$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/16f61a8c-88b7-3215-83c7-56517ecd9662.roa File: 16f61a8c-88b7-3215-83c7-56517ecd9662.roa (raw, json) Hash identifier: I46V6TJNSKhm9uJZlCFvgaidz+xTAckJi0YjJ8yTlVU= Subject key identifier: 44:79:A9:B9:E1:9C:70:31:86:83:C4:B9:35:FC:C1:43:A5:63:2F:3B Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584ACA7628EC08B8DCE996584A80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/16f61a8c-88b7-3215-83c7-56517ecd9662.roa Signing time: Fri 08 Aug 2025 18:12:08 +0000 ROA not before: Fri 08 Aug 2025 18:12:08 +0000 ROA not after: Thu 06 Nov 2025 19:12:08 +0000 asID: 31898 IP address blocks: 150.230.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:28:ec:08:b8:dc:e9:96:58:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 8 18:12:08 2025 GMT Not After : Nov 6 19:12:08 2025 GMT Subject: CN=ad5f72cc-f9d9-4395-b804-bee08e5d3a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:eb:d3:70:35:b1:fe:92:43:ad:de:95:3d: a1:19:5e:74:0d:72:57:22:cc:ca:ae:1d:4c:5c:c0: 8e:cf:9c:3f:f0:40:0c:57:1b:49:17:b8:34:a2:eb: 9b:4b:26:c6:05:68:25:6d:30:d2:45:23:95:4c:d6: 1a:63:0f:34:16:03:80:14:89:25:45:e6:04:bd:c8: dd:7f:7d:b7:de:f1:0f:b3:06:da:15:a0:ec:27:f2: b6:55:b9:63:cd:d8:f7:50:69:55:33:7f:fc:d8:04: 46:7f:4a:b3:e1:ce:cf:72:ed:2f:aa:20:32:1e:69: 38:6a:25:87:12:bd:80:3c:33:c3:69:af:e0:95:d6: dd:ca:34:9b:e3:bb:5a:89:de:98:63:ea:1a:a6:12: 24:29:56:52:5a:12:5e:d0:b1:34:d2:51:db:77:43: 8f:f9:68:86:c9:28:10:e2:a8:04:e0:11:40:0a:00: 63:54:55:18:f6:57:ca:93:c1:70:0b:3b:e5:82:ce: 2e:ef:4f:32:5a:8c:e1:82:38:f1:b8:63:5f:2e:b3: 1b:99:d9:47:85:9d:03:a1:22:b8:bb:d8:9a:93:72: 5d:11:df:c5:0f:5d:3f:9a:d2:20:3c:1f:f5:68:8a: 9e:41:36:05:fd:b4:d8:ca:ea:98:e0:1e:4f:ed:b6: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:A9:B9:E1:9C:70:31:86:83:C4:B9:35:FC:C1:43:A5:63:2F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/16f61a8c-88b7-3215-83c7-56517ecd9662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d6:2a:af:da:03:ec:2a:54:b0:52:ea:c7:84:f5:26:83:18: 1c:d7:37:99:a9:06:77:53:b3:c1:14:b1:49:54:f0:83:0f:c4: 37:fa:f5:6f:b5:a6:7c:76:de:30:df:ef:55:74:ff:6c:7e:5a: 03:10:86:75:c6:4f:d7:c3:48:96:06:6f:13:8a:76:05:63:f2: 6b:b0:7e:23:65:07:6e:6a:79:82:2b:3c:59:d4:36:4b:5b:b9: 3e:3a:86:c9:44:82:38:f0:7f:1e:84:08:a7:34:db:11:35:e4: 65:36:bf:db:2b:a7:68:2b:c7:ec:3f:99:3c:30:ba:d4:ce:f5: f8:51:0d:c3:32:eb:d1:37:6c:b9:11:f2:05:f3:84:41:49:df: 47:99:73:b7:f7:49:10:98:f3:6e:e5:1e:35:f9:88:6b:f3:10: de:b0:12:bb:11:5c:a1:af:c2:f2:5d:a5:14:d5:8d:07:0c:2d: 9c:64:3d:af:a6:de:0b:58:a1:c8:0c:72:ea:1e:98:6b:56:a3: a1:bc:6a:0b:7b:16:4a:65:5c:bf:69:11:59:4f:6e:74:28:77: 44:d6:41:3e:9b:9a:dd:74:31:f4:2b:49:4e:d5:a4:de:b6:b3: c5:6b:ca:8e:99:70:18:6e:31:92:b5:b9:a1:44:7d:73:e8:af: 1f:c0:d6:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdijsCLjc6ZZYSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgwODE4MTIwOFoXDTI1MTEwNjE5MTIwOFowLzEtMCsGA1UEAxMk YWQ1ZjcyY2MtZjlkOS00Mzk1LWI4MDQtYmVlMDhlNWQzYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21nr03A1sf6SQ63elT2hGV50DXJXIszKrh1M XMCOz5w/8EAMVxtJF7g0ouubSybGBWglbTDSRSOVTNYaYw80FgOAFIklReYEvcjd f3233vEPswbaFaDsJ/K2Vbljzdj3UGlVM3/82ARGf0qz4c7Pcu0vqiAyHmk4aiWH Er2APDPDaa/gldbdyjSb47taid6YY+oaphIkKVZSWhJe0LE00lHbd0OP+WiGySgQ 4qgE4BFACgBjVFUY9lfKk8FwCzvlgs4u708yWozhgjjxuGNfLrMbmdlHhZ0DoSK4 u9iak3JdEd/FD10/mtIgPB/1aIqeQTYF/bTYyuqY4B5P7bblPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER5qbnhnHAxhoPEuTX8wUOlYy87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMTZmNjFhOGMtODhiNy0z MjE1LTgzYzctNTY1MTdlY2Q5NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDluYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfWKq/aA+wqVLBS6seE9SaDGBzXN5mpBndTs8EUsUlU8IMPxDf69W+1 pnx23jDf71V0/2x+WgMQhnXGT9fDSJYGbxOKdgVj8muwfiNlB25qeYIrPFnUNktb uT46hslEgjjwfx6ECKc02xE15GU2v9srp2grx+w/mTwwutTO9fhRDcMy69E3bLkR 8gXzhEFJ30eZc7f3SRCY827lHjX5iGvzEN6wErsRXKGvwvJdpRTVjQcMLZxkPa+m 3gtYocgMcuoemGtWo6G8agt7FkplXL9pEVlPbnQod0TWQT6bmt10MfQrSU7VpN62 s8Vryo6ZcBhuMZK1uaFEfXPorx/A1iI= -----END CERTIFICATE-----Generated at Wed Aug 20 07:59:30 2025 by rpki-client