$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json) Hash identifier: 1wDsML14TS3jUImhtFV+KMOLVoEcifNk++deXIvsi5o= Subject key identifier: D8:7C:88:DC:D5:B1:CE:CF:07:35:FB:D6:57:FB:D2:A3:53:E3:5C:2B Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584AEE2697BAA6C2ABD5DF4C9870 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 16679 IP address blocks: 152.157.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:97:ba:a6:c2:ab:d5:df:4c:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=6d33b4c2-79f9-4f20-83e4-71c0aa8c4dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:0d:ff:9a:d5:d3:dd:fc:d1:8c:91:d8:84: 9b:1e:58:e0:51:72:d2:5d:4d:5b:46:aa:ab:e2:64: ef:57:09:e7:7d:7b:36:09:78:46:44:20:e1:90:1e: 50:81:4e:ff:c4:ce:27:fa:78:85:63:bf:7a:a9:63: 6f:7d:cb:2d:1f:6d:cf:ef:c4:5d:27:8a:e8:45:b1: 30:26:48:b8:79:e3:d7:73:a4:7b:25:6b:8a:0f:c4: 97:da:30:37:10:c5:e4:ae:d2:12:1d:6a:af:a0:f2: 49:98:af:59:d5:12:bd:a5:9a:b8:22:ee:ec:a1:a2: b4:7a:fa:67:b1:67:19:fb:42:39:68:12:44:10:64: ca:a4:ec:33:d3:d9:b0:9e:b6:4f:a0:52:18:e6:f9: ec:75:6c:f0:90:51:40:0a:ac:4d:ed:69:3d:cf:12: 63:56:dd:d9:be:36:bc:f3:fd:e2:b5:de:cb:4c:37: 73:40:75:cc:05:f4:06:68:03:75:98:e3:71:f8:ba: 81:f0:81:45:52:22:14:44:06:3f:8b:f6:ec:b0:a2: 48:5d:67:ab:f4:08:50:64:89:25:40:62:7c:bf:25: 02:1f:2d:a8:3b:85:2c:c0:1e:90:80:d9:15:4f:f4: b4:77:02:a9:95:c4:81:23:24:db:1b:50:fc:65:6e: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:88:DC:D5:B1:CE:CF:07:35:FB:D6:57:FB:D2:A3:53:E3:5C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f6:28:74:31:3f:49:e5:bd:4c:f5:da:71:39:d8:ca:26:90: 66:31:b5:89:f0:0f:a0:92:7a:b4:25:fb:be:15:3b:1e:93:ac: 9c:6e:3d:45:71:74:62:f8:8d:3c:4e:6d:6a:fb:90:9b:79:d0: e5:39:16:0e:94:39:d4:84:37:40:93:be:e9:0a:8f:51:22:0b: 16:63:e7:03:47:95:87:82:93:7f:f4:32:59:aa:fb:4c:3c:65: fb:a7:43:55:23:df:15:ef:06:6d:20:66:77:22:c0:d5:ba:1f: 12:d1:c7:f2:f2:77:f2:3c:94:6a:66:1d:54:47:80:ac:0e:63: 7b:cd:e2:39:fd:19:72:d2:d2:95:15:5e:fe:0a:4e:ac:d1:bd: de:d4:5c:1f:27:4a:08:e7:f5:8c:6c:d5:d3:f9:8b:0e:99:cc: 11:2f:80:0c:79:10:1d:76:4c:63:6c:32:1a:78:ea:27:ba:96: 04:81:c0:25:b5:ff:79:4e:4c:7d:85:5e:32:3c:79:5e:cd:ed: 57:19:ef:95:7f:1b:82:64:a5:06:41:41:53:f4:78:e4:58:20: 68:44:4e:dc:f8:69:a6:e7:02:5c:c2:e1:53:07:f9:92:a0:ae: ab:b7:85:0e:47:ec:65:cf:aa:49:d4:bf:dd:67:54:82:82:94: 07:3b:7b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpe6psKr1d9MmHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NmQzM2I0YzItNzlmOS00ZjIwLTgzZTQtNzFjMGFhOGM0ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/UN/5rV09380YyR2ISbHljgUXLSXU1bRqqr 4mTvVwnnfXs2CXhGRCDhkB5QgU7/xM4n+niFY796qWNvfcstH23P78RdJ4roRbEw Jki4eePXc6R7JWuKD8SX2jA3EMXkrtISHWqvoPJJmK9Z1RK9pZq4Iu7soaK0evpn sWcZ+0I5aBJEEGTKpOwz09mwnrZPoFIY5vnsdWzwkFFACqxN7Wk9zxJjVt3Zvja8 8/3itd7LTDdzQHXMBfQGaAN1mONx+LqB8IFFUiIURAY/i/bssKJIXWer9AhQZIkl QGJ8vyUCHy2oO4UswB6QgNkVT/S0dwKplcSBIyTbG1D8ZW7SxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh8iNzVsc7PBzX71lf70qNT41wrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZjdhMGExMzItNzcwOS0z YzE0LTliOTgtMWIwMzViMDQyODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH32KHQxP0nlvUz12nE52MomkGYxtYnwD6CSerQl+74VOx6TrJxuPUVx dGL4jTxObWr7kJt50OU5Fg6UOdSEN0CTvukKj1EiCxZj5wNHlYeCk3/0Mlmq+0w8 ZfunQ1Uj3xXvBm0gZnciwNW6HxLRx/Lyd/I8lGpmHVRHgKwOY3vN4jn9GXLS0pUV Xv4KTqzRvd7UXB8nSgjn9Yxs1dP5iw6ZzBEvgAx5EB12TGNsMhp46ie6lgSBwCW1 /3lOTH2FXjI8eV7N7VcZ75V/G4JkpQZBQVP0eORYIGhETtz4aabnAlzC4VMH+ZKg rqu3hQ5H7GXPqknUv91nVIKClAc7ewE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:28 2025 by rpki-client