$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa File: e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa (raw, json) Hash identifier: m8atVgMBXgzDc7wXMeZ8Vgzbm0vwQzQTwEbvURcBxyw= Subject key identifier: 9E:E1:1D:3F:42:74:7D:04:AB:F1:3B:0B:1B:F6:60:91:07:12:F3:DA Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B13D6C82AD1312C11A4177AC0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 2152 IP address blocks: 137.164.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c8:2a:d1:31:2c:11:a4:17:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=157b46f8-306b-43f3-b0f5-c81ab2c4b20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:06:b6:9d:38:76:e8:b9:40:f4:ef:0c:c6: 5b:1b:d5:71:ac:b6:ec:8a:67:dc:95:ac:2b:70:5e: ed:c2:d8:fd:0d:e1:58:f9:46:56:d6:6e:e3:d8:ee: 25:a6:0c:36:1a:25:7b:3a:e7:77:83:92:bd:03:ae: ba:ad:8c:18:eb:d8:0c:d0:17:57:f3:08:3f:56:be: ca:a6:59:08:72:91:12:a3:da:1b:27:91:1f:62:97: 09:77:3b:67:a1:a9:cd:39:ae:85:66:59:f9:8e:b1: 7f:ab:70:f1:28:3b:fe:ae:9b:f1:6d:c1:f0:c2:df: c7:ae:84:a0:71:3a:aa:29:f3:3a:1f:17:79:cd:3d: 2d:70:79:f8:3c:8a:56:72:6c:e3:00:c3:15:5a:d4: f3:e6:aa:d0:10:cc:13:f3:5b:52:0f:90:90:27:65: 48:45:56:a4:66:fa:3f:93:55:50:c2:a7:35:fd:38: de:ec:e6:9f:94:bb:7f:d9:b1:8a:bc:09:b9:0e:d8: 0b:90:01:55:75:98:00:04:72:3c:ab:3f:e9:60:e6: 55:9c:44:50:02:f8:d1:39:a2:f4:2e:90:e1:67:c4: 7c:d7:5c:e7:4e:a4:12:b0:04:f5:2d:cc:c0:c5:48: f3:d2:ec:70:03:77:08:6c:cc:b0:02:49:2c:d2:b2: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:1D:3F:42:74:7D:04:AB:F1:3B:0B:1B:F6:60:91:07:12:F3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:f6:db:da:1f:7e:a9:8c:89:49:e1:a2:5c:24:4f:ee:cb: b3:a5:63:9b:e0:66:fc:0b:c6:a2:ad:a1:e8:b9:0d:a7:72:a3: 72:40:78:de:64:5f:fa:05:28:44:fb:40:76:b0:d3:d8:73:7b: 94:12:d0:12:92:4e:fb:61:f9:a9:08:b0:de:50:68:f5:cc:0f: 1a:42:66:b6:cf:b1:c3:20:c0:17:42:22:cb:6f:08:f7:3a:b4: 4d:e9:a6:fc:fe:4b:45:c2:c0:78:28:37:57:22:88:47:69:d4: b6:cc:cf:12:ed:2c:cd:85:3f:2d:c4:33:ab:b6:b4:2e:20:f7: a5:98:3a:07:db:06:ca:61:40:69:82:69:1e:77:a8:0d:6c:33: 56:ec:4b:d2:ee:43:12:c9:b4:da:29:96:2b:49:2b:6e:c4:88: ab:36:36:22:8a:63:f0:bf:36:7e:2f:ca:5d:a2:02:55:cf:ff: 5d:dc:0c:d6:d7:c2:3b:96:6c:48:b5:ef:78:15:80:0a:6c:d2: a8:e9:99:ef:5f:8c:74:bf:f0:92:a4:70:50:b4:89:39:2d:a1: a3:b8:19:7d:a2:05:0a:25:d6:8b:ac:8b:08:5d:88:62:23:51: d5:e6:07:bf:18:66:a6:88:f2:86:e9:b3:50:35:d4:9f:b0:2c: fd:45:c1:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sgq0TEsEaQXesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MTU3YjQ2ZjgtMzA2Yi00M2YzLWIwZjUtYzgxYWIyYzRiMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj94Gtp04dui5QPTvDMZbG9VxrLbsimfclawr cF7twtj9DeFY+UZW1m7j2O4lpgw2GiV7Oud3g5K9A666rYwY69gM0BdX8wg/Vr7K plkIcpESo9obJ5EfYpcJdztnoanNOa6FZln5jrF/q3DxKDv+rpvxbcHwwt/HroSg cTqqKfM6Hxd5zT0tcHn4PIpWcmzjAMMVWtTz5qrQEMwT81tSD5CQJ2VIRVakZvo/ k1VQwqc1/Tje7OaflLt/2bGKvAm5DtgLkAFVdZgABHI8qz/pYOZVnERQAvjROaL0 LpDhZ8R811znTqQSsAT1LczAxUjz0uxwA3cIbMywAkks0rJ19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7hHT9CdH0Eq/E7Cxv2YJEHEvPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTg5NDhmYzYtYzhlOC0z ZWJmLWI0ZjMtOTliZjdlNzlkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8X9tvaH36pjIlJ4aJcJE/uy7OlY5vgZvwLxqKtoei5Dadyo3JAeN5k X/oFKET7QHaw09hze5QS0BKSTvth+akIsN5QaPXMDxpCZrbPscMgwBdCIstvCPc6 tE3ppvz+S0XCwHgoN1ciiEdp1LbMzxLtLM2FPy3EM6u2tC4g96WYOgfbBsphQGmC aR53qA1sM1bsS9LuQxLJtNoplitJK27EiKs2NiKKY/C/Nn4vyl2iAlXP/13cDNbX wjuWbEi173gVgAps0qjpme9fjHS/8JKkcFC0iTktoaO4GX2iBQol1ousiwhdiGIj UdXmB78YZqaI8obps1A11J+wLP1FwQE= -----END CERTIFICATE-----Generated at Fri Sep 5 05:55:36 2025 by rpki-client