$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa File: c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa (raw, json) Hash identifier: 1Ah5C2b9SveevbV/fhzoLbjRPHnPhsLBKoNuXy5j3Bw= Subject key identifier: 68:F7:B7:80:96:C2:EC:40:D4:A2:C5:20:51:B0:14:31:ED:F1:0E:F6 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584B0FA6C43EC1883236FC617988 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8075 IP address blocks: 165.224.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c4:3e:c1:88:32:36:fc:61:79:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=538e8260-29d1-4687-b470-0c89aa4355ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:f8:83:2d:0f:f4:60:01:93:fb:05:3d:4d: 9c:da:3e:10:fd:57:f5:15:73:21:39:c1:d7:d5:06: 48:71:57:5b:5a:96:a1:03:43:1a:83:0d:56:ee:5b: 76:50:dd:a8:2a:05:45:2d:f5:7a:39:1f:7b:61:83: 9e:56:cb:89:f8:5e:1d:a8:25:3b:f6:91:bf:4f:3a: 99:fb:e8:d4:cc:4c:55:a2:46:a0:21:61:9a:07:b1: 37:77:82:66:b7:a5:da:2d:9d:34:24:38:de:54:82: 4a:ee:6f:2c:b6:20:ff:07:50:2d:41:45:93:ac:47: ad:68:58:df:1a:82:8c:a6:0a:67:df:32:3a:a8:e4: 47:f7:e2:44:0b:7d:e7:25:23:7c:65:8d:2c:8c:0d: 95:fc:12:a6:ee:7b:4e:0a:6b:5e:20:05:71:0e:74: 10:92:93:ae:72:8f:51:8f:01:ef:00:3b:26:8d:fd: ec:2e:db:3f:a7:ff:46:17:f6:f0:87:85:fb:0d:d2: 22:95:33:d7:bf:f6:e0:1a:c8:ba:30:05:c3:c5:aa: ba:4f:71:a9:0b:90:ee:3d:9c:1e:c1:9c:72:4b:19: 4e:51:e1:93:8f:99:f7:4e:e8:d0:c3:9e:ad:5d:85: 5f:25:49:fe:fd:14:0a:ec:0a:34:72:7d:15:f9:b0: ac:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F7:B7:80:96:C2:EC:40:D4:A2:C5:20:51:B0:14:31:ED:F1:0E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ca:30:24:93:2b:30:78:d8:bc:d0:6f:6b:47:25:f2:dc:5a: 56:98:fd:68:41:26:47:f0:f0:28:0b:53:d1:68:95:5c:66:f7: 7e:fa:08:26:1b:6e:d1:de:9a:d0:a5:bc:06:94:28:76:76:5f: 22:90:b8:d0:f5:f0:59:41:54:be:d1:33:92:1a:06:42:48:0c: 38:39:90:e5:ed:93:0f:4d:38:5d:6c:4b:44:9b:99:70:8b:25: 66:3c:a6:39:c0:2e:63:f6:79:fe:b2:35:66:b0:ba:bb:7d:bc: ed:33:a7:1c:56:1c:af:4b:f7:0e:98:9d:10:0b:ce:f2:fd:7b: c8:38:7d:69:5d:04:94:e5:08:3e:19:dd:c4:7e:a0:27:7d:05: 0d:c8:83:83:5f:56:ca:a6:c8:5a:49:ba:d6:96:fe:10:db:a0: c6:af:b0:e1:e3:27:e0:e7:23:61:b9:be:ea:65:5c:37:e0:d9: 9e:40:a3:f4:9d:54:11:8c:24:88:64:e0:08:68:25:cb:b6:00: c8:56:03:c8:f3:32:88:e7:b0:10:f2:b4:70:aa:ef:76:28:6f: b5:d4:5c:aa:1e:84:7c:c5:57:f6:f0:79:ba:3d:f8:50:20:c1: 0b:03:5f:f8:39:46:d1:af:62:13:bd:78:ff:bd:42:eb:90:97: bd:98:b2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsQ+wYgyNvxheYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NTM4ZTgyNjAtMjlkMS00Njg3LWI0NzAtMGM4OWFhNDM1NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhr4gy0P9GABk/sFPU2c2j4Q/Vf1FXMhOcHX 1QZIcVdbWpahA0Magw1W7lt2UN2oKgVFLfV6OR97YYOeVsuJ+F4dqCU79pG/TzqZ ++jUzExVokagIWGaB7E3d4Jmt6XaLZ00JDjeVIJK7m8stiD/B1AtQUWTrEetaFjf GoKMpgpn3zI6qORH9+JEC33nJSN8ZY0sjA2V/BKm7ntOCmteIAVxDnQQkpOuco9R jwHvADsmjf3sLts/p/9GF/bwh4X7DdIilTPXv/bgGsi6MAXDxaq6T3GpC5DuPZwe wZxySxlOUeGTj5n3TujQw56tXYVfJUn+/RQK7Ao0cn0V+bCsrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj3t4CWwuxA1KLFIFGwFDHt8Q72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzAzZDUyZTctNzA4My0z NmM2LTg1ZGMtMTJhNjZjYTRiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnKMCSTKzB42LzQb2tHJfLcWlaY/WhBJkfw8CgLU9FolVxm9376CCYb btHemtClvAaUKHZ2XyKQuND18FlBVL7RM5IaBkJIDDg5kOXtkw9NOF1sS0SbmXCL JWY8pjnALmP2ef6yNWawurt9vO0zpxxWHK9L9w6YnRALzvL9e8g4fWldBJTlCD4Z 3cR+oCd9BQ3Ig4NfVsqmyFpJutaW/hDboMavsOHjJ+DnI2G5vuplXDfg2Z5Ao/Sd VBGMJIhk4AhoJcu2AMhWA8jzMojnsBDytHCq73Yob7XUXKoehHzFV/bwebo9+FAg wQsDX/g5RtGvYhO9eP+9QuuQl72Yss4= -----END CERTIFICATE-----Generated at Wed Sep 3 23:53:19 2025 by rpki-client