$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa File: 87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa (raw, json) Hash identifier: y+RG6uWHyRIyS/ntJ0tKTUvIvitlbkFMUpWTRC03Myg= Subject key identifier: CE:94:29:9A:26:3B:0B:09:BB:85:4B:78:56:02:4E:C3:BB:4D:B1:29 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584AC2E0F08580B3A1DC998D3D40 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 134.224.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f0:85:80:b3:a1:dc:99:8d:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=103af224-e378-4970-97d7-edb9bfb2f0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:de:5d:57:c3:24:ff:58:4d:a1:37:32:1c:3c: 2f:55:ae:43:d4:ff:fd:42:be:f3:a2:19:a4:2f:4f: fe:8b:cf:92:8d:a8:40:39:f5:67:f3:e6:c9:a6:e1: 94:d0:f9:de:a5:5a:3a:0a:b8:e8:b9:72:e9:8f:bf: be:e5:43:97:9a:fb:33:fb:5f:d6:38:a9:bf:64:56: b8:0f:5b:11:30:ee:fb:fc:c8:97:21:b1:40:83:27: 1e:10:62:30:6b:d3:72:70:f7:20:1a:25:04:c4:0a: dd:ff:78:9f:3a:a0:38:72:4b:36:7e:61:db:c1:a5: e7:b4:bc:0a:19:e7:95:89:67:56:a4:d6:e8:3d:09: fd:da:af:b9:5a:f6:2e:6c:93:1f:a2:41:2a:fb:e5: 3a:1f:19:05:40:60:16:fa:bd:10:d8:7c:ee:52:81: 1b:21:a3:87:6f:bd:f5:53:43:a0:b7:ed:67:99:fb: 31:e4:49:d7:54:20:e8:ad:07:85:9a:c5:13:49:9b: 22:67:97:19:6c:8b:21:d3:e2:91:f7:0f:81:fa:87: e6:f4:ba:b7:20:bf:e6:2f:04:a5:75:7e:67:9c:8a: 39:fa:0b:a0:99:86:fb:43:7d:f1:b4:2a:63:f2:b5: 93:7a:5e:6f:22:52:12:bc:60:6e:75:3f:30:06:b0: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:94:29:9A:26:3B:0B:09:BB:85:4B:78:56:02:4E:C3:BB:4D:B1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9d:a2:de:9b:15:59:a4:40:69:d8:5b:fa:98:c6:6b:ac:5c: 15:7c:ba:1d:ff:d3:54:8c:b9:ea:6c:00:0d:24:b5:cc:ce:3f: 97:cf:a9:8c:0c:f8:24:55:ce:81:d1:2c:c3:f1:7c:c0:55:40: fb:79:c7:ec:f0:ea:f5:0a:d6:bb:68:6d:0c:f6:ce:23:6a:1d: f3:67:fc:b5:84:d4:a1:26:c3:f6:46:fb:c9:87:fb:10:65:03: 1a:da:ba:95:07:28:26:ff:9c:dc:51:52:3a:c7:18:4f:98:4e: 6e:0b:da:f1:28:16:2a:ff:17:21:4a:6e:25:03:60:cb:50:4a: f4:6f:84:fb:bb:b6:ee:5c:13:6e:15:6a:eb:a7:40:2b:db:9e: d9:53:82:7d:d0:7d:2b:e1:5b:4d:d7:73:20:79:6d:20:ce:d6: e2:5c:7a:50:f7:05:28:42:7e:dd:43:5b:27:63:d2:32:3f:46: 72:04:97:b4:fa:32:97:74:2f:84:88:83:1a:36:9e:ed:fb:7a: c0:02:c5:38:c6:2a:0a:de:68:da:18:57:a5:f1:bb:83:91:a1: 64:a7:4a:72:61:9f:13:bf:ab:5b:64:d0:dd:47:75:0d:8d:1c: ae:31:28:89:69:9c:9b:4c:f3:31:ae:cb:2b:09:83:67:fd:ff: 9e:64:5b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PCFgLOh3JmNPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTAzYWYyMjQtZTM3OC00OTcwLTk3ZDctZWRiOWJmYjJmMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht5dV8Mk/1hNoTcyHDwvVa5D1P/9Qr7zohmk L0/+i8+SjahAOfVn8+bJpuGU0PnepVo6CrjouXLpj7++5UOXmvsz+1/WOKm/ZFa4 D1sRMO77/MiXIbFAgyceEGIwa9NycPcgGiUExArd/3ifOqA4cks2fmHbwaXntLwK GeeViWdWpNboPQn92q+5WvYubJMfokEq++U6HxkFQGAW+r0Q2HzuUoEbIaOHb731 U0Ogt+1nmfsx5EnXVCDorQeFmsUTSZsiZ5cZbIsh0+KR9w+B+ofm9Lq3IL/mLwSl dX5nnIo5+gugmYb7Q33xtCpj8rWTel5vIlISvGBudT8wBrCvRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6UKZomOwsJu4VLeFYCTsO7TbEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODdhYTllZmQtOGIwYy0z MWMxLThlNTItZDhiZDIyZDBhNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqdot6bFVmkQGnYW/qYxmusXBV8uh3/01SMuepsAA0ktczOP5fPqYwM +CRVzoHRLMPxfMBVQPt5x+zw6vUK1rtobQz2ziNqHfNn/LWE1KEmw/ZG+8mH+xBl AxraupUHKCb/nNxRUjrHGE+YTm4L2vEoFir/FyFKbiUDYMtQSvRvhPu7tu5cE24V auunQCvbntlTgn3QfSvhW03XcyB5bSDO1uJcelD3BShCft1DWydj0jI/RnIEl7T6 Mpd0L4SIgxo2nu37esACxTjGKgreaNoYV6Xxu4ORoWSnSnJhnxO/q1tk0N1HdQ2N HK4xKIlpnJtM8zGuyysJg2f9/55kWzo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:35 2025 by rpki-client