$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa File: 46888245-1cca-332a-aae4-6badf5545311.roa (raw, json) Hash identifier: XtHxNBBt80K/H7EYb8V9Hsn6MYPP8Lr/AQ/7oD9Vh6M= Subject key identifier: 07:47:B6:57:09:4F:E4:87:35:75:1C:7C:FC:DE:FF:CF:8B:0C:B9:4B Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584B80B783258FF3C68DB30CACE0 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 8075 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:83:25:8f:f3:c6:8d:b3:0c:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=f7009792-f460-4fb0-9c24-2dc83f92a307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:61:f8:9b:fb:dc:a8:78:02:48:5a:86:14: a6:90:31:e0:eb:fb:da:7e:aa:d5:62:36:73:c9:5f: 25:ba:1f:60:9f:6e:d0:3f:fe:03:ee:35:10:c8:a9: 85:fd:75:0e:56:ca:0d:a2:07:f5:77:ab:16:f1:09: d5:46:15:b8:84:f0:60:01:54:c4:89:d5:6e:85:0f: 00:f9:09:0e:23:45:8e:40:de:c1:9a:3b:c4:b1:1a: 16:18:54:3b:ff:57:92:20:12:9b:28:0f:ee:30:82: 94:a9:69:86:86:77:75:2b:18:66:94:89:32:76:d8: 79:08:4f:0f:e4:82:80:2c:90:d6:9d:05:cf:f6:0c: de:39:be:af:5c:d8:d1:fa:9e:0c:0e:f1:02:20:f2: 05:e7:96:5e:6e:08:71:5e:47:33:e9:dc:cb:88:e9: ba:e2:a0:91:0c:15:27:49:bc:fe:b8:ff:e7:93:ef: 7d:4c:5c:f9:9c:5c:41:92:b9:b0:aa:fe:79:bd:f7: 11:9b:5d:9e:8c:4e:41:01:5d:d8:d3:8d:18:28:f0: eb:ca:58:5e:26:8e:40:d3:5d:29:bc:fb:03:d4:74: 06:32:cb:8d:49:0a:e1:31:78:f2:c6:ac:61:29:b4: 74:3d:b9:6f:8b:3c:5b:d4:83:17:4e:dc:bc:3a:db: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:B6:57:09:4F:E4:87:35:75:1C:7C:FC:DE:FF:CF:8B:0C:B9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:da:a5:f2:a5:88:c6:4d:a9:a9:95:88:98:07:99:b2:e8:1a: a4:9b:aa:67:66:2c:80:ed:08:24:94:a4:46:90:1f:1e:85:df: ca:ed:f5:a5:5e:c7:68:28:ef:ef:10:a1:c4:8b:1c:ce:9a:ef: 8d:16:da:fe:2b:7c:b3:b2:ad:4b:d5:81:4f:05:72:66:87:63: 68:e3:98:5a:06:a5:e6:35:cb:8e:6a:7b:74:88:19:d0:5a:86: 08:75:7d:55:37:83:02:a1:d2:b7:c0:d2:c9:13:8a:e7:4b:29: 57:48:b3:32:86:cb:2c:b1:77:c9:42:dc:fd:ca:81:cd:e6:95: c3:e2:e4:1d:d2:4f:c8:44:cb:30:70:b3:b4:a7:33:8a:5b:40: 2b:1d:21:ad:32:cd:e3:5f:be:a0:49:b8:44:6e:fc:77:1b:32: 0b:01:de:7d:9d:e7:55:09:fb:4e:63:12:71:0c:48:4b:dd:42: c7:55:4a:f6:73:0d:e7:2f:d6:ea:23:de:de:74:99:b4:47:8f: 76:7b:27:c8:b7:a2:c7:0a:f0:8a:5b:a6:a0:9a:9f:b4:1a:42: 69:9b:f3:40:ce:b9:63:42:93:5c:8a:f4:77:7b:34:7f:f6:95: 96:c6:96:ee:47:1d:98:ef:a8:44:e6:74:04:57:ef:ce:3c:bf: 07:e6:4a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4Mlj/PGjbMMrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZjcwMDk3OTItZjQ2MC00ZmIwLTljMjQtMmRjODNmOTJhMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnZh+Jv73Kh4AkhahhSmkDHg6/vafqrVYjZz yV8luh9gn27QP/4D7jUQyKmF/XUOVsoNogf1d6sW8QnVRhW4hPBgAVTEidVuhQ8A +QkOI0WOQN7BmjvEsRoWGFQ7/1eSIBKbKA/uMIKUqWmGhnd1KxhmlIkydth5CE8P 5IKALJDWnQXP9gzeOb6vXNjR+p4MDvECIPIF55ZebghxXkcz6dzLiOm64qCRDBUn Sbz+uP/nk+99TFz5nFxBkrmwqv55vfcRm12ejE5BAV3Y040YKPDrylheJo5A010p vPsD1HQGMsuNSQrhMXjyxqxhKbR0Pblvizxb1IMXTty8Ots7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdHtlcJT+SHNXUcfPze/8+LDLlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvNDY4ODgyNDUtMWNjYS0z MzJhLWFhZTQtNmJhZGY1NTQ1MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjapfKliMZNqamViJgHmbLoGqSbqmdmLIDtCCSUpEaQHx6F38rt9aVe x2go7+8QocSLHM6a740W2v4rfLOyrUvVgU8FcmaHY2jjmFoGpeY1y45qe3SIGdBa hgh1fVU3gwKh0rfA0skTiudLKVdIszKGyyyxd8lC3P3Kgc3mlcPi5B3ST8hEyzBw s7SnM4pbQCsdIa0yzeNfvqBJuERu/HcbMgsB3n2d51UJ+05jEnEMSEvdQsdVSvZz Decv1uoj3t50mbRHj3Z7J8i3oscK8IpbpqCan7QaQmmb80DOuWNCk1yK9Hd7NH/2 lZbGlu5HHZjvqETmdARX7848vwfmSvE= -----END CERTIFICATE-----Generated at Sun Oct 19 20:44:41 2025 by rpki-client