$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa File: e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa (raw, json) Hash identifier: D3HGWIQYIKraZHDSN6O5Qou9+0T9bToiJNbQ41RP974= Subject key identifier: 4B:DE:23:AD:B9:BE:F0:0C:C6:35:15:D6:90:BA:35:1C:9F:03:D3:25 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584ACE0B92D56A6CAE3E38949840 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 92 IP address blocks: 128.153.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:92:d5:6a:6c:ae:3e:38:94:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=14db41b5-1464-4dd9-acca-046d3066b14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:6c:82:ad:76:e1:2a:d9:e3:c5:ca:da:ae: 4c:6b:d5:cf:3e:27:d4:7d:b0:67:a6:55:ee:37:e4: 5d:13:61:fe:c1:3d:ac:ed:89:03:fa:a2:ec:47:61: 67:d6:11:ef:8d:16:7f:7c:f3:dd:c1:cf:6f:9d:52: ea:28:be:34:39:a8:de:e3:7f:73:37:b4:2e:48:7f: 4b:64:10:64:1b:2c:d9:6d:de:bf:5c:63:d6:fb:81: a2:43:57:56:5a:f2:9e:11:ea:aa:f4:5f:11:70:02: 3f:0d:03:0c:5b:b7:81:12:f1:44:24:e3:da:d4:16: 25:a5:c4:c9:4b:56:24:4a:6f:ea:11:7e:de:87:aa: d7:e8:57:9c:66:f6:3d:3e:08:30:1e:ec:4e:a0:fb: 46:7c:8a:26:1c:83:ee:2f:79:27:a3:07:a6:5a:6c: a4:b0:fa:b0:77:86:32:c1:ea:e5:20:c8:96:01:98: 62:b6:67:d4:5c:55:9b:b0:5b:30:1d:2f:14:9a:77: e6:d4:fb:aa:cf:42:76:51:98:55:df:df:1d:bb:86: 41:d3:a8:7a:f9:0b:0a:fb:56:c4:a4:e6:a7:1a:5a: 0c:1e:d0:ea:53:40:30:33:c2:a3:20:a7:76:09:62: d9:91:55:11:7f:8e:84:0b:7f:2a:5b:72:58:f3:76: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DE:23:AD:B9:BE:F0:0C:C6:35:15:D6:90:BA:35:1C:9F:03:D3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a8:e4:ea:de:ee:92:0e:d2:c2:4a:fe:a1:91:5e:91:db:50: 74:d1:f9:57:7f:64:6e:85:8d:3e:42:4e:23:75:1b:98:d5:d8: 48:f1:af:86:d1:68:bd:25:1f:03:46:e8:92:ae:70:42:de:c5: ef:f8:55:ff:5b:58:48:86:d5:e4:a1:3f:1a:b3:bd:7a:7a:13: 3d:1b:c7:27:0f:5a:3a:d8:bd:49:4d:12:73:2d:bf:98:f7:29: b1:d6:1d:e5:14:f2:ac:19:0d:ea:a5:51:d3:a5:8b:ae:b8:24: c2:2c:05:24:aa:bd:d5:af:54:86:36:cf:9d:27:d7:07:35:5a: bf:03:79:c2:33:f4:48:30:7b:fe:f2:a9:4c:84:9d:c5:06:5b: 15:c8:77:c9:88:28:f6:39:40:f7:fb:69:d3:c1:6e:c7:58:d0: 66:d8:c2:46:47:1e:73:c3:eb:6a:19:82:bd:7b:2e:84:ba:85: fc:d2:f3:4c:74:c5:43:7e:04:1e:4c:dc:de:a2:d6:0e:d4:6f: bc:8b:cf:b9:c9:83:1a:38:bf:6f:21:b6:ad:9c:ff:7f:bb:f4: d1:73:60:94:2c:8d:b5:70:b2:1d:b9:49:23:b5:5e:37:90:ee: 2b:56:23:9a:fc:db:a2:50:3b:af:1b:a5:1b:65:0f:3c:3e:ba: 21:b9:c6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5LVamyuPjiUmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MTRkYjQxYjUtMTQ2NC00ZGQ5LWFjY2EtMDQ2ZDMwNjZiMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr75sgq124SrZ48XK2q5Ma9XPPifUfbBnplXu N+RdE2H+wT2s7YkD+qLsR2Fn1hHvjRZ/fPPdwc9vnVLqKL40Oaje439zN7QuSH9L ZBBkGyzZbd6/XGPW+4GiQ1dWWvKeEeqq9F8RcAI/DQMMW7eBEvFEJOPa1BYlpcTJ S1YkSm/qEX7eh6rX6FecZvY9PggwHuxOoPtGfIomHIPuL3knowemWmyksPqwd4Yy werlIMiWAZhitmfUXFWbsFswHS8Umnfm1Puqz0J2UZhV398du4ZB06h6+QsK+1bE pOanGloMHtDqU0AwM8KjIKd2CWLZkVURf46EC38qW3JY83bvmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEveI625vvAMxjUV1pC6NRyfA9MlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvZTg4MTY3NTQtZTE2YS0z MmE3LWJiMWYtYTU2ZTI1NGUwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyo5Ore7pIO0sJK/qGRXpHbUHTR+Vd/ZG6FjT5CTiN1G5jV2Ejxr4bR aL0lHwNG6JKucELexe/4Vf9bWEiG1eShPxqzvXp6Ez0bxycPWjrYvUlNEnMtv5j3 KbHWHeUU8qwZDeqlUdOli664JMIsBSSqvdWvVIY2z50n1wc1Wr8DecIz9Egwe/7y qUyEncUGWxXId8mIKPY5QPf7adPBbsdY0GbYwkZHHnPD62oZgr17LoS6hfzS80x0 xUN+BB5M3N6i1g7Ub7yLz7nJgxo4v28htq2c/3+79NFzYJQsjbVwsh25SSO1XjeQ 7itWI5r826JQO68bpRtlDzw+uiG5xlg= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:46 2025 by rpki-client