$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa File: d0283847-bee4-35b0-b680-fdfa9b481b80.roa (raw, json) Hash identifier: XCJLnhQm97iyqG70aYzr/O6vWoNW1WkJJY5iQ6Kvhio= Subject key identifier: B6:E1:62:2F:69:81:E0:31:74:FA:65:89:28:31:A9:B1:FC:7F:BE:4A Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B110BF9732CED70A8EADAE8D8 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14090 IP address blocks: 64.255.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:f9:73:2c:ed:70:a8:ea:da:e8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=6e1b84bc-4e5b-48a3-b429-da9f9448133a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:be:a8:97:54:e6:a2:c3:4d:03:ef:b2:79: 02:a3:69:1b:f9:0e:00:7c:63:fe:c5:d0:c2:f4:39: 2c:77:7e:f6:2f:23:bb:b9:4d:9c:cd:9d:99:14:39: fb:46:be:a4:0d:d3:9b:22:fd:cf:42:a6:e9:31:3c: e5:61:08:93:fe:c6:c2:38:07:4f:5a:53:82:42:09: 37:ab:09:b7:cf:eb:7b:a3:f0:3b:42:5a:f1:b9:e1: a3:49:de:17:26:d1:77:7a:bd:c2:72:e1:a8:54:ec: 58:93:9b:c9:3c:23:b2:c9:22:26:05:38:c2:87:39: 1d:6b:90:1e:41:a7:6e:42:10:e2:05:4f:b5:26:da: 53:55:6a:f1:df:d0:d9:83:f4:0e:c9:7d:4d:4d:67: eb:68:7a:cd:a1:cd:21:c2:81:35:b3:69:92:aa:16: 68:4c:6a:fc:02:1c:7d:66:17:ca:c0:fe:a7:f1:4f: 9c:43:ce:4a:dd:39:e8:c7:f5:6e:e0:65:cb:2e:5c: 59:2b:b2:95:cd:82:69:3c:a9:93:8d:cb:44:6b:bb: 11:25:0a:f5:99:85:c1:e2:0d:1a:ed:9d:4d:0e:28: f6:d2:3b:b1:b3:80:59:0c:23:fa:26:b1:92:ab:d7: b7:41:a4:dc:ee:52:ce:34:2f:ce:7a:ac:7a:35:02: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E1:62:2F:69:81:E0:31:74:FA:65:89:28:31:A9:B1:FC:7F:BE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6c:d4:09:6f:bd:03:a7:a6:f3:e3:9e:66:da:79:a8:20:12: 2c:0d:bb:04:03:e8:37:89:24:29:e7:24:05:28:6e:d7:22:fd: 50:f6:ff:4c:76:79:75:87:c0:bc:01:b9:b1:f2:89:25:37:c5: ca:a3:1b:55:38:c4:9f:aa:b9:4e:5c:04:63:35:bc:ec:92:fa: 5b:0d:23:4e:36:c5:98:35:cf:ed:69:a6:a9:80:fc:36:23:a0: 09:23:80:f9:6f:28:8f:d2:ac:34:34:d6:9e:6f:d1:49:01:9e: 3e:b9:df:75:9d:3f:00:fc:16:b6:96:de:4b:cb:ee:9a:47:04: d9:6e:b1:bb:27:7c:51:85:48:a9:f7:af:5f:ca:1b:40:63:a5: bd:2c:b5:68:5d:02:7b:d0:c1:a6:14:6f:d2:1b:d2:a6:96:dc: 79:6b:a1:43:ea:ab:bb:1d:40:94:ea:f7:a3:02:2f:06:dc:f9: 5a:ab:d7:d9:7f:53:50:09:ae:f9:06:d0:10:e2:3c:a8:36:e0: f1:79:2a:d2:91:fd:3c:03:6d:9f:e0:7e:b3:a7:75:59:31:6e: 14:4b:9b:12:9f:d4:97:fd:33:63:27:d2:e7:e3:3e:8e:63:71: 05:97:05:c8:37:db:27:e8:7b:3b:bc:21:9a:65:67:24:31:10: c6:6c:62:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/lzLO1wqOra6NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmUxYjg0YmMtNGU1Yi00OGEzLWI0MjktZGE5Zjk0NDgxMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQa+qJdU5qLDTQPvsnkCo2kb+Q4AfGP+xdDC 9Dksd372LyO7uU2czZ2ZFDn7Rr6kDdObIv3PQqbpMTzlYQiT/sbCOAdPWlOCQgk3 qwm3z+t7o/A7QlrxueGjSd4XJtF3er3CcuGoVOxYk5vJPCOyySImBTjChzkda5Ae QaduQhDiBU+1JtpTVWrx39DZg/QOyX1NTWfraHrNoc0hwoE1s2mSqhZoTGr8Ahx9 ZhfKwP6n8U+cQ85K3Tnox/Vu4GXLLlxZK7KVzYJpPKmTjctEa7sRJQr1mYXB4g0a 7Z1NDij20juxs4BZDCP6JrGSq9e3QaTc7lLONC/Oeqx6NQKRawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbhYi9pgeAxdPpliSgxqbH8f75KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDAyODM4NDctYmVlNC0z NWIwLWI2ODAtZmRmYTliNDgxYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQP+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJs1AlvvQOnpvPjnmbaeaggEiwNuwQD6DeJJCnnJAUobtci/VD2/0x2 eXWHwLwBubHyiSU3xcqjG1U4xJ+quU5cBGM1vOyS+lsNI042xZg1z+1ppqmA/DYj oAkjgPlvKI/SrDQ01p5v0UkBnj6533WdPwD8FraW3kvL7ppHBNlusbsnfFGFSKn3 r1/KG0Bjpb0stWhdAnvQwaYUb9Ib0qaW3HlroUPqq7sdQJTq96MCLwbc+Vqr19l/ U1AJrvkG0BDiPKg24PF5KtKR/TwDbZ/gfrOndVkxbhRLmxKf1Jf9M2Mn0ufjPo5j cQWXBcg32yfoezu8IZplZyQxEMZsYkI= -----END CERTIFICATE-----Generated at Thu Sep 18 07:14:23 2025 by rpki-client