$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa File: e3e04aed-b26a-36b2-8c93-d3312cb16705.roa (raw, json) Hash identifier: jM0AXn+SosfvpPbGMK+2SFrZ/4FvS/YJgzG1EJRBp0g= Subject key identifier: 84:A3:42:5D:23:6C:F0:A7:B4:5E:EB:60:57:C3:80:82:1D:F5:CE:7B Certificate issuer: /CN=03e67bc8-299e-48ec-b739-e66ab6f422c7 Certificate serial: 010D0C9F4328584AE46114C1738F86E9D41B7000 Authority key identifier: 12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 6579 IP address blocks: 134.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:14:c1:73:8f:86:e9:d4:1b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e67bc8-299e-48ec-b739-e66ab6f422c7 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=a6f02800-6bd6-4845-8d93-ac956f7aea78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:20:cb:70:fc:7c:06:80:be:3f:e0:00:91:6a: c8:ad:62:a9:cb:bd:af:3d:3c:9e:3e:f4:ba:25:f9: 6b:12:86:06:fd:73:fe:0b:0b:aa:ff:46:59:be:b0: 03:ed:3c:dc:9e:24:9a:c9:84:ed:c9:86:8e:48:8b: 1a:9f:9d:4a:ab:3f:37:f9:90:f1:57:81:8d:dc:ac: a0:c0:e5:46:56:ec:6a:fd:82:5f:e8:a3:aa:a2:7e: f7:a2:60:14:d4:cb:59:0a:7c:f1:9a:94:13:ff:9b: be:c1:45:5d:c8:a2:38:e2:e7:7e:25:ee:ce:bf:48: 34:52:7f:41:27:5a:d2:1d:d9:9d:41:f4:c1:74:20: b9:00:65:c2:bc:7c:01:ac:eb:1f:1c:5c:4d:2b:bb: 6e:d4:4a:c4:3f:ec:a3:d0:24:d0:ac:77:fb:de:1f: de:eb:c5:6a:2a:86:5b:b3:50:0c:c0:2f:e7:e7:9f: 76:b1:bb:eb:4e:62:7a:f5:0c:36:6f:b0:86:c0:3b: bf:1b:1a:f9:b8:f5:94:16:86:02:a8:42:63:f2:3b: 4a:e3:cf:e0:ff:00:21:9a:13:f1:fb:3f:5d:0b:52: d7:35:80:54:97:62:ab:ad:e2:31:f5:80:5a:96:87: 00:be:13:0e:b9:67:c6:02:12:68:ca:4a:57:48:e4: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A3:42:5D:23:6C:F0:A7:B4:5E:EB:60:57:C3:80:82:1D:F5:CE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl X509v3 Authority Key Identifier: keyid:12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer sbgp-ipAddrBlock: critical IPv4: 134.153.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d2:d5:91:a6:5e:4e:c7:90:04:c3:a9:c8:aa:f4:9c:73:fc: 82:89:17:b0:82:ed:b7:d2:86:7c:8a:af:cf:a2:87:96:4d:25: a0:17:39:12:46:84:0f:ec:d4:c2:da:eb:47:53:6a:19:6f:fc: ba:78:09:20:e0:37:4b:33:0e:85:ec:55:6e:a5:bb:1f:8e:d7: be:b1:09:ff:c7:c0:a9:78:3e:ef:00:89:ff:82:dd:4f:72:96: 82:6c:6b:05:4a:42:fc:93:ea:77:31:f5:83:b8:05:d0:5b:7f: 01:d6:81:ab:73:bf:94:5e:50:45:ee:ed:31:e3:0c:74:5a:81: b5:27:55:76:b3:80:08:09:f7:ca:fd:4a:e1:ff:1a:bd:94:a1: 3c:4c:68:da:9f:18:ef:50:e0:b9:54:04:df:17:4e:a8:b1:49: c9:fc:de:81:21:b0:38:3f:ce:bf:91:49:eb:f2:5c:54:1c:a9: ad:18:dd:f9:44:24:7d:dc:83:5e:06:1f:51:8c:69:66:ad:d9: 98:a1:e0:23:68:ca:8d:de:f9:3a:46:fb:55:b6:1f:94:c5:2a: 20:4c:7e:2e:78:1c:07:98:fe:85:f2:84:06:4b:11:65:02:75: ab:aa:26:3c:5f:d4:2e:0e:02:82:72:97:bd:5e:08:0b:f8:4f: 37:d3:78:d2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErkYRTBc4+G6dQbcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNlNjdiYzgtMjk5ZS00OGVjLWI3MzktZTY2YWI2ZjQy MmM3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YTZmMDI4MDAtNmJkNi00ODQ1LThkOTMtYWM5NTZmN2FlYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSDLcPx8BoC+P+AAkWrIrWKpy72vPTyePvS6 JflrEoYG/XP+Cwuq/0ZZvrAD7TzcniSayYTtyYaOSIsan51Kqz83+ZDxV4GN3Kyg wOVGVuxq/YJf6KOqon73omAU1MtZCnzxmpQT/5u+wUVdyKI44ud+Je7Ov0g0Un9B J1rSHdmdQfTBdCC5AGXCvHwBrOsfHFxNK7tu1ErEP+yj0CTQrHf73h/e68VqKoZb s1AMwC/n5592sbvrTmJ69Qw2b7CGwDu/Gxr5uPWUFoYCqEJj8jtK48/g/wAhmhPx +z9dC1LXNYBUl2KrreIx9YBalocAvhMOuWfGAhJoykpXSOR9VwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFISjQl0jbPCntF7rYFfDgIId9c57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2U2 N2JjOC0yOTllLTQ4ZWMtYjczOS1lNjZhYjZmNDIyYzcvZTNlMDRhZWQtYjI2YS0z NmIyLThjOTMtZDMzMTJjYjE2NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNlNjdiYzgtMjk5ZS00OGVjLWI3 MzktZTY2YWI2ZjQyMmM3LzAzZTY3YmM4LTI5OWUtNDhlYy1iNzM5LWU2NmFiNmY0 MjJjNy5jcmwwHwYDVR0jBBgwFoAUEvOYSo7le7Bgu8oZUcqkw/vcBBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2U2N2JjOC0yOTllLTQ4ZWMtYjczOS1lNjZh YjZmNDIyYzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhpkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAt9LVkaZeTseQBMOpyKr0nHP8gokXsILtt9KGfIqvz6KHlk0loBc5EkaE D+zUwtrrR1NqGW/8ungJIOA3SzMOhexVbqW7H47XvrEJ/8fAqXg+7wCJ/4LdT3KW gmxrBUpC/JPqdzH1g7gF0Ft/AdaBq3O/lF5QRe7tMeMMdFqBtSdVdrOACAn3yv1K 4f8avZShPExo2p8Y71DguVQE3xdOqLFJyfzegSGwOD/Ov5FJ6/JcVByprRjd+UQk fdyDXgYfUYxpZq3ZmKHgI2jKjd75Okb7VbYflMUqIEx+LngcB5j+hfKEBksRZQJ1 q6omPF/ULg4CgnKXvV4IC/hPN9N40g== -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:30 2025 by rpki-client