$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json) Hash identifier: wjZUmcQcuq4PgoWxg1xfjjIn6jP8mb1DchzeWuY5HIg= Subject key identifier: E4:DC:DE:0B:59:F1:1E:8C:9C:F0:54:6E:42:C1:9B:D1:4C:2E:C1:D9 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584AC87650EAADE12FE964345AC0 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 53991 IP address blocks: 164.152.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:50:ea:ad:e1:2f:e9:64:34:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=39bdada5-26ff-44f9-bb97-2428d4b2875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:2f:67:60:be:be:8d:a6:6f:bb:62:b0:b4: 28:ee:e7:64:6a:25:78:f4:2f:89:96:9f:70:a9:97: 98:11:29:ee:b3:0c:24:f2:bd:ee:cb:ea:cf:6d:20: 82:77:04:c3:36:46:83:72:fa:89:df:fe:55:27:b7: 30:d5:12:7d:7f:2b:98:2c:38:f8:56:18:41:9f:cb: 0b:31:ad:86:f8:32:60:8e:05:e0:42:87:5e:dd:5f: ef:ca:f3:6f:e7:63:80:66:05:49:eb:6c:cf:de:e8: 2a:75:ee:65:a4:04:67:ae:40:85:47:22:05:5e:2e: e3:98:95:18:d1:d2:df:3c:98:6c:76:20:17:3f:29: 0a:94:31:c2:c2:00:3a:7a:35:62:3c:67:56:07:ab: 5a:63:40:57:b9:42:7b:1a:4b:a6:d8:78:46:09:4c: 09:98:85:56:f6:d9:0a:bf:4d:20:e7:4c:e9:21:72: cb:50:66:9e:38:ba:4e:04:c5:82:5a:de:19:03:c8: 7f:dd:00:45:d9:36:aa:57:74:88:28:fe:31:c1:84: 9b:2b:a3:69:e0:1e:2b:25:76:81:32:43:32:8b:e7: a6:02:3c:03:77:85:43:9c:6b:c2:64:dc:9f:42:46: db:59:39:89:16:06:47:97:89:1c:0e:51:9c:2c:d5: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DC:DE:0B:59:F1:1E:8C:9C:F0:54:6E:42:C1:9B:D1:4C:2E:C1:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1a:c2:58:6f:6c:be:71:ea:6b:65:58:4b:c6:8c:09:7a:7b: fd:55:09:f4:55:60:72:ab:1c:91:f8:cf:5a:01:99:8d:7a:b5: e6:2d:28:91:e5:55:02:e0:ad:25:15:a7:09:84:ea:ee:f4:ed: 8e:e4:97:ec:03:1a:a1:b7:c0:7e:99:24:b2:5f:83:3e:ee:2c: 9a:85:2f:bc:c5:5e:a5:d0:1e:27:5f:ee:2e:5d:89:e2:f9:a2: d2:ca:a9:5e:0b:43:a8:35:ca:98:dd:1d:26:8a:40:5e:62:ac: 26:bb:52:34:ae:10:b8:cd:ce:33:b0:ec:f1:c1:c2:1c:12:fd: 9e:2d:41:4e:0f:f0:84:79:f9:d4:5e:6d:66:f7:49:8f:cb:72: c0:bb:e3:c4:31:b1:a6:02:ca:59:f7:0a:94:d5:cb:3e:90:3f: c2:09:be:ce:6b:85:ff:d4:d1:5a:99:ad:15:30:4b:41:76:04: 5f:93:9e:8c:b4:f4:67:9b:c6:40:77:45:fa:a4:17:5d:62:5f: b2:f9:f3:2c:97:08:03:0f:d2:46:b9:16:b5:e0:52:3b:58:0a: b5:e8:33:c1:df:db:d9:30:97:bc:bb:e1:aa:14:1d:eb:82:a3: a0:15:c9:10:8a:4c:86:79:59:a6:0a:3b:05:cd:79:7c:7d:a9: 26:4e:fe:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlDqreEv6WQ0WsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzliZGFkYTUtMjZmZi00NGY5LWJiOTctMjQyOGQ0YjI4NzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqovZ2C+vo2mb7tisLQo7udkaiV49C+Jlp9w qZeYESnuswwk8r3uy+rPbSCCdwTDNkaDcvqJ3/5VJ7cw1RJ9fyuYLDj4VhhBn8sL Ma2G+DJgjgXgQode3V/vyvNv52OAZgVJ62zP3ugqde5lpARnrkCFRyIFXi7jmJUY 0dLfPJhsdiAXPykKlDHCwgA6ejViPGdWB6taY0BXuUJ7Gkum2HhGCUwJmIVW9tkK v00g50zpIXLLUGaeOLpOBMWCWt4ZA8h/3QBF2TaqV3SIKP4xwYSbK6Np4B4rJXaB MkMyi+emAjwDd4VDnGvCZNyfQkbbWTmJFgZHl4kcDlGcLNWVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTc3gtZ8R6MnPBUbkLBm9FMLsHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMjk0M2JmYzQtYTg0OS0z MTIzLTg0ZjYtOTlkNmNlYjc5ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMawlhvbL5x6mtlWEvGjAl6e/1VCfRVYHKrHJH4z1oBmY16teYtKJHl VQLgrSUVpwmE6u707Y7kl+wDGqG3wH6ZJLJfgz7uLJqFL7zFXqXQHidf7i5dieL5 otLKqV4LQ6g1ypjdHSaKQF5irCa7UjSuELjNzjOw7PHBwhwS/Z4tQU4P8IR5+dRe bWb3SY/LcsC748QxsaYCyln3CpTVyz6QP8IJvs5rhf/U0VqZrRUwS0F2BF+Tnoy0 9GebxkB3RfqkF11iX7L58yyXCAMP0ka5FrXgUjtYCrXoM8Hf29kwl7y74aoUHeuC o6AVyRCKTIZ5WaYKOwXNeXx9qSZO/sA= -----END CERTIFICATE-----Generated at Sun Aug 24 09:46:04 2025 by rpki-client