$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa File: 0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json) Hash identifier: LA7ByFa7hPj7s9Rp5So+R0OzBahCHeMDyVrlcYXnUc4= Subject key identifier: F8:67:52:95:49:77:DE:A1:E9:E7:34:C4:F9:7B:45:0A:97:EB:BE:34 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B13D6BD37A29E48185BEC2A80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 2153 IP address blocks: 137.164.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bd:37:a2:9e:48:18:5b:ec:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=a7717ab4-239d-4086-8e43-719eeeed2dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:a4:68:0b:d5:b7:e4:ec:80:3a:b9:8e:a9: eb:89:df:dd:3d:6a:e9:85:a9:34:01:36:d8:7c:c8: da:49:37:16:87:96:7d:5b:59:c0:1e:fb:9c:bd:4b: 80:95:73:e6:65:75:a8:fd:b1:98:d9:42:4c:13:56: a4:d6:1d:a1:e9:ff:12:68:1b:9e:2d:5d:92:76:8b: 24:77:70:3e:0a:49:a3:5d:ca:9c:85:c7:18:cf:65: e9:f2:af:0e:1d:18:dd:f4:0f:81:45:cc:c4:47:9d: 04:28:2d:d3:14:d5:a6:bd:a1:6d:a4:3e:3e:38:c9: 4e:13:cb:a9:c0:0e:f7:6c:9a:4a:2a:b1:2d:00:a8: b9:25:b0:4a:1f:9b:25:3e:19:d9:3f:bc:07:03:0f: a6:60:e2:f8:24:2a:6d:72:d7:34:06:8d:e7:f5:28: 16:c0:90:4d:19:38:3b:77:7f:5f:3e:16:f2:bb:0f: 8f:db:a9:94:cb:a2:c0:6d:37:ca:6e:b0:03:19:96: 60:95:de:32:38:af:d9:fd:4c:1d:16:97:8c:75:b1: 3b:dd:dd:f1:0a:49:01:fb:4e:8f:60:0f:04:c1:e1: 81:bd:b9:8c:58:5c:f6:2f:92:8c:f8:3c:5a:58:ea: 44:bb:f7:7f:75:25:48:d0:9d:c8:75:eb:5a:3b:32: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:67:52:95:49:77:DE:A1:E9:E7:34:C4:F9:7B:45:0A:97:EB:BE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d7:8c:90:95:b0:b9:a3:8d:6c:be:c7:ab:a1:dd:59:30:3b: 06:32:ce:70:03:7f:71:52:38:6b:e8:98:18:ed:ac:ff:1d:0c: 1a:77:b5:d8:4e:43:a8:e3:ec:ac:72:ca:0c:17:69:72:c0:62: c9:ff:44:43:ed:4d:5a:db:0c:6e:5d:a1:ea:af:c1:5e:9d:b7: e6:6d:9b:84:ef:72:1a:73:39:f9:e4:98:a9:25:f2:7b:b5:ac: af:b8:d7:fb:3d:b5:e1:a1:ae:c4:e6:ed:13:3c:3e:2b:56:8b: 86:3a:e9:85:77:fa:8b:e0:08:59:63:e4:87:36:fe:57:b8:25: aa:0f:f1:9d:94:8d:64:af:47:da:33:70:a8:25:4e:c4:be:cb: cc:03:12:ac:26:eb:e1:6b:80:1c:f4:5c:a4:9e:d1:2d:e1:db: 99:2b:20:96:c3:fa:6e:61:c2:64:30:1e:c4:c9:62:80:a0:85: 60:a7:1f:50:e4:97:35:c4:9e:81:a5:81:d4:0a:11:17:e7:88: 8e:5b:1b:46:db:45:fa:95:77:fd:c0:bb:ad:63:94:88:74:4d: 45:6c:7e:f0:9a:0a:bb:a9:58:e1:88:fa:51:e9:bf:d7:16:a6: 71:64:8b:5e:97:8c:a0:2a:f1:ca:b4:1d:9e:b3:8c:d7:cb:22: d8:e4:d3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1r03op5IGFvsKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YTc3MTdhYjQtMjM5ZC00MDg2LThlNDMtNzE5ZWVlZWQyZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z+kaAvVt+TsgDq5jqnrid/dPWrphak0ATbY fMjaSTcWh5Z9W1nAHvucvUuAlXPmZXWo/bGY2UJME1ak1h2h6f8SaBueLV2Sdosk d3A+CkmjXcqchccYz2Xp8q8OHRjd9A+BRczER50EKC3TFNWmvaFtpD4+OMlOE8up wA73bJpKKrEtAKi5JbBKH5slPhnZP7wHAw+mYOL4JCptctc0Bo3n9SgWwJBNGTg7 d39fPhbyuw+P26mUy6LAbTfKbrADGZZgld4yOK/Z/UwdFpeMdbE73d3xCkkB+06P YA8EweGBvbmMWFz2L5KM+DxaWOpEu/d/dSVI0J3IdetaOzItqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhnUpVJd96h6ec0xPl7RQqX6740MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMGM5MjQwMjYtMTJkMS0z ZTc5LWEzY2UtZTUxZjcxYTNhZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADXjJCVsLmjjWy+x6uh3VkwOwYyznADf3FSOGvomBjtrP8dDBp3tdhO Q6jj7KxyygwXaXLAYsn/REPtTVrbDG5doeqvwV6dt+Ztm4TvchpzOfnkmKkl8nu1 rK+41/s9teGhrsTm7RM8PitWi4Y66YV3+ovgCFlj5Ic2/le4JaoP8Z2UjWSvR9oz cKglTsS+y8wDEqwm6+FrgBz0XKSe0S3h25krIJbD+m5hwmQwHsTJYoCghWCnH1Dk lzXEnoGlgdQKERfniI5bG0bbRfqVd/3Au61jlIh0TUVsfvCaCrupWOGI+lHpv9cW pnFki16XjKAq8cq0HZ6zjNfLItjk03s= -----END CERTIFICATE-----Generated at Fri Sep 5 02:26:20 2025 by rpki-client