$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa File: bcb675ae-285c-35df-9170-d65297df0a1f.roa (raw, json) Hash identifier: XWneXK7Zty+xf8gQ1SaY6pvlIzLhzKkfIYKPupIMVoI= Subject key identifier: F6:F2:E8:9F:E8:41:75:F5:5F:2E:F6:C5:8C:B7:45:88:6D:01:5E:E2 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584ACE0B92EC2DA83819F598BE00 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 92 IP address blocks: 128.153.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:92:ec:2d:a8:38:19:f5:98:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=2a38dae4-fe55-4d0a-a5ba-fb831e84d143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:8a:bb:f5:ab:a4:f9:ea:c3:a8:f8:b2:ce: 61:d4:a3:6e:9b:c1:70:07:03:38:66:73:ad:66:fa: 7a:bb:03:52:63:8c:91:0e:21:f6:35:d9:09:e0:db: f1:06:6a:94:31:5e:5f:c1:06:21:d5:20:32:fe:ba: 41:23:5b:21:6a:72:36:4e:f4:3b:22:31:1c:6a:5b: ca:bf:7d:fe:2d:bb:7c:af:cf:24:38:a1:50:7a:12: e9:6d:74:38:37:28:97:4d:54:25:76:d2:db:70:e4: 10:85:6e:fb:73:df:a1:67:3a:fc:24:26:b4:41:1c: be:0e:83:23:14:33:11:89:47:4e:11:15:4d:c8:40: 94:69:0d:86:3a:d6:62:f3:74:6a:b8:80:12:29:9d: 19:fd:c6:fd:7f:80:0c:f1:ea:4b:f1:34:a8:64:e1: 18:9d:09:4e:c1:80:04:15:df:1f:9c:b8:f7:3d:b7: 35:a7:df:e9:cb:9f:f9:b2:b8:18:fe:ca:ff:22:6d: 34:c0:0e:26:75:b3:90:ec:0f:58:b9:3e:f8:88:ef: 2e:5f:c0:d5:e4:c6:54:56:4b:f1:a5:3a:37:bc:b4: e1:4d:90:ca:67:d7:22:f2:ea:93:f2:21:85:e0:59: da:c9:8a:8b:59:72:65:ab:62:f8:17:54:4e:c2:17: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F2:E8:9F:E8:41:75:F5:5F:2E:F6:C5:8C:B7:45:88:6D:01:5E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:23:b5:6f:5f:26:01:6b:b2:c8:8a:80:a3:5c:0a:b5:fb:73: 79:57:a7:0b:d3:dd:ef:2c:70:46:c5:48:72:18:d3:d0:1b:67: ce:7e:af:be:ca:1a:15:31:74:c4:d8:65:a6:26:89:81:44:9d: 48:7f:a9:68:fd:88:1a:1d:ce:79:28:97:9a:7d:af:60:a3:01: a0:b1:c8:3f:78:bf:fe:fb:35:18:eb:42:66:d6:c4:2a:fc:de: d5:8d:c5:b9:d4:84:f9:12:8c:4f:22:ae:2a:71:06:9c:50:9c: 5d:c4:9c:59:80:4f:30:72:86:e5:1c:d3:dc:d1:70:0c:ca:c1: 7f:23:29:dc:94:34:99:11:34:b7:6d:e4:dc:22:eb:73:85:fa: 3f:ca:1e:8c:25:6b:7e:c2:6c:0a:18:1e:29:82:a0:0b:7e:28: 7b:9d:96:b3:e8:ce:4c:24:54:d9:e7:68:6c:65:ab:7b:d2:ff: db:65:e9:9b:19:73:7e:58:d8:48:95:f7:3d:3e:1e:26:28:e2: df:ee:3d:9d:5a:32:df:bd:a8:7b:32:2f:83:36:02:e9:9f:35: 2c:2b:84:31:0a:4f:02:33:3a:d6:bc:9d:e6:58:51:a1:ee:5f: 18:c4:5b:7b:ee:0b:16:72:a6:77:74:82:56:c0:4b:3b:57:9c: 49:5b:29:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5LsLag4GfWYvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MmEzOGRhZTQtZmU1NS00ZDBhLWE1YmEtZmI4MzFlODRkMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr56Ku/WrpPnqw6j4ss5h1KNum8FwBwM4ZnOt Zvp6uwNSY4yRDiH2NdkJ4NvxBmqUMV5fwQYh1SAy/rpBI1shanI2TvQ7IjEcalvK v33+Lbt8r88kOKFQehLpbXQ4NyiXTVQldtLbcOQQhW77c9+hZzr8JCa0QRy+DoMj FDMRiUdOERVNyECUaQ2GOtZi83RquIASKZ0Z/cb9f4AM8epL8TSoZOEYnQlOwYAE Fd8fnLj3Pbc1p9/py5/5srgY/sr/Im00wA4mdbOQ7A9YuT74iO8uX8DV5MZUVkvx pTo3vLThTZDKZ9ci8uqT8iGF4FnayYqLWXJlq2L4F1ROwhfKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPby6J/oQXX1Xy72xYy3RYhtAV7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvYmNiNjc1YWUtMjg1Yy0z NWRmLTkxNzAtZDY1Mjk3ZGYwYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4jtW9fJgFrssiKgKNcCrX7c3lXpwvT3e8scEbFSHIY09AbZ85+r77K GhUxdMTYZaYmiYFEnUh/qWj9iBodznkol5p9r2CjAaCxyD94v/77NRjrQmbWxCr8 3tWNxbnUhPkSjE8iripxBpxQnF3EnFmATzByhuUc09zRcAzKwX8jKdyUNJkRNLdt 5Nwi63OF+j/KHowla37CbAoYHimCoAt+KHudlrPozkwkVNnnaGxlq3vS/9tl6ZsZ c35Y2EiV9z0+HiYo4t/uPZ1aMt+9qHsyL4M2AumfNSwrhDEKTwIzOta8neZYUaHu XxjEW3vuCxZypnd0glbASztXnElbKW8= -----END CERTIFICATE-----Generated at Wed Aug 20 21:27:41 2025 by rpki-client