP address blocks: 128.153.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:93:1a:c8:5f:4c:a2:9e:9d:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=404a5eb9-15b4-4767-ad2d-3c1d02df3c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:88:17:d8:e5:0c:55:18:1f:97:e3:c4:e5: 2e:c6:18:de:7f:98:c9:73:00:84:d6:3d:21:53:c5: 95:2c:63:5c:35:69:12:8c:c3:d0:b8:87:0e:e7:99: 77:96:14:e1:3d:9b:77:01:0d:1c:0f:49:c8:42:e5: d0:9a:9f:3a:78:ce:9f:93:b9:91:65:65:26:be:89: 6c:b8:09:ac:6e:09:d3:aa:60:c5:93:9e:b5:6d:d9: 85:57:8c:d9:da:f8:03:ec:bd:99:ca:58:ed:75:6a: 4b:33:44:36:c2:7c:59:5b:51:f3:ef:fb:f1:b0:8c: aa:bb:37:65:de:40:87:b3:7e:97:df:46:ee:b8:9d: 00:a7:9a:a3:d0:a5:b5:90:df:36:91:3d:58:6a:fd: 8d:68:45:dc:e9:e4:90:a6:b7:72:7d:23:eb:e3:2c: 7f:dd:5a:38:3b:dd:d6:ed:63:32:ff:3e:57:7d:e9: 7d:ba:31:ee:9a:5d:ff:e2:57:c3:9a:0b:3a:9b:99: 0e:74:19:92:7e:52:3e:c6:6d:38:86:8b:67:e7:89: 19:a4:fe:e8:3f:66:19:c7:22:79:8f:fb:57:bf:22: b1:79:01:12:ca:da:96:24:e9:9b:ec:24:95:60:78: e2:40:3d:07:f4:9b:f2:67:81:5e:1c:e7:fb:31:68: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F8:95:D3:6F:1E:73:EA:9E:1A:18:23:C7:7F:2A:E6:B7:9C:D9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ac:f5:e6:be:62:21:e2:e3:62:f7:63:5a:b1:d2:9b:68:3e: 86:7a:d5:9a:5c:67:b0:bf:89:c8:aa:b5:0f:47:7d:69:9d:cc: ab:8b:8a:ce:23:25:e7:5c:76:87:f5:24:df:33:f3:d7:42:2c: e6:3f:3f:9c:f5:0d:27:86:01:87:8f:ad:65:9b:ed:8f:3b:6b: 6c:cd:2c:ac:c6:8d:88:8c:5d:77:af:c1:c4:ca:74:dc:63:85: 17:1e:49:21:8a:3e:b0:ea:91:44:d3:47:65:5d:55:d5:c6:7a: 07:00:8c:b9:07:e8:0f:0e:00:8e:f0:b6:0a:4d:a9:76:4b:25: 3c:75:2d:cb:e6:24:ae:9b:82:56:92:7d:95:c1:2a:0b:06:19: 4e:2c:b8:6b:79:e0:ce:cc:fb:94:97:86:d0:d0:4f:85:80:c3: c4:df:3b:31:39:3a:6b:87:70:b2:19:97:d1:b7:98:be:67:82: 97:c6:83:71:35:39:20:c5:bc:75:f5:a5:e2:83:b5:63:7b:24: 08:6d:16:71:2f:a7:82:9c:a5:21:51:21:8b:3a:36:3f:2e:be: b6:30:6d:5c:3e:70:cd:e1:13:8c:54:4a:f4:20:f0:64:53:db: d0:47:b0:52:b8:6c:49:a3:b1:76:59:27:a5:a6:29:e4:e2:38: 6c:ba:f1:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5MayF9Mop6dDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NDA0YTVlYjktMTViNC00NzY3LWFkMmQtM2MxZDAyZGYzYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNWIF9jlDFUYH5fjxOUuxhjef5jJcwCE1j0h U8WVLGNcNWkSjMPQuIcO55l3lhThPZt3AQ0cD0nIQuXQmp86eM6fk7mRZWUmvols uAmsbgnTqmDFk561bdmFV4zZ2vgD7L2ZyljtdWpLM0Q2wnxZW1Hz7/vxsIyquzdl 3kCHs36X30buuJ0Ap5qj0KW1kN82kT1Yav2NaEXc6eSQprdyfSPr4yx/3Vo4O93W 7WMy/z5Xfel9ujHuml3/4lfDmgs6m5kOdBmSflI+xm04hotn54kZpP7oP2YZxyJ5 j/tXvyKxeQESytqWJOmb7CSVYHjiQD0H9JvyZ4FeHOf7MWityQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf4ldNvHnPqnhoYI8d/Kua3nNkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvYWVlYjdlZGItYjc4Yy0z NjNkLTlkZmMtMjYxMzJjYjVkM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACis9ea+YiHi42L3Y1qx0ptoPoZ61ZpcZ7C/iciqtQ9HfWmdzKuLis4j Jedcdof1JN8z89dCLOY/P5z1DSeGAYePrWWb7Y87a2zNLKzGjYiMXXevwcTKdNxj hRceSSGKPrDqkUTTR2VdVdXGegcAjLkH6A8OAI7wtgpNqXZLJTx1LcvmJK6bglaS fZXBKgsGGU4suGt54M7M+5SXhtDQT4WAw8TfOzE5OmuHcLIZl9G3mL5ngpfGg3E1 OSDFvHX1peKDtWN7JAhtFnEvp4KcpSFRIYs6Nj8uvrYwbVw+cM3hE4xUSvQg8GRT 29BHsFK4bEmjsXZZJ6WmKeTiOGy68S8= -----END CERTIFICATE-----Generated at Wed Aug 20 21:16:43 2025 by rpki-client