$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa File: f652d85e-7f1d-381a-80d0-5577ce4aa300.roa (raw, json) Hash identifier: NZVHOT59bk0tvqa51L8t05GYOSFyBO4PuDD7fBuiDoU= Subject key identifier: 15:CE:DC:FE:AA:01:B9:4C:D2:22:90:D4:A5:D0:84:B6:3A:74:75:34 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584AECC11F9CF46B7F2FB5063B00 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 53828 IP address blocks: 144.91.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1f:9c:f4:6b:7f:2f:b5:06:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=57bc1d22-22f0-46f6-8d1a-887c3c428812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1b:62:f6:5a:a7:dd:07:9f:94:d5:f8:1e:21: c8:44:ea:e3:2a:2e:d1:83:9a:56:d0:21:fb:09:cd: d9:5c:b6:b3:ab:2d:2b:44:ca:94:e6:59:45:c9:fd: 78:b8:74:a1:14:51:a5:e6:45:cc:33:9b:60:fe:b3: 4f:7c:01:ee:01:16:53:44:ba:70:16:ea:f2:e8:48: 0b:3b:08:e8:ce:7f:6f:cb:64:ec:16:d3:01:0b:d7: b2:07:7d:9e:4f:b9:53:b9:cf:f7:03:55:ff:13:5f: 90:d5:6c:84:ae:07:73:e5:97:ab:1a:51:f9:ea:b0: 75:8f:a2:ab:fe:2a:54:23:ca:b0:dd:84:03:ae:18: 4e:41:ae:66:0e:2a:69:72:fc:51:22:90:e8:14:ad: 29:a8:fd:f3:0b:be:09:58:9f:a1:81:66:9c:51:71: 78:94:a7:53:91:c6:b5:62:ab:97:1f:db:c5:6c:49: 9b:d8:d6:2c:14:c0:b0:90:f2:9c:28:89:b2:26:08: ec:4d:f0:12:95:4f:ad:b6:b6:3e:5b:eb:e0:1d:ec: 60:a1:31:e7:7a:ad:ae:a3:8a:b8:2e:23:de:45:30: b8:e1:93:f7:dc:b1:6f:31:34:93:ce:a2:a7:4a:84: 79:2b:cb:36:a3:8e:80:de:f8:dd:8e:92:3f:65:fd: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CE:DC:FE:AA:01:B9:4C:D2:22:90:D4:A5:D0:84:B6:3A:74:75:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 144.91.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:20:43:45:4e:5d:e4:ee:b2:b3:59:90:65:f1:ba:21:57:3c: b9:5e:11:54:79:23:7a:9b:f1:0c:7b:82:c7:88:83:19:70:b8: b9:17:92:2b:d6:13:2b:61:11:d0:5f:f2:06:53:25:7b:08:ca: d8:41:06:ce:5e:dc:6c:a3:d4:a6:e9:c6:4c:03:e0:ec:97:5c: 02:bf:bb:d7:a1:90:2d:42:30:b9:7e:ae:63:21:fa:da:d9:51: 5a:25:d7:6c:51:da:18:09:f8:22:33:71:60:44:98:1e:35:5e: ea:b7:f9:6f:8f:27:de:b6:c0:a1:09:35:6b:42:4d:9d:0f:17: 6d:45:91:a8:b4:21:f7:36:98:d4:28:d7:b1:b0:28:f4:9a:87: 92:18:43:95:0f:f1:a7:6e:f5:27:c8:b3:0d:7d:11:d0:e3:fe: 9e:51:b1:15:e8:02:7a:4a:fc:2c:1b:93:e4:cc:54:3e:a8:a9: f6:7c:16:ac:32:37:69:38:e3:a5:f1:15:b8:cf:65:37:27:34: 5e:77:5e:23:cf:5d:7d:38:f8:be:73:af:b1:22:a6:51:78:4e: 2f:91:50:89:55:40:de:c6:2d:85:dd:54:f3:bd:1c:09:01:a5: e7:7f:97:78:ed:68:e9:df:45:70:74:2b:2c:55:2e:32:c3:40: 2f:04:78:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswR+c9Gt/L7UGOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTdiYzFkMjItMjJmMC00NmY2LThkMWEtODg3YzNjNDI4ODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hti9lqn3QeflNX4HiHIROrjKi7Rg5pW0CH7 Cc3ZXLazqy0rRMqU5llFyf14uHShFFGl5kXMM5tg/rNPfAHuARZTRLpwFury6EgL Owjozn9vy2TsFtMBC9eyB32eT7lTuc/3A1X/E1+Q1WyErgdz5ZerGlH56rB1j6Kr /ipUI8qw3YQDrhhOQa5mDippcvxRIpDoFK0pqP3zC74JWJ+hgWacUXF4lKdTkca1 YquXH9vFbEmb2NYsFMCwkPKcKImyJgjsTfASlU+ttrY+W+vgHexgoTHneq2uo4q4 LiPeRTC44ZP33LFvMTSTzqKnSoR5K8s2o46A3vjdjpI/Zf2H2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXO3P6qAblM0iKQ1KXQhLY6dHU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvZjY1MmQ4NWUtN2YxZC0z ODFhLTgwZDAtNTU3N2NlNGFhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkFuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcgQ0VOXeTusrNZkGXxuiFXPLleEVR5I3qb8Qx7gseIgxlwuLkXkivW EythEdBf8gZTJXsIythBBs5e3Gyj1KbpxkwD4OyXXAK/u9ehkC1CMLl+rmMh+trZ UVol12xR2hgJ+CIzcWBEmB41Xuq3+W+PJ962wKEJNWtCTZ0PF21Fkai0Ifc2mNQo 17GwKPSah5IYQ5UP8adu9SfIsw19EdDj/p5RsRXoAnpK/Cwbk+TMVD6oqfZ8Fqwy N2k446XxFbjPZTcnNF53XiPPXX04+L5zr7EiplF4Ti+RUIlVQN7GLYXdVPO9HAkB ped/l3jtaOnfRXB0KyxVLjLDQC8EeDU= -----END CERTIFICATE-----Generated at Sun Aug 24 09:34:34 2025 by rpki-client