$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa File: ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa (raw, json) Hash identifier: 23Xzbtlak/UKnJsWDIsyASm3aYK86EIq5Boa4Q+0iNo= Subject key identifier: 7A:A3:D2:0D:A3:02:48:8E:BF:05:BE:D6:F2:8A:73:78:1A:66:F2:D0 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584AD3A113EE488510B0803F6100 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 27183 IP address blocks: 152.157.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:13:ee:48:85:10:b0:80:3f:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=f3a96ae9-0422-4d5f-a3b7-c7d5aa4179ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:34:a9:70:a1:10:6a:ee:ae:38:b6:17:6f:61: db:c1:08:48:57:41:1e:96:c4:ea:b3:09:54:a9:97: e5:48:43:a7:bc:8c:0c:5c:05:8a:66:ec:87:2a:00: bd:d9:57:a0:41:26:76:06:77:15:a9:c0:5d:3d:bd: 4d:ca:87:8d:be:ef:d9:c4:69:fc:f0:42:e0:ea:78: 46:7f:c1:e9:2a:77:85:db:2c:cd:1e:34:11:b4:d5: 5f:b5:0a:9a:03:99:46:64:7a:20:8b:5b:b4:64:ca: b2:2d:cb:ba:63:77:11:b9:5a:c1:a1:8e:72:3f:d2: 9c:16:d4:ab:a0:59:e4:76:ca:e4:5b:99:4a:d3:6b: 98:4f:ba:8a:65:b3:ac:a5:64:e6:fa:8c:1f:3e:fb: a8:75:24:e3:21:d5:09:6a:67:6f:fe:ae:7d:61:c4: 95:0f:29:93:de:2b:b7:e8:c0:e4:89:ea:3e:e5:c5: c7:c8:da:48:78:58:db:1f:9b:8d:15:97:26:f3:14: 0e:47:f8:79:8d:c4:40:78:2a:fa:ef:71:c2:ed:ba: 6d:27:88:f5:61:f0:38:4c:e9:5c:81:18:99:0c:5b: 24:d5:f1:1e:ef:5d:df:fb:2d:63:a4:52:88:a9:7a: dc:0f:71:a9:ab:49:87:51:40:5e:d8:3b:84:37:cf: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A3:D2:0D:A3:02:48:8E:BF:05:BE:D6:F2:8A:73:78:1A:66:F2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d0:b1:5d:f8:90:b4:d1:d8:ed:ea:6c:b9:04:8b:75:84:70: f8:1c:f3:8a:18:0f:19:ca:8c:ce:5d:15:c4:aa:4a:c9:bc:19: 7f:f6:c2:89:b4:4a:50:45:11:03:26:db:99:81:96:82:ee:f9: 9f:64:93:5f:54:a8:d9:45:0f:b4:3e:53:2f:0a:ee:98:cf:ed: 95:28:37:2c:50:c9:78:0e:6b:48:f1:cf:3a:32:47:0d:64:af: a1:c5:f6:80:bb:68:5a:a3:d6:15:52:b4:3a:e5:73:bb:4f:a7: 07:01:73:a7:8d:67:ec:61:dd:48:77:5a:11:04:dc:08:e9:10: 8e:e8:be:56:f7:64:21:3a:c9:2f:43:1d:9f:f5:39:0a:df:72: d1:4b:9b:31:91:ca:b2:61:36:8e:cc:fa:a1:6d:c3:e7:21:88: a2:c7:83:b3:1d:a1:78:2d:4c:f3:2b:12:8d:a9:5e:9b:3c:96: c6:ed:55:69:99:52:f4:bc:1e:3f:a0:eb:04:df:86:77:41:53: bc:1a:83:6d:f8:5a:6a:3a:87:b4:c4:03:9c:79:15:43:14:98: ea:c9:cb:ae:05:8b:de:2b:fc:cd:b1:26:49:b4:0d:cf:5f:ad: b8:e9:ea:dd:43:0c:b7:db:82:c2:67:fb:f1:61:15:8c:f3:70: 79:6b:b3:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRPuSIUQsIA/YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjNhOTZhZTktMDQyMi00ZDVmLWEzYjctYzdkNWFhNDE3OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTSpcKEQau6uOLYXb2HbwQhIV0EelsTqswlU qZflSEOnvIwMXAWKZuyHKgC92VegQSZ2BncVqcBdPb1NyoeNvu/ZxGn88ELg6nhG f8HpKneF2yzNHjQRtNVftQqaA5lGZHogi1u0ZMqyLcu6Y3cRuVrBoY5yP9KcFtSr oFnkdsrkW5lK02uYT7qKZbOspWTm+owfPvuodSTjIdUJamdv/q59YcSVDymT3iu3 6MDkieo+5cXHyNpIeFjbH5uNFZcm8xQOR/h5jcRAeCr673HC7bptJ4j1YfA4TOlc gRiZDFsk1fEe713f+y1jpFKIqXrcD3Gpq0mHUUBe2DuEN8+Y4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqj0g2jAkiOvwW+1vKKc3gaZvLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmZlNGZiNTYtMzVlNi0z ZjEyLTk5ZjAtYjExMzlkMjhlNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/QsV34kLTR2O3qbLkEi3WEcPgc84oYDxnKjM5dFcSqSsm8GX/2wom0 SlBFEQMm25mBloLu+Z9kk19UqNlFD7Q+Uy8K7pjP7ZUoNyxQyXgOa0jxzzoyRw1k r6HF9oC7aFqj1hVStDrlc7tPpwcBc6eNZ+xh3Uh3WhEE3AjpEI7ovlb3ZCE6yS9D HZ/1OQrfctFLmzGRyrJhNo7M+qFtw+chiKLHg7MdoXgtTPMrEo2pXps8lsbtVWmZ UvS8Hj+g6wTfhndBU7wag234Wmo6h7TEA5x5FUMUmOrJy64Fi94r/M2xJkm0Dc9f rbjp6t1DDLfbgsJn+/FhFYzzcHlrs/8= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:57 2025 by rpki-client