$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa File: 2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa (raw, json) Hash identifier: Xzn93LiYfShPlFs6lq0DbCpKIQYLkjA7Yd13sgNH958= Subject key identifier: 82:77:41:B6:3C:91:0D:AC:9F:77:A6:8C:CF:CC:CB:D7:FF:4B:7A:1B Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Certificate serial: 010D0C9F4328584AC4463CEDBB4D5AD28C9C7D80 Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa Signing time: Wed 06 Aug 2025 13:00:42 +0000 ROA not before: Wed 06 Aug 2025 13:00:42 +0000 ROA not after: Tue 04 Nov 2025 14:00:42 +0000 asID: 401395 IP address blocks: 192.157.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:46:3c:ed:bb:4d:5a:d2:8c:9c:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Validity Not Before: Aug 6 13:00:42 2025 GMT Not After : Nov 4 14:00:42 2025 GMT Subject: CN=65250a36-bc53-4fb7-9b27-055568711099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:12:4f:45:8f:7c:5d:ac:12:c5:12:00:d3: 34:2b:d8:35:bc:65:81:af:55:ec:6c:29:6f:2f:82: 6f:28:4a:b6:0e:66:dd:81:3a:3c:c9:dd:1b:83:4b: fb:cb:19:dd:3c:39:55:0e:06:e1:47:34:05:67:10: 6c:dd:f5:ad:3d:91:0c:40:32:c8:89:56:4a:bd:fc: 64:94:cf:00:1c:af:4d:0b:f2:e7:ac:3d:ec:0f:59: af:28:7a:1c:fa:0c:d5:6b:33:bf:44:d3:5b:87:0c: 8a:f8:02:25:c8:14:db:58:07:05:c3:ff:65:30:de: a8:a9:44:3b:00:50:3b:c4:65:9f:af:a3:41:db:a4: 96:0f:d2:a1:86:fd:51:70:9f:88:45:71:22:fc:70: f8:53:3e:af:b2:d3:4e:f1:bc:e4:a7:96:48:eb:7a: 54:6e:9a:21:8d:b6:de:6c:d7:72:1b:0d:dc:8c:ac: 95:7b:7e:77:95:67:95:80:c8:28:23:c0:b4:08:ec: fd:dd:99:56:12:ea:58:8b:70:a2:2d:78:50:36:0b: d8:49:ca:02:2b:a7:ef:61:58:52:e8:d0:f8:61:b3: 5b:a3:2e:c6:4b:bb:34:c6:4e:48:b9:22:00:8a:e4: 26:79:de:5a:47:b1:89:31:34:44:f4:bc:cd:d0:5f: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:77:41:B6:3C:91:0D:AC:9F:77:A6:8C:CF:CC:CB:D7:FF:4B:7A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl X509v3 Authority Key Identifier: keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer sbgp-ipAddrBlock: critical IPv4: 192.157.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:fd:03:4c:3f:28:77:c6:62:6a:56:3e:1b:2e:1e:6f:59:5a: b7:49:a9:ee:bd:4a:57:fd:08:6b:5f:0d:e0:46:67:f2:4e:c2: b0:21:6b:f5:30:ae:2f:cd:d6:39:0a:b9:8a:f2:13:0b:f8:91: 4f:34:e8:b3:52:a1:a1:07:af:9e:c0:ee:3c:aa:9a:db:6e:7a: 3b:c4:90:df:fc:73:78:7e:2d:74:f7:e6:87:a9:e8:3c:05:69: 3a:65:d6:9a:a6:bf:ee:c3:83:c5:d1:bb:cb:f6:4a:fd:5f:8f: 40:13:b8:60:11:7f:16:60:91:25:36:c6:9b:72:c4:18:40:cd: c7:e3:f9:b5:4a:27:0d:82:f7:b7:23:58:49:c8:b7:bc:91:e9: 69:0c:10:84:97:d1:25:12:8f:a4:df:43:3b:b0:ea:2e:f0:f1: 5f:46:ff:c8:27:c9:a3:08:2d:8a:15:a6:08:fe:0b:f3:5d:a9: 0b:e4:d3:8a:5b:07:8e:9f:7d:d0:d8:8b:46:57:1c:f5:1a:dd: c6:2c:11:98:9a:8c:ba:ce:2d:a2:99:c2:6f:87:89:de:27:bc: ce:68:07:c9:1b:f9:39:ad:39:d4:be:12:de:3e:ed:32:4f:da: dd:94:89:f4:6c:97:7e:99:c1:29:d9:3e:02:81:49:27:ed:33: ba:9a:17:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErERjztu01a0oycfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm MWE0MB4XDTI1MDgwNjEzMDA0MloXDTI1MTEwNDE0MDA0MlowLzEtMCsGA1UEAxMk NjUyNTBhMzYtYmM1My00ZmI3LTliMjctMDU1NTY4NzExMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/UST0WPfF2sEsUSANM0K9g1vGWBr1XsbClv L4JvKEq2DmbdgTo8yd0bg0v7yxndPDlVDgbhRzQFZxBs3fWtPZEMQDLIiVZKvfxk lM8AHK9NC/LnrD3sD1mvKHoc+gzVazO/RNNbhwyK+AIlyBTbWAcFw/9lMN6oqUQ7 AFA7xGWfr6NB26SWD9Khhv1RcJ+IRXEi/HD4Uz6vstNO8bzkp5ZI63pUbpohjbbe bNdyGw3cjKyVe353lWeVgMgoI8C0COz93ZlWEupYi3CiLXhQNgvYScoCK6fvYVhS 6ND4YbNboy7GS7s0xk5IuSIAiuQmed5aR7GJMTRE9LzN0F8eQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJ3QbY8kQ2sn3emjM/My9f/S3obMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvMmQ1M2QzYWYtZTc3ZS0z YmQxLWJkOTYtYTU0MzExYmE1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx YjNjMmYxYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAND9A0w/KHfGYmpWPhsuHm9ZWrdJqe69Slf9CGtfDeBGZ/JOwrAha/Uw ri/N1jkKuYryEwv4kU806LNSoaEHr57A7jyqmttuejvEkN/8c3h+LXT35oep6DwF aTpl1pqmv+7Dg8XRu8v2Sv1fj0ATuGARfxZgkSU2xptyxBhAzcfj+bVKJw2C97cj WEnIt7yR6WkMEISX0SUSj6TfQzuw6i7w8V9G/8gnyaMILYoVpgj+C/NdqQvk04pb B46ffdDYi0ZXHPUa3cYsEZiajLrOLaKZwm+Hid4nvM5oB8kb+TmtOdS+Et4+7TJP 2t2UifRsl36ZwSnZPgKBSSftM7qaFzQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:46 2025 by rpki-client