$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa File: 0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa (raw, json) Hash identifier: pXxUVkHg3tNGiSR+ochcxkLoq4BvPz1u4XJ6nP5j1IA= Subject key identifier: 97:22:FA:E7:90:FA:EB:9A:AD:AC:8F:65:2C:9F:1F:95:2E:11:2D:D5 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584AF9513DF830788CB61C9A0FC0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 32710 IP address blocks: 164.153.128.0/24 maxlen: 32 164.153.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3d:f8:30:78:8c:b6:1c:9a:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5f8ca78b-0127-451b-9ee8-5ef366aacd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1f:f1:19:b6:db:29:f2:91:7f:7e:43:af:18: 29:5d:30:d2:48:6f:c5:08:ba:7b:3a:9a:a3:0e:90: 7b:f3:7c:0f:5f:2a:85:20:00:83:68:bb:82:7e:4f: 8c:3f:a5:9f:7a:52:db:b9:a0:d9:8d:c8:bf:57:79: 9d:d1:db:d2:3f:c2:a6:d4:fd:45:29:52:b9:1b:f0: 25:9a:57:42:38:9e:45:b6:45:dd:a7:3d:bc:d4:02: 79:d6:5e:0f:c2:26:d6:2b:1b:c1:32:9c:2c:e4:23: 54:13:96:a7:05:d7:b0:ba:70:61:1a:07:11:8e:71: 90:b1:b8:64:36:d7:17:d9:0b:16:30:37:5d:23:69: 45:c8:ad:83:23:04:6c:d8:5c:f1:89:7a:35:b7:00: 18:55:b9:72:73:53:65:11:c6:cb:f0:2d:f6:0c:9e: 15:43:7c:bb:0e:f7:df:21:3d:65:5f:8b:b1:c1:c1: f1:b0:af:3e:1f:0f:d8:e3:40:0e:b8:19:ac:11:e6: 4a:75:41:78:7a:c0:16:ae:35:90:8c:0f:9c:17:a0: 28:74:91:e3:b1:b1:01:38:eb:5b:e8:42:ce:2f:7a: 25:a2:3c:88:b6:4a:59:8c:c1:de:cc:5f:38:20:71: f0:33:23:8c:5f:04:f5:e9:0d:0a:e0:3e:99:15:07: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:FA:E7:90:FA:EB:9A:AD:AC:8F:65:2C:9F:1F:95:2E:11:2D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:78:23:dd:c9:6f:b4:69:13:c5:45:4d:71:1b:83:b0:49:cc: 11:7e:33:0d:81:10:d9:b1:16:f0:e0:89:d0:2b:be:33:a2:bb: 28:1d:2b:5d:27:b2:ff:a3:95:2d:e8:18:3a:de:5e:af:e4:e6: 70:4f:c5:14:8e:b6:67:10:af:21:83:10:50:46:8c:03:b8:39: 94:b4:fa:49:aa:fc:29:f7:39:ae:1d:e5:89:f7:bc:76:aa:02: ad:49:45:bc:03:4c:d7:3e:f1:ce:02:6a:da:93:10:21:ed:71: 65:81:03:e7:94:46:bb:27:a5:40:0b:da:10:99:41:70:7e:7d: 4c:c7:a6:c1:9b:05:62:bc:03:38:29:cd:30:8e:e8:be:65:e7: 83:86:bc:72:fa:0d:94:23:4c:39:1e:7d:65:e5:ad:84:00:15: 5d:d9:12:81:0a:69:1e:8a:a0:58:45:60:f1:a4:a3:db:e5:70: 46:a2:89:1b:8f:d7:4b:bf:7d:09:5d:d9:53:f0:6f:d6:98:9f: 1b:f3:3a:ca:44:de:68:46:37:14:84:d4:13:75:a4:fd:df:73: 62:41:5e:66:c3:24:bc:8b:49:28:51:26:cc:03:b0:89:78:c8: 4e:53:fb:63:03:c3:98:39:6f:f8:15:b4:e0:95:1a:ec:da:86: 94:19:69:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UT34MHiMthyaD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWY4Y2E3OGItMDEyNy00NTFiLTllZTgtNWVmMzY2YWFjZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB/xGbbbKfKRf35DrxgpXTDSSG/FCLp7Opqj DpB783wPXyqFIACDaLuCfk+MP6WfelLbuaDZjci/V3md0dvSP8Km1P1FKVK5G/Al mldCOJ5FtkXdpz281AJ51l4PwibWKxvBMpws5CNUE5anBdewunBhGgcRjnGQsbhk NtcX2QsWMDddI2lFyK2DIwRs2FzxiXo1twAYVblyc1NlEcbL8C32DJ4VQ3y7Dvff IT1lX4uxwcHxsK8+Hw/Y40AOuBmsEeZKdUF4esAWrjWQjA+cF6AodJHjsbEBOOtb 6ELOL3olojyItkpZjMHezF84IHHwMyOMXwT16Q0K4D6ZFQftowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJci+ueQ+uuarayPZSyfH5UuES3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvMGQwYWJhOTktMWQyMy0z MDU1LTgwNTMtZWQ1M2JjMmYxMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM14I93Jb7RpE8VFTXEbg7BJzBF+Mw2BENmxFvDgidArvjOiuygdK10n sv+jlS3oGDreXq/k5nBPxRSOtmcQryGDEFBGjAO4OZS0+kmq/Cn3Oa4d5Yn3vHaq Aq1JRbwDTNc+8c4CatqTECHtcWWBA+eURrsnpUAL2hCZQXB+fUzHpsGbBWK8Azgp zTCO6L5l54OGvHL6DZQjTDkefWXlrYQAFV3ZEoEKaR6KoFhFYPGko9vlcEaiiRuP 10u/fQld2VPwb9aYnxvzOspE3mhGNxSE1BN1pP3fc2JBXmbDJLyLSShRJswDsIl4 yE5T+2MDw5g5b/gVtOCVGuzahpQZaUc= -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:13 2025 by rpki-client