$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa File: 8473396c-8a36-3619-80aa-c025ed526998.roa (raw, json) Hash identifier: MyY5zzzR4etNmvzhGMnkxB8cE5VETOllVRRK+cLPM7Y= Subject key identifier: FD:A4:9F:05:5A:66:04:97:DA:F8:2E:6E:3D:9C:E6:0F:74:39:77:01 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B87B21DE733C90956F9B28BC0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 13984 IP address blocks: 164.153.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1d:e7:33:c9:09:56:f9:b2:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=3acb3eb9-d4f9-485c-a49b-ee8a0aa89c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:8f:59:75:a6:34:42:36:51:2e:d3:88:16: 55:25:3c:52:dd:83:c2:ab:f1:e1:72:8e:35:f4:c6: 03:ff:89:71:f5:3a:61:21:59:9d:ed:85:11:3c:6d: 2f:bc:6a:fe:e3:1d:b0:bc:1a:30:e4:31:4c:17:b9: 7c:4e:90:c2:8d:71:74:e3:06:4e:9b:46:51:55:4c: 1e:8d:07:17:45:78:93:8c:69:f9:b1:87:f8:f7:8a: ee:8b:ee:1f:f0:95:fc:3a:24:d0:c4:b6:e8:27:c1: 55:ef:1b:fd:fd:1f:10:96:6a:6e:d9:34:ff:f9:8f: f9:a9:6e:6d:8e:8b:2c:f4:b2:5d:0b:b6:dc:68:d5: 8c:3f:bb:c5:c5:ff:dd:cb:f2:ba:ff:86:c6:7f:1f: 60:ea:54:56:63:56:3c:43:48:01:22:8a:a4:c3:86: 72:3f:7b:4e:d6:7d:e5:e0:8d:4c:b2:0c:55:25:77: b0:b4:18:9e:e5:17:91:d0:3f:60:0c:3b:86:01:e2: 6e:d6:b4:4f:49:2b:49:57:7e:c7:b0:71:65:c9:21: e6:a0:69:41:33:59:95:2a:33:d3:4e:e2:45:32:54: 84:7c:5a:b6:30:f7:c6:f0:e1:09:3b:5d:ca:3c:9d: e7:63:61:3e:60:26:0b:03:74:82:9e:44:82:57:2a: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:9F:05:5A:66:04:97:DA:F8:2E:6E:3D:9C:E6:0F:74:39:77:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 164.153.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:96:46:32:1f:96:51:5c:62:14:8c:ed:8e:49:42:07:db:bd: 24:e4:db:dc:fd:e2:d8:b0:16:e1:20:eb:a1:fe:e3:c6:b3:54: 5b:47:46:92:44:0c:eb:6f:db:39:45:9c:7f:b5:55:ed:a1:7f: 09:50:6f:d1:b1:22:16:1d:9b:b5:42:d6:05:44:3f:e3:bb:e7: 96:6b:25:25:3b:76:df:f3:f1:da:11:4d:3a:fb:f9:ff:37:df: 79:15:ab:06:b9:6f:6e:02:bc:2d:15:87:93:b6:70:5d:fa:f9: 12:5b:e5:ec:ef:b3:5b:21:4a:6c:74:01:fe:fc:94:99:9f:68: 86:24:75:d7:a3:88:8f:33:05:dc:59:ef:37:d9:8f:2e:06:34: 2c:5f:73:e0:68:bb:b0:3e:fb:ee:8e:b3:6b:69:ce:9d:7d:e4: fa:ab:31:1c:55:81:0b:87:0e:1a:9e:16:92:91:1c:c7:2c:63: ce:e4:06:7c:8e:37:42:bb:01:e2:19:87:29:8d:b3:44:b5:7c: 1a:db:84:6e:10:d5:85:07:fd:48:a0:90:d8:da:8c:92:31:55: 25:08:ca:a8:66:03:8a:6b:af:fa:d6:48:82:ea:14:f2:2d:39: e3:9c:56:ed:46:09:11:7c:e0:17:93:1f:ad:f9:ff:8b:a7:ab: 99:96:b0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh3nM8kJVvmyi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk M2FjYjNlYjktZDRmOS00ODVjLWE0OWItZWU4YTBhYTg5YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z2PWXWmNEI2US7TiBZVJTxS3YPCq/Hhco41 9MYD/4lx9TphIVmd7YURPG0vvGr+4x2wvBow5DFMF7l8TpDCjXF04wZOm0ZRVUwe jQcXRXiTjGn5sYf494rui+4f8JX8OiTQxLboJ8FV7xv9/R8Qlmpu2TT/+Y/5qW5t joss9LJdC7bcaNWMP7vFxf/dy/K6/4bGfx9g6lRWY1Y8Q0gBIoqkw4ZyP3tO1n3l 4I1MsgxVJXewtBie5ReR0D9gDDuGAeJu1rRPSStJV37HsHFlySHmoGlBM1mVKjPT TuJFMlSEfFq2MPfG8OEJO13KPJ3nY2E+YCYLA3SCnkSCVyoLKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2knwVaZgSX2vgubj2c5g90OXcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvODQ3MzM5NmMtOGEzNi0z NjE5LTgwYWEtYzAyNWVkNTI2OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6WRjIfllFcYhSM7Y5JQgfbvSTk29z94tiwFuEg66H+48azVFtHRpJE DOtv2zlFnH+1Ve2hfwlQb9GxIhYdm7VC1gVEP+O755ZrJSU7dt/z8doRTTr7+f83 33kVqwa5b24CvC0Vh5O2cF36+RJb5ezvs1shSmx0Af78lJmfaIYkddejiI8zBdxZ 7zfZjy4GNCxfc+Bou7A+++6Os2tpzp195PqrMRxVgQuHDhqeFpKRHMcsY87kBnyO N0K7AeIZhymNs0S1fBrbhG4Q1YUH/UigkNjajJIxVSUIyqhmA4prr/rWSILqFPIt OeOcVu1GCRF84BeTH635/4unq5mWsOw= -----END CERTIFICATE-----Generated at Mon Oct 20 05:31:15 2025 by rpki-client