$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa File: 159ace5d-d880-38ca-9296-22d7f83d3cb6.roa (raw, json) Hash identifier: PCqSJxLL8ndczNcwKP7QYjx+/qXGep6YFFWWABzjHLs= Subject key identifier: 13:5B:C4:47:8A:09:27:BE:77:BB:C6:38:7B:2A:A3:4F:05:54:D8:A7 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584ACE0B93048DA6943DF8548314 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 92 IP address blocks: 128.153.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:93:04:8d:a6:94:3d:f8:54:83:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=32d3a777-7a3a-4175-ba2f-dd7cc9f13f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:62:a1:91:e1:c3:a2:f4:4e:b0:5c:b0:93: 05:e9:51:2b:b5:32:c3:64:5f:83:29:2c:6d:ad:f3: d9:87:c2:9c:fb:4d:7c:b0:b4:62:8c:9e:d8:32:81: 93:bc:52:15:77:1f:34:e7:e1:bb:93:1c:41:ce:0d: 8b:1c:b8:66:45:aa:65:89:fd:f8:47:6b:d1:89:15: d6:7d:ca:31:4b:9a:4c:ad:ae:71:56:2a:31:d5:a1: a7:ec:58:df:43:51:63:f9:e4:8a:b9:d4:bc:25:db: 62:19:0a:c3:50:34:88:ba:10:77:37:a5:78:0f:c0: 2a:d3:bf:e1:c1:40:90:30:12:73:9f:12:63:dd:5b: e0:49:b6:39:79:d3:87:db:97:9e:89:80:10:ed:8c: 24:37:af:ea:19:e2:a5:25:4f:f8:8e:f4:7d:ce:d5: f2:5f:31:40:75:fb:83:07:ac:ab:3c:7f:c6:d2:56: 9d:99:b9:82:08:8c:14:15:87:ae:2b:93:81:c7:68: c8:57:e7:ce:70:35:fe:50:0f:06:fd:00:c8:9a:55: 69:89:ab:b4:e3:d8:59:92:a7:75:ea:20:9d:ab:64: 47:83:df:c2:60:36:19:e8:fb:3f:1d:88:6d:ee:af: 0f:ee:71:2b:17:ed:35:5b:05:00:bc:8e:88:a4:a2: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5B:C4:47:8A:09:27:BE:77:BB:C6:38:7B:2A:A3:4F:05:54:D8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ce:3c:ed:93:fd:4f:88:6c:c6:ef:0d:09:7c:45:19:d4:74: 4d:2d:af:5a:5b:7d:33:03:a4:c0:20:da:04:4f:f2:b0:78:b3: 53:de:36:9e:dc:b7:b6:81:19:41:49:0d:36:e4:37:67:3a:35: 83:f8:73:2b:28:a5:6f:5c:2f:72:d1:db:22:33:38:1c:6a:c2: c0:5c:79:5c:63:85:5d:7f:99:48:d2:69:c3:1b:08:29:a2:c4: 47:47:30:e1:f6:ad:f8:d9:9a:02:c5:bb:f1:13:41:98:46:03: 66:2a:36:68:9f:3e:b0:0c:f8:07:ad:7c:54:69:4b:b8:32:62: 45:38:ec:9a:67:b4:87:6a:d3:ad:79:a4:b0:6b:87:94:16:5c: b8:32:63:93:d2:fc:7e:a9:15:79:77:45:ed:8f:3a:a9:b8:51: ad:d4:b6:20:52:0c:36:cf:b5:8c:8a:10:62:4b:51:6f:4b:8b: 75:13:90:e7:70:27:f2:39:56:d2:e9:6c:b9:ac:c8:3d:d4:e9: ae:63:18:cc:60:b7:4a:ad:f7:8c:a9:d1:76:31:72:36:ef:8f: 94:21:0b:a7:da:98:77:40:68:79:e8:5e:4c:e2:ee:bf:43:9f: 64:f0:a0:e0:0f:d5:fb:b1:54:42:3a:ae:cd:d1:2b:b2:7b:c0: 1f:f3:0e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5MEjaaUPfhUgxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MzJkM2E3NzctN2EzYS00MTc1LWJhMmYtZGQ3Y2M5ZjEzZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq39ioZHhw6L0TrBcsJMF6VErtTLDZF+DKSxt rfPZh8Kc+018sLRijJ7YMoGTvFIVdx805+G7kxxBzg2LHLhmRaplif34R2vRiRXW fcoxS5pMra5xViox1aGn7FjfQ1Fj+eSKudS8JdtiGQrDUDSIuhB3N6V4D8Aq07/h wUCQMBJznxJj3VvgSbY5edOH25eeiYAQ7YwkN6/qGeKlJU/4jvR9ztXyXzFAdfuD B6yrPH/G0ladmbmCCIwUFYeuK5OBx2jIV+fOcDX+UA8G/QDImlVpiau049hZkqd1 6iCdq2RHg9/CYDYZ6Ps/HYht7q8P7nErF+01WwUAvI6IpKKH4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNbxEeKCSe+d7vGOHsqo08FVNinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMTU5YWNlNWQtZDg4MC0z OGNhLTkyOTYtMjJkN2Y4M2QzY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHOPO2T/U+IbMbvDQl8RRnUdE0tr1pbfTMDpMAg2gRP8rB4s1PeNp7c t7aBGUFJDTbkN2c6NYP4cysopW9cL3LR2yIzOBxqwsBceVxjhV1/mUjSacMbCCmi xEdHMOH2rfjZmgLFu/ETQZhGA2YqNmifPrAM+AetfFRpS7gyYkU47JpntIdq0615 pLBrh5QWXLgyY5PS/H6pFXl3Re2POqm4Ua3UtiBSDDbPtYyKEGJLUW9Li3UTkOdw J/I5VtLpbLmsyD3U6a5jGMxgt0qt94yp0XYxcjbvj5QhC6famHdAaHnoXkzi7r9D n2TwoOAP1fuxVEI6rs3RK7J7wB/zDgI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:57 2025 by rpki-client