$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa File: ef8708ad-3d66-3e70-a91d-773c52885e52.roa (raw, json) Hash identifier: cbd1ZO91hFAv0/Ivk23xrlDwGAXCot0Ftjfa/yua2QU= Subject key identifier: 0B:81:BB:4A:5A:95:F6:78:D5:8B:05:17:0D:87:50:B1:2C:A0:B2:35 Certificate issuer: /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Certificate serial: 010D0C9F4328584AECC13E37F1453451F1D69C80 Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 32121 IP address blocks: 142.152.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:3e:37:f1:45:34:51:f1:d6:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=56ff8ca2-1ed7-4e57-b0f8-cfc40e2cfb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:44:11:d8:cf:d8:44:a6:34:52:8a:cb:52: 90:56:f2:27:0f:ed:d6:56:8d:07:b2:44:9d:d5:e7: e3:3f:fc:75:13:00:fe:56:15:ca:b7:0e:7b:e1:20: e1:e7:f6:60:45:ca:96:30:67:8e:e3:bf:1e:11:5f: 02:4e:60:07:9a:a0:26:21:94:e3:8a:0d:2e:e7:1e: 09:97:7f:c1:b6:e8:4c:e2:2b:32:4c:8b:d1:40:98: be:2f:82:4a:5d:5c:19:6a:71:d9:04:9e:f5:57:21: 13:b5:1b:65:8f:76:ef:9d:25:e7:34:0e:f0:3a:8d: 18:81:1a:9c:1e:39:aa:b7:0b:e4:7f:2a:81:e6:56: 0f:c8:99:12:c5:c9:38:a8:eb:14:92:3c:30:eb:ac: b9:1a:d1:5c:c1:f2:ae:6d:fc:0e:07:bf:97:d9:00: 1c:b8:73:a5:48:91:78:48:df:3a:bb:31:40:5b:41: 5b:52:45:c4:aa:c3:e3:9b:98:45:09:9e:7a:78:d6: 8a:ba:6f:6a:ea:06:f1:9b:7e:63:b8:80:f2:c9:af: 91:53:c2:00:44:80:8f:5d:78:9d:7a:df:b4:94:ac: 7c:21:a5:46:7e:88:f8:fb:f7:86:1a:cf:ac:00:42: 02:0a:45:02:80:cb:a6:7c:16:74:03:fd:7f:b3:a7: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:81:BB:4A:5A:95:F6:78:D5:8B:05:17:0D:87:50:B1:2C:A0:B2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl X509v3 Authority Key Identifier: keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer sbgp-ipAddrBlock: critical IPv4: 142.152.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:55:cb:0e:5f:77:d7:c4:28:96:df:93:52:3b:40:19:2b:1b: 48:37:ab:a4:12:b3:88:1a:72:ed:2c:04:8a:f0:b8:3c:0c:93: 94:e5:d5:75:80:68:57:57:8f:dd:c3:54:9f:9c:a5:99:2f:23: 98:4e:e8:ae:21:ae:69:cb:af:ce:ec:c6:b5:5c:d9:f8:50:9f: e4:68:85:d0:a1:90:d3:d9:17:e6:4b:66:0f:22:d0:73:8c:18: fb:dc:35:ea:93:27:b8:05:3c:65:8b:6c:ba:81:80:b2:b7:60: 67:19:b8:c6:e6:18:f6:e1:85:be:73:23:bb:85:08:e5:2f:3c: 9a:48:ea:53:4d:ad:40:bb:08:3f:a7:9d:9e:b4:07:58:0f:ab: 1b:d1:05:15:9e:fb:02:bd:55:05:38:2f:43:01:9a:ce:d0:1f: 02:49:5f:5d:a4:58:be:ab:a9:36:94:27:d6:0c:9d:96:74:61: 9d:ae:69:f8:dc:2b:27:15:c8:73:c7:2c:11:5c:6e:2c:9d:6a: ba:87:ef:cc:39:8f:80:1f:ae:6c:90:18:b3:c7:5e:d5:60:4d: 87:54:3e:4b:d6:c9:fb:0d:46:b7:31:53:69:66:c6:d2:48:4c: 47:42:df:56:c0:56:04:38:de:56:3d:1c:34:ff:5b:c2:a5:68: d3:28:50:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswT438UU0UfHWnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3 ZjRkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTZmZjhjYTItMWVkNy00ZTU3LWIwZjgtY2ZjNDBlMmNmYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3BEEdjP2ESmNFKKy1KQVvInD+3WVo0HskSd 1efjP/x1EwD+VhXKtw574SDh5/ZgRcqWMGeO478eEV8CTmAHmqAmIZTjig0u5x4J l3/BtuhM4isyTIvRQJi+L4JKXVwZanHZBJ71VyETtRtlj3bvnSXnNA7wOo0YgRqc HjmqtwvkfyqB5lYPyJkSxck4qOsUkjww66y5GtFcwfKubfwOB7+X2QAcuHOlSJF4 SN86uzFAW0FbUkXEqsPjm5hFCZ56eNaKum9q6gbxm35juIDyya+RU8IARICPXXid et+0lKx8IaVGfoj4+/eGGs+sAEICCkUCgMumfBZ0A/1/s6ecgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuBu0palfZ41YsFFw2HULEsoLI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTZi M2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvZWY4NzA4YWQtM2Q2Ni0z ZTcwLWE5MWQtNzczYzUyODg1ZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2YjNmOTEtNGQ5ZC00NTIwLThj YTktY2UyNjE2YzM3ZjRkLzcxNmIzZjkxLTRkOWQtNDUyMC04Y2E5LWNlMjYxNmMz N2Y0ZC5jcmwwHwYDVR0jBBgwFoAUIIgDn4hmZ9pBaWSbn0ULX6FbXBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2 MTZjMzdmNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjphAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9Vyw5fd9fEKJbfk1I7QBkrG0g3q6QSs4gacu0sBIrwuDwMk5Tl1XWA aFdXj93DVJ+cpZkvI5hO6K4hrmnLr87sxrVc2fhQn+RohdChkNPZF+ZLZg8i0HOM GPvcNeqTJ7gFPGWLbLqBgLK3YGcZuMbmGPbhhb5zI7uFCOUvPJpI6lNNrUC7CD+n nZ60B1gPqxvRBRWe+wK9VQU4L0MBms7QHwJJX12kWL6rqTaUJ9YMnZZ0YZ2uafjc KycVyHPHLBFcbiydarqH78w5j4AfrmyQGLPHXtVgTYdUPkvWyfsNRrcxU2lmxtJI TEdC31bAVgQ43lY9HDT/W8KlaNMoULI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:06:34 2025 by rpki-client