$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa File: e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa (raw, json) Hash identifier: n8lDxgzDbiBfngwZMCAShAAVvW+NbVH3RCAGeBPcH9c= Subject key identifier: E9:BC:9C:97:7C:39:E1:6D:13:B0:CB:ED:51:A9:F7:CE:A6:3C:F5:C4 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B13D6C7E1A22F8495131AA1C0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 2152 IP address blocks: 137.164.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c7:e1:a2:2f:84:95:13:1a:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4dce9c62-7a77-4769-9ade-32817fdc83f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:41:50:8f:a2:6f:2e:12:9c:27:86:a6:fb: 3c:2d:97:c7:bd:4e:1b:7d:93:90:91:36:cc:62:c1: 8d:62:dd:8f:94:b4:4f:f6:f9:5e:b8:b5:60:07:2e: 59:59:d8:1e:ad:1f:ca:27:18:8c:3e:a6:c3:de:f3: 80:e9:9c:53:b2:b9:43:68:f9:c0:26:a2:52:dd:c1: 49:58:4c:ff:cb:fa:fe:5d:09:30:c5:17:88:0c:ef: 96:0d:d6:51:29:1d:6a:bd:25:a2:fa:ef:96:e2:d9: b5:d0:55:b6:da:fc:f5:02:6d:42:90:78:92:81:93: d0:74:90:ae:a2:95:99:43:12:fe:7e:b4:51:a4:2d: c6:dc:39:64:3f:1a:29:5e:da:13:1d:3b:a6:43:e6: 4c:fd:31:d4:3f:6d:92:90:7c:19:03:8a:57:22:f5: 4a:11:26:ec:93:15:92:0c:f9:93:c3:30:f7:0c:80: 27:34:03:b2:af:fd:34:fd:4d:d4:b5:be:76:fd:3d: 3a:56:58:73:72:c9:87:7d:b8:d9:c1:2f:03:30:1d: f3:fb:8b:0f:6b:26:90:27:7c:1a:37:40:cf:1a:0b: 58:09:fb:17:f5:b8:24:2b:e5:1e:7d:ef:d8:77:4a: db:90:76:7f:a2:6d:f0:d6:bd:e8:7c:e6:d2:23:2e: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BC:9C:97:7C:39:E1:6D:13:B0:CB:ED:51:A9:F7:CE:A6:3C:F5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b0:f9:51:f9:cc:b7:01:54:35:92:0f:7c:2f:5f:bf:e2:53: b8:6f:08:cf:d7:42:f9:64:cb:ea:27:61:63:8b:4c:37:54:6a: 8a:9e:81:b0:1a:65:66:5d:c2:81:5e:6b:14:06:df:15:7d:bf: fa:6c:91:f7:bf:1b:9a:9a:82:19:bc:c3:54:28:8a:6b:c4:e6: 90:8c:2a:a8:6d:c7:67:23:c4:73:48:e1:28:1d:fa:d5:2c:9d: 2a:a9:00:71:67:43:fe:1b:f9:e9:73:af:ff:1f:b4:81:a5:9d: e4:0a:ea:92:b7:5a:6e:f4:77:cb:03:18:05:bd:4d:eb:6b:49: 74:a4:ad:e5:05:87:80:25:ce:51:aa:7a:5a:86:3b:fb:73:ae: e4:42:46:5b:84:2d:c5:56:0e:c6:da:07:b8:07:ac:6f:48:8d: 3d:1a:f5:7d:e2:3c:c9:31:31:79:fe:18:87:17:1b:9b:83:11: 72:fa:dc:75:82:ce:c3:2c:18:b5:97:bd:96:87:3d:b0:ef:df: 27:1c:ca:c1:b6:fd:26:d8:39:55:a8:ea:d0:b4:2f:32:f8:37: ba:47:ae:7a:d0:87:8f:c2:87:4b:80:7d:10:a4:0a:4a:a6:f2: 12:5d:67:88:e4:57:f9:ab:b0:d9:a0:71:62:4c:71:b7:24:63: a8:50:b7:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sfhoi+ElRMaocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGRjZTljNjItN2E3Ny00NzY5LTlhZGUtMzI4MTdmZGM4M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NtBUI+iby4SnCeGpvs8LZfHvU4bfZOQkTbM YsGNYt2PlLRP9vleuLVgBy5ZWdgerR/KJxiMPqbD3vOA6ZxTsrlDaPnAJqJS3cFJ WEz/y/r+XQkwxReIDO+WDdZRKR1qvSWi+u+W4tm10FW22vz1Am1CkHiSgZPQdJCu opWZQxL+frRRpC3G3DlkPxopXtoTHTumQ+ZM/THUP22SkHwZA4pXIvVKESbskxWS DPmTwzD3DIAnNAOyr/00/U3Utb52/T06VlhzcsmHfbjZwS8DMB3z+4sPayaQJ3wa N0DPGgtYCfsX9bgkK+Uefe/Yd0rbkHZ/om3w1r3ofObSIy63QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm8nJd8OeFtE7DL7VGp986mPPXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTVlNTIyMzEtMWNlZC0z NTZkLWI3NWUtY2EyYmFhYWY5ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByw+VH5zLcBVDWSD3wvX7/iU7hvCM/XQvlky+onYWOLTDdUaoqegbAa ZWZdwoFeaxQG3xV9v/pskfe/G5qaghm8w1QoimvE5pCMKqhtx2cjxHNI4Sgd+tUs nSqpAHFnQ/4b+elzr/8ftIGlneQK6pK3Wm70d8sDGAW9TetrSXSkreUFh4AlzlGq elqGO/tzruRCRluELcVWDsbaB7gHrG9IjT0a9X3iPMkxMXn+GIcXG5uDEXL63HWC zsMsGLWXvZaHPbDv3yccysG2/SbYOVWo6tC0LzL4N7pHrnrQh4/Ch0uAfRCkCkqm 8hJdZ4jkV/mrsNmgcWJMcbckY6hQt14= -----END CERTIFICATE-----Generated at Fri Sep 5 04:19:39 2025 by rpki-client