$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa File: 8473396c-8a36-3619-80aa-c025ed526998.roa (raw, json) Hash identifier: hVVNpbRM4323upaXq0yabDaCEhsnyfBpL59/LIJbuhY= Subject key identifier: 37:AE:25:CF:2F:D1:33:8B:64:04:A8:CA:80:3C:E1:FD:46:84:BA:80 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584AA6F62B052B7C536AFC013AE8 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 13984 IP address blocks: 164.153.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2b:05:2b:7c:53:6a:fc:01:3a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=b5d58837-bb0a-47ef-82f9-0e4406410202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:6c:0b:8c:4d:37:f7:d9:60:f0:d9:ab:52: ec:65:66:d1:18:15:d1:52:4c:23:b5:16:99:d2:f2: d2:ee:bb:ca:f8:5d:64:eb:58:40:52:d1:c2:a6:56: e3:39:b4:5a:42:74:30:7d:b2:0f:ae:a1:77:fe:ce: 8c:59:b5:5b:f3:1d:5c:f9:b9:19:5c:61:ea:e0:46: ad:4a:03:88:40:6f:4c:30:e6:81:a0:f9:45:ba:74: 95:44:83:1a:cf:df:53:f1:b6:be:2c:c0:59:50:ba: 3c:97:46:70:cb:1f:bd:6a:2e:f3:3d:5a:77:7e:31: bd:34:28:fb:93:05:27:90:b0:c3:48:6e:60:20:6e: 2b:66:8d:b2:c7:df:d1:51:24:2f:b1:61:ae:32:c8: e6:a5:08:17:3d:c9:02:cf:6a:01:6b:44:d9:ba:40: e4:93:b6:38:41:3b:c9:13:67:82:2a:b9:de:14:d2: e3:c0:17:b8:cd:a2:65:f0:9b:bf:9a:1e:cb:1f:cd: 7f:cb:f1:4d:62:3a:41:70:3c:b7:06:21:08:d8:6d: 85:71:fb:6a:2d:27:0c:cd:e5:e0:54:fd:f1:c0:66: 29:2a:75:72:f4:68:25:4a:d1:22:52:64:1b:6f:fb: 1d:c9:0e:01:f9:79:cf:be:be:92:f9:84:95:6e:d8: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AE:25:CF:2F:D1:33:8B:64:04:A8:CA:80:3C:E1:FD:46:84:BA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 164.153.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:89:cd:3b:06:e3:8f:1a:06:4b:0b:68:f4:04:98:ba:a8:bd: 31:e9:24:89:fa:04:db:ef:5c:5f:8d:1e:7c:e5:0b:d2:9f:69: 9a:77:12:6c:5b:96:ed:05:7e:bf:97:15:f4:eb:3e:73:5e:1f: 20:06:a7:71:fa:14:a2:02:82:c1:87:27:7b:a4:59:86:b7:8e: 79:66:53:19:88:a4:87:bb:b6:5d:cc:c7:6f:ee:04:2f:4a:d0: 1a:73:42:38:9a:73:3e:84:23:8e:2a:23:84:78:2a:3c:c0:24: 11:8b:d2:fb:d4:12:56:93:e1:fc:ba:a3:46:98:59:13:2a:3c: 7c:8e:94:54:d2:73:7a:a3:93:95:17:e5:04:75:3d:f9:92:dd: ca:3a:27:cd:9c:b1:91:91:0b:86:9d:1e:f8:79:a5:49:7e:d8: 9b:26:17:a0:9d:6b:95:6f:3f:85:43:0a:1f:da:03:2d:64:10: f5:9a:a9:57:4c:c4:bc:de:7b:65:a0:8f:30:cb:ad:04:8f:cd: 09:71:3a:28:69:ae:c8:3b:ee:ea:95:6a:6a:55:e6:6f:a7:b2: 2c:18:9a:87:2f:3d:4d:3d:98:77:16:e3:f6:42:a2:ec:21:cb: d1:87:ba:c8:97:56:21:35:a8:3f:69:7b:54:fc:e0:30:31:c2: 85:b4:01:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9isFK3xTavwBOugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YjVkNTg4MzctYmIwYS00N2VmLTgyZjktMGU0NDA2NDEwMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUZsC4xNN/fZYPDZq1LsZWbRGBXRUkwjtRaZ 0vLS7rvK+F1k61hAUtHCplbjObRaQnQwfbIPrqF3/s6MWbVb8x1c+bkZXGHq4Eat SgOIQG9MMOaBoPlFunSVRIMaz99T8ba+LMBZULo8l0Zwyx+9ai7zPVp3fjG9NCj7 kwUnkLDDSG5gIG4rZo2yx9/RUSQvsWGuMsjmpQgXPckCz2oBa0TZukDkk7Y4QTvJ E2eCKrneFNLjwBe4zaJl8Ju/mh7LH81/y/FNYjpBcDy3BiEI2G2FcftqLScMzeXg VP3xwGYpKnVy9GglStEiUmQbb/sdyQ4B+XnPvr6S+YSVbtjOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeuJc8v0TOLZASoyoA84f1GhLqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvODQ3MzM5NmMtOGEzNi0z NjE5LTgwYWEtYzAyNWVkNTI2OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaJzTsG448aBksLaPQEmLqovTHpJIn6BNvvXF+NHnzlC9KfaZp3Emxb lu0Ffr+XFfTrPnNeHyAGp3H6FKICgsGHJ3ukWYa3jnlmUxmIpIe7tl3Mx2/uBC9K 0BpzQjiacz6EI44qI4R4KjzAJBGL0vvUElaT4fy6o0aYWRMqPHyOlFTSc3qjk5UX 5QR1PfmS3co6J82csZGRC4adHvh5pUl+2JsmF6Cda5VvP4VDCh/aAy1kEPWaqVdM xLzee2WgjzDLrQSPzQlxOihprsg77uqVampV5m+nsiwYmocvPU09mHcW4/ZCouwh y9GHusiXViE1qD9pe1T84DAxwoW0ASA= -----END CERTIFICATE-----Generated at Tue Jul 29 19:36:34 2025 by rpki-client