$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa File: eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa (raw, json) Hash identifier: S5YwdJ2/b4sjN89+M0ZUIWCHPhutww4nXPuXA9iy58I= Subject key identifier: 18:A2:47:6B:74:E6:F3:5D:1A:B0:65:D0:D2:C9:10:A2:6D:AE:9A:D9 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584B63674C36F9147A2F9C766200 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 10384 IP address blocks: 152.87.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4c:36:f9:14:7a:2f:9c:76:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=26794ded-9a0f-4216-999b-41d5abaf8220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:bd:02:be:0c:db:26:af:33:97:bd:d2:00: 18:07:fa:6b:54:f7:5b:f4:5b:13:58:ce:3b:a6:42: 1f:00:e9:a4:1d:49:58:1e:08:14:0b:55:48:ab:42: e8:4b:9b:bf:34:24:e7:96:e8:15:5b:c2:0f:fe:69: e3:f0:a8:4f:9d:aa:5f:48:d5:bb:c0:6a:c5:3c:eb: c8:d2:7d:64:ae:4a:b6:36:26:92:c5:aa:3e:82:ee: e8:f3:57:e3:0b:fb:d7:ad:96:f3:14:15:92:be:dd: 1e:d9:89:52:fc:f8:0d:09:0f:d5:a6:2d:19:c4:31: a3:ad:6b:f7:64:2b:3c:55:c5:39:30:9b:96:61:80: e2:b8:38:e0:ca:52:df:96:1f:8c:fd:2c:9d:a7:ab: 64:f7:3e:53:ee:6c:db:5d:c8:df:8c:2f:49:b2:66: 4d:28:b8:71:7d:0a:0d:11:a9:6d:38:f4:36:ff:5f: 77:23:53:05:30:f4:e7:2a:43:5f:67:fb:35:6f:ed: b3:6c:6e:09:78:8b:3d:bf:f9:30:84:0f:fe:5c:8a: e4:e3:df:09:08:42:6f:d1:97:3e:3a:9f:6c:06:0e: cb:7e:d7:f9:00:73:66:f5:5a:62:b3:fd:ae:89:bf: 4d:de:e0:ac:8a:db:f3:b3:55:69:78:03:db:3d:b8: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A2:47:6B:74:E6:F3:5D:1A:B0:65:D0:D2:C9:10:A2:6D:AE:9A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:cf:57:22:95:5c:7a:d7:a8:0d:9e:46:7a:41:ce:91:26:ea: b2:be:9b:24:b7:e8:32:d4:20:94:b2:38:64:d0:60:85:00:20: 75:66:ab:45:87:17:3a:b9:d0:89:87:fc:a5:9d:c3:69:ab:82: 2f:35:0c:0d:12:d3:cc:da:ee:fb:57:2b:8f:e8:ae:30:b7:20: 51:75:72:2e:f7:ce:ee:86:1c:67:11:d7:67:32:0b:d3:b7:6f: b8:1e:44:04:37:ac:4a:d5:7b:ec:53:00:c5:37:75:74:42:12: 17:cd:39:6e:da:a7:94:17:07:4b:55:1d:dc:6e:e1:ff:ae:9b: 73:2f:72:75:ff:77:1a:73:c2:fc:39:c5:68:c6:01:bb:cb:c0: c4:65:00:04:e6:b3:7e:86:3b:5a:48:7b:d9:28:f7:44:77:c5: 52:c9:bd:ab:12:dc:90:64:a8:7a:2c:4d:c2:24:16:fb:7c:87: 43:c1:bd:49:3a:8d:b3:35:7b:43:15:d2:e5:23:10:85:4b:1e: fa:f3:c4:e0:96:79:d4:cd:f4:4e:61:13:7d:55:bd:23:52:61: 36:2a:f0:9a:8d:95:68:93:d4:35:a3:5d:e5:88:87:31:d5:33: fd:8e:ee:95:87:ae:24:fe:10:f9:81:38:2f:cf:8f:79:e3:49: be:04:1f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0w2+RR6L5x2YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MjY3OTRkZWQtOWEwZi00MjE2LTk5OWItNDFkNWFiYWY4MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs69Ar4M2yavM5e90gAYB/prVPdb9FsTWM47 pkIfAOmkHUlYHggUC1VIq0LoS5u/NCTnlugVW8IP/mnj8KhPnapfSNW7wGrFPOvI 0n1krkq2NiaSxao+gu7o81fjC/vXrZbzFBWSvt0e2YlS/PgNCQ/Vpi0ZxDGjrWv3 ZCs8VcU5MJuWYYDiuDjgylLflh+M/Sydp6tk9z5T7mzbXcjfjC9JsmZNKLhxfQoN EaltOPQ2/193I1MFMPTnKkNfZ/s1b+2zbG4JeIs9v/kwhA/+XIrk498JCEJv0Zc+ Op9sBg7Lftf5AHNm9Vpis/2uib9N3uCsitvzs1VpeAPbPbgVIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiiR2t05vNdGrBl0NLJEKJtrprZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvZWI3M2I0ZjMtMGQ4My0z NzI0LThmZmEtMTFkZGI1OWY4NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3PVyKVXHrXqA2eRnpBzpEm6rK+myS36DLUIJSyOGTQYIUAIHVmq0WH Fzq50ImH/KWdw2mrgi81DA0S08za7vtXK4/orjC3IFF1ci73zu6GHGcR12cyC9O3 b7geRAQ3rErVe+xTAMU3dXRCEhfNOW7ap5QXB0tVHdxu4f+um3MvcnX/dxpzwvw5 xWjGAbvLwMRlAATms36GO1pIe9ko90R3xVLJvasS3JBkqHosTcIkFvt8h0PBvUk6 jbM1e0MV0uUjEIVLHvrzxOCWedTN9E5hE31VvSNSYTYq8JqNlWiT1DWjXeWIhzHV M/2O7pWHriT+EPmBOC/Pj3njSb4EHwo= -----END CERTIFICATE-----Generated at Mon Oct 20 22:44:57 2025 by rpki-client