$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa File: ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa (raw, json) Hash identifier: 7clJyWdm6OVpREzQ7+1Tc0Kh32wdQjVelvrRVb5vOqE= Subject key identifier: 19:2D:C7:9F:28:D7:7D:05:8E:5E:84:7A:1A:6A:B6:86:F9:AB:3C:D2 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584B63673A88F4EE0B4031DF2B00 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 10384 IP address blocks: 152.87.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3a:88:f4:ee:0b:40:31:df:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=ce8b2060-bd36-48ac-b47b-f04f2346ec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:57:01:86:28:08:0c:34:33:07:ca:8f:f1: 2f:a6:e8:6a:37:30:8f:4a:ca:0d:c0:ad:6c:b2:db: f7:82:a0:16:96:08:af:c8:b4:53:1c:61:bf:7b:7a: 30:cf:08:98:b0:5b:4b:da:02:f2:a0:fd:38:a6:2f: 72:f5:6d:99:10:de:ed:d9:31:82:80:ea:cf:92:1b: ef:89:67:06:0d:2b:c1:e6:a8:22:da:16:8c:af:41: f4:69:64:4d:7f:23:43:79:37:5b:9e:20:44:eb:e6: 33:f8:01:54:e4:c6:43:26:e5:a5:63:a2:8f:65:1a: b2:4b:a7:26:fc:2d:9e:de:e8:3e:ee:02:94:9f:21: 6c:25:e4:98:b1:58:b1:70:b7:cb:4b:28:4d:c1:2c: 0f:89:b7:81:83:6b:d9:ef:00:f1:c6:7a:f8:e7:06: f5:e1:38:2d:80:e3:fa:38:62:a3:a3:91:6d:1a:fe: e0:dd:4d:03:09:1e:48:fa:fb:6f:53:34:da:31:33: 13:de:60:cf:37:e3:3e:05:79:4d:64:b0:bf:b1:53: 2d:de:c5:32:f9:b5:68:e9:45:7a:a8:99:b7:ad:df: da:fa:ea:b8:0e:8c:82:ac:de:9b:cf:18:f6:24:29: 68:13:8f:25:22:7c:fc:ba:86:68:be:c5:c6:e2:fa: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2D:C7:9F:28:D7:7D:05:8E:5E:84:7A:1A:6A:B6:86:F9:AB:3C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:34:3d:10:ca:0b:82:22:a3:3e:36:5f:ed:c5:b6:c1:1d:9b: 4f:81:60:01:f4:b6:85:d9:cf:da:02:a5:e5:9b:a4:87:40:48: 7c:1a:fb:b5:27:a5:42:ab:a3:a6:04:61:8f:66:82:da:43:10: 6b:7c:0d:50:14:ac:38:b9:c5:ba:08:08:7b:6f:ee:1e:4b:45: c3:15:15:5c:13:d0:d3:cb:f9:f3:fc:19:42:17:e8:5f:2b:03: 92:29:ce:62:ea:52:64:73:dd:57:60:b5:03:c6:02:2b:a0:fe: e7:87:36:f2:53:41:e4:c0:82:03:7e:30:6e:b5:1c:36:b0:db: 09:4c:74:2b:54:07:87:a6:95:6b:4c:2d:d5:6e:51:c3:36:23: ef:0d:88:c0:69:e6:31:a8:10:b3:4c:bc:c4:5e:fd:bf:18:7a: 05:f6:ab:b9:3f:8f:03:0b:b2:34:0d:ff:2b:c1:ca:9f:48:a1: 62:70:ff:09:9c:9e:c9:94:d7:10:b4:a4:34:d4:18:4a:71:cb: 3e:9b:6b:06:49:ed:11:cc:42:97:6c:b5:c9:99:6c:88:60:7c: 30:2e:cf:b9:a0:98:5a:dd:f3:b3:c2:af:7e:61:ba:1f:cb:3d: 83:07:e1:55:dd:19:8c:13:15:dc:97:40:e0:47:b8:a4:04:61: 73:ee:a9:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzqI9O4LQDHfKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk Y2U4YjIwNjAtYmQzNi00OGFjLWI0N2ItZjA0ZjIzNDZlYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAlXAYYoCAw0MwfKj/EvpuhqNzCPSsoNwK1s stv3gqAWlgivyLRTHGG/e3owzwiYsFtL2gLyoP04pi9y9W2ZEN7t2TGCgOrPkhvv iWcGDSvB5qgi2haMr0H0aWRNfyNDeTdbniBE6+Yz+AFU5MZDJuWlY6KPZRqyS6cm /C2e3ug+7gKUnyFsJeSYsVixcLfLSyhNwSwPibeBg2vZ7wDxxnr45wb14TgtgOP6 OGKjo5FtGv7g3U0DCR5I+vtvUzTaMTMT3mDPN+M+BXlNZLC/sVMt3sUy+bVo6UV6 qJm3rd/a+uq4DoyCrN6bzxj2JCloE48lInz8uoZovsXG4vrXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBktx58o130Fjl6Eehpqtob5qzzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvZWY2NTIxZjctMzU2My0z MWI4LWEyYTQtMTczYzZhOTM3OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE0PRDKC4Iioz42X+3FtsEdm0+BYAH0toXZz9oCpeWbpIdASHwa+7Un pUKro6YEYY9mgtpDEGt8DVAUrDi5xboICHtv7h5LRcMVFVwT0NPL+fP8GUIX6F8r A5IpzmLqUmRz3VdgtQPGAiug/ueHNvJTQeTAggN+MG61HDaw2wlMdCtUB4emlWtM LdVuUcM2I+8NiMBp5jGoELNMvMRe/b8YegX2q7k/jwMLsjQN/yvByp9IoWJw/wmc nsmU1xC0pDTUGEpxyz6bawZJ7RHMQpdstcmZbIhgfDAuz7mgmFrd87PCr35huh/L PYMH4VXdGYwTFdyXQOBHuKQEYXPuqZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 22:44:27 2025 by rpki-client