$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa File: e1203c47-8cfb-3b72-aafa-43b08573a640.roa (raw, json) Hash identifier: Fl1+MWhWWrqYtJQeyml5/65Ze0CX7BqPD+5MaqxuRk4= Subject key identifier: DA:57:0B:FB:2C:5F:1E:21:5C:3B:ED:0C:61:86:F2:AE:65:F1:C9:8B Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584AD3A114EFBFB9898B9293B0A0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 33442 IP address blocks: 157.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:14:ef:bf:b9:89:8b:92:93:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=78f9a81d-8852-49f0-92f1-d18458ae2056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c2:d9:a2:0b:2a:9f:c2:98:cb:1d:a6:15:33: 73:01:d1:3a:25:98:5c:75:39:0b:a9:4f:2f:e2:26: ed:54:14:b0:41:12:c4:47:bb:11:50:0d:7d:ff:ab: 97:74:6d:21:33:bb:6f:d1:f7:c5:ee:c8:0a:b2:4e: 00:57:d2:74:e4:e0:e8:54:e6:f6:4c:85:7d:32:b6: d3:15:e0:ad:0c:f1:3d:7e:00:27:c8:82:79:d1:1e: fd:8e:c3:dd:3c:61:4d:2d:65:b0:e8:25:4c:ec:39: 61:36:17:c5:2e:ea:bf:af:cd:50:8c:1f:ee:9e:5b: c0:59:cb:5e:d2:02:c8:67:ac:ae:d4:09:98:f5:12: 80:fb:27:ee:2a:8e:a8:19:90:89:cd:de:f2:85:14: b7:69:24:19:04:66:cb:92:94:c0:c5:31:3c:a7:20: 9d:ee:69:b1:5a:56:32:e5:0b:da:6e:c9:34:c8:27: cc:fa:14:7e:f4:91:43:6d:c5:6b:57:d3:d7:97:cf: da:7c:46:8d:4d:c4:99:1b:7a:5c:4e:25:96:51:b1: c0:0a:2a:83:43:26:7c:9b:a1:87:4a:99:ce:ca:a3: cf:a5:5f:85:31:3b:77:9d:4d:13:01:ef:98:69:13: d3:0d:1e:46:8d:4d:9b:8b:ee:59:43:60:8e:74:46: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:57:0B:FB:2C:5F:1E:21:5C:3B:ED:0C:61:86:F2:AE:65:F1:C9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e1203c47-8cfb-3b72-aafa-43b08573a640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c9:03:d8:c5:9d:d5:8a:b6:ab:91:c5:84:c5:bf:ee:f2:4f: 42:e7:b8:60:24:aa:00:d6:59:78:c9:02:e8:06:fd:5b:9e:49: 04:5a:88:3d:7a:e3:6e:30:5c:50:ae:4c:17:83:ed:1d:cc:23: 8c:8c:e4:92:70:eb:1f:b0:bf:cd:6f:20:ca:b1:47:70:32:87: b0:c0:3f:ef:2f:b1:e3:dc:71:c2:17:f0:a6:60:9f:e0:aa:e4: 81:92:56:f3:9b:97:0e:aa:2a:db:25:3d:e0:2d:e8:51:98:c4: 8a:a0:92:64:02:25:0f:23:f2:0a:a9:c3:4c:a9:38:8c:15:fe: 67:dc:4a:6c:aa:91:45:e7:9c:9e:ad:33:c0:df:ee:86:a0:e9: e1:fb:0f:07:dd:96:af:f8:c2:3f:de:7e:5f:c0:82:b2:c3:45: 64:90:31:1e:e5:9b:99:6d:96:26:a2:f6:f0:25:50:f8:4e:07: 9b:71:57:20:73:a0:44:15:97:0d:7a:39:78:7a:8a:1f:c1:90: 65:ca:1d:4a:15:e5:9f:48:da:68:ec:35:50:ce:f6:b3:0d:6c: 7f:f2:1c:6f:74:3f:10:5b:42:97:0e:25:b5:10:4f:22:b3:91: 8d:67:35:a5:95:c0:79:31:a8:40:f2:c9:d8:3a:74:77:1f:d4: bf:01:30:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRTvv7mJi5KTsKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NzhmOWE4MWQtODg1Mi00OWYwLTkyZjEtZDE4NDU4YWUyMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMLZogsqn8KYyx2mFTNzAdE6JZhcdTkLqU8v 4ibtVBSwQRLER7sRUA19/6uXdG0hM7tv0ffF7sgKsk4AV9J05ODoVOb2TIV9MrbT FeCtDPE9fgAnyIJ50R79jsPdPGFNLWWw6CVM7DlhNhfFLuq/r81QjB/unlvAWcte 0gLIZ6yu1AmY9RKA+yfuKo6oGZCJzd7yhRS3aSQZBGbLkpTAxTE8pyCd7mmxWlYy 5Qvabsk0yCfM+hR+9JFDbcVrV9PXl8/afEaNTcSZG3pcTiWWUbHACiqDQyZ8m6GH SpnOyqPPpV+FMTt3nU0TAe+YaRPTDR5GjU2bi+5ZQ2COdEYOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpXC/ssXx4hXDvtDGGG8q5l8cmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZTEyMDNjNDctOGNmYi0z YjcyLWFhZmEtNDNiMDg1NzNhNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAneuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbJA9jFndWKtquRxYTFv+7yT0LnuGAkqgDWWXjJAugG/VueSQRaiD16 424wXFCuTBeD7R3MI4yM5JJw6x+wv81vIMqxR3Ayh7DAP+8vsePcccIX8KZgn+Cq 5IGSVvOblw6qKtslPeAt6FGYxIqgkmQCJQ8j8gqpw0ypOIwV/mfcSmyqkUXnnJ6t M8Df7oag6eH7Dwfdlq/4wj/efl/AgrLDRWSQMR7lm5ltliai9vAlUPhOB5txVyBz oEQVlw16OXh6ih/BkGXKHUoV5Z9I2mjsNVDO9rMNbH/yHG90PxBbQpcOJbUQTyKz kY1nNaWVwHkxqEDyydg6dHcf1L8BMKs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:57:57 2025 by rpki-client