$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa File: 890573c2-5d76-3e60-aba8-8cb1b23922de.roa (raw, json) Hash identifier: KSrwTWxL7NfsxtNeUMQAQr4dbDwkHFpj5R53D1c14VU= Subject key identifier: 5F:16:02:09:57:AB:0F:2C:2A:B0:F2:40:55:A4:55:B9:3A:73:95:A3 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584AECC148C7EA732B3D56164DC0 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 67.159.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:48:c7:ea:73:2b:3d:56:16:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1e47d26a-2b77-4237-b8d4-d48471689378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:19:56:0e:49:21:27:98:55:b2:30:3f:5a:27: 91:58:b6:78:69:1e:8d:12:40:3f:04:21:45:07:2e: 6a:4e:c3:e5:f5:98:f6:fb:ce:47:b6:3c:f8:87:8a: f5:2c:3b:83:86:66:6b:f5:10:69:db:ad:57:49:3a: 38:5d:01:9c:56:d7:5b:1f:20:4f:d8:58:eb:3e:e6: a0:24:20:a8:53:70:63:ae:1e:a8:6e:38:61:14:96: 2b:b2:b0:90:64:19:be:52:e9:e8:f7:56:93:9a:21: a9:92:2c:95:82:d1:4c:aa:13:28:2b:e7:d4:91:3c: 22:d2:d5:ca:8b:76:b7:06:59:53:76:1e:f3:e5:75: d5:f9:d8:5d:ea:0d:01:0d:22:3c:b0:a1:5d:01:6c: a6:28:62:83:44:85:21:5c:2f:54:af:fd:d9:a8:b0: c6:7a:41:37:28:c0:fe:d2:87:6b:16:66:f3:10:c7: bc:b5:fa:03:2b:90:1d:23:f7:ac:98:d7:37:b2:ed: 5b:dd:1d:64:bd:25:2e:1e:54:27:55:04:9f:5b:25: 17:9c:3c:bc:72:0d:49:17:9c:5c:8f:66:8e:cd:ff: a8:00:3b:6f:b9:2d:85:be:e2:8c:de:db:0a:83:2e: b6:4d:89:3a:cd:c8:07:30:ab:21:af:c8:c2:06:ec: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:16:02:09:57:AB:0F:2C:2A:B0:F2:40:55:A4:55:B9:3A:73:95:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv4: 67.159.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:63:84:0a:53:67:ab:d1:33:5f:67:6f:7c:6d:20:e1:f9:c1: 62:0a:77:7e:0b:56:57:dc:71:ca:a1:ec:0d:9a:cd:47:bd:04: bb:ca:f0:f3:f6:9b:bb:88:f1:27:0b:49:d9:b5:89:77:3e:5f: 4c:51:3a:46:dd:12:63:40:25:99:6c:37:16:6e:da:97:5f:6f: 68:e2:ed:a8:24:50:d2:e6:57:62:2f:cb:77:d4:98:e9:4e:c7: c5:c5:d2:2a:e4:39:50:8c:55:ec:1c:f7:5f:aa:36:35:86:87: 2a:96:03:9c:18:2b:ea:1d:bc:36:47:16:55:4a:f9:74:64:9b: d1:f7:62:18:b3:cb:c2:ad:d7:7b:1c:af:ac:bc:06:f8:80:75: 97:96:f4:89:54:3c:3a:63:71:7f:3c:63:01:56:1f:ad:f2:ed: 74:6d:41:b8:c2:27:49:3a:4f:50:61:b6:fd:ce:26:32:a1:ee: fd:4f:36:15:ef:42:5a:77:af:a5:17:da:00:6a:25:58:35:5f: de:df:3a:0b:fc:64:5d:90:d3:c9:f5:c8:e5:f0:db:40:af:43: 91:8d:54:5c:20:0d:af:4c:3e:38:a6:b6:0e:8b:b6:55:49:96: 87:ab:35:82:82:e8:9b:01:d2:c4:11:5e:af:e4:42:b1:f1:dd: 90:fc:ce:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUjH6nMrPVYWTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWU0N2QyNmEtMmI3Ny00MjM3LWI4ZDQtZDQ4NDcxNjg5Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxlWDkkhJ5hVsjA/WieRWLZ4aR6NEkA/BCFF By5qTsPl9Zj2+85Htjz4h4r1LDuDhmZr9RBp261XSTo4XQGcVtdbHyBP2FjrPuag JCCoU3Bjrh6objhhFJYrsrCQZBm+Uuno91aTmiGpkiyVgtFMqhMoK+fUkTwi0tXK i3a3BllTdh7z5XXV+dhd6g0BDSI8sKFdAWymKGKDRIUhXC9Ur/3ZqLDGekE3KMD+ 0odrFmbzEMe8tfoDK5AdI/esmNc3su1b3R1kvSUuHlQnVQSfWyUXnDy8cg1JF5xc j2aOzf+oADtvuS2FvuKM3tsKgy62TYk6zcgHMKshr8jCBuwPbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8WAglXqw8sKrDyQFWkVbk6c5WjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvODkwNTczYzItNWQ3Ni0z ZTYwLWFiYTgtOGNiMWIyMzkyMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1jhApTZ6vRM19nb3xtIOH5wWIKd34LVlfcccqh7A2azUe9BLvK8PP2 m7uI8ScLSdm1iXc+X0xROkbdEmNAJZlsNxZu2pdfb2ji7agkUNLmV2Ivy3fUmOlO x8XF0irkOVCMVewc91+qNjWGhyqWA5wYK+odvDZHFlVK+XRkm9H3Yhizy8Kt13sc r6y8BviAdZeW9IlUPDpjcX88YwFWH63y7XRtQbjCJ0k6T1Bhtv3OJjKh7v1PNhXv Qlp3r6UX2gBqJVg1X97fOgv8ZF2Q08n1yOXw20CvQ5GNVFwgDa9MPjimtg6LtlVJ loerNYKC6JsB0sQRXq/kQrHx3ZD8zhI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:53 2025 by rpki-client