$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa File: ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa (raw, json) Hash identifier: m33ugEUMcYlJI3qCAf2HC2sGKiG+aijUWNu1AqrtZ3Q= Subject key identifier: F5:15:42:B0:8A:F1:61:EC:C9:EE:C7:76:51:71:6C:73:73:26:54:FF Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584B80B78301453D940EC1258A00 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 395516 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:83:01:45:3d:94:0e:c1:25:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=40893e1c-10d3-4b9d-b789-18a5f0efb703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:ab:44:34:ca:bd:6a:c1:7a:0d:1c:bf:75: 44:10:11:e4:6f:d4:22:1e:f7:a6:26:23:91:c1:47: 78:49:14:5c:be:a3:9f:f9:69:a3:6c:87:0a:e5:cb: 44:07:b0:91:c9:db:40:a6:6d:05:d5:84:9d:d0:75: ce:29:aa:23:58:2d:68:ae:45:51:c0:32:61:d1:9f: f4:e5:f4:52:b7:79:6c:c1:d6:db:09:f2:21:b1:a8: a7:35:86:41:89:d8:2d:e2:2e:cf:a4:85:ca:94:4b: 90:69:5e:71:8a:b0:be:71:c3:11:b6:49:db:f0:9d: 69:7a:91:99:5d:b6:fe:7d:cd:f8:18:a2:bf:fb:c7: 64:ee:cf:9d:63:89:24:d6:15:ff:13:5e:a5:45:3d: 41:7a:67:65:eb:bb:fc:f0:fb:2c:2c:e7:b0:74:3e: 52:3e:77:e5:c7:3f:91:56:19:1e:0e:c3:e4:34:36: 77:f2:f9:1b:33:9a:5f:4f:be:b8:c6:3c:65:05:76: 73:72:99:99:9f:dc:08:77:d0:db:99:e0:fc:6a:57: 22:49:ec:ac:6e:d5:48:1d:eb:17:92:30:08:94:cd: 9d:f2:e6:24:c6:bd:a7:a6:f6:47:99:d1:1d:13:71: 2c:d2:8b:82:40:f3:5c:1f:92:78:a0:1f:ef:87:9d: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:42:B0:8A:F1:61:EC:C9:EE:C7:76:51:71:6C:73:73:26:54:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c3:8e:64:8a:53:fd:4e:21:5b:0f:ca:20:b9:21:78:01:80: 6c:f8:73:1e:75:50:2d:f7:4c:4f:64:92:9b:22:c3:ca:45:dd: 8d:67:ea:47:e5:af:d3:47:cc:57:30:53:93:8e:14:74:6b:bc: 1c:2f:f3:28:e8:78:be:4b:ee:1d:ca:d5:1a:28:3e:fe:75:54: 3a:6d:bf:37:0a:37:ad:dc:75:3e:90:af:8e:f7:f0:af:2a:84: 7d:b5:9d:6a:11:4d:25:13:8d:4b:3b:f3:82:a5:12:93:0c:49: fd:a0:9a:c7:3d:4f:a8:44:d5:ea:a9:70:e8:48:68:eb:4c:43: 0c:f7:63:ae:c0:f8:90:2f:73:e1:80:bf:04:06:35:ad:69:2e: 73:fe:7e:c2:1f:08:11:3d:a4:04:6c:de:f7:a2:cd:12:20:c2: 90:74:b3:6f:7b:79:c9:cb:29:e5:46:51:fb:ce:93:51:4f:16: 15:fc:86:63:3f:b0:e1:3b:77:4c:b2:fe:92:bd:03:5c:6d:8f: d6:4b:d8:8a:fc:6c:e9:7d:15:05:b6:4e:31:d9:f2:bf:99:37: ed:90:ca:cf:25:fa:08:ad:96:1e:04:ed:1d:15:38:15:39:f7: 6d:60:35:12:8c:d6:c8:1c:4a:16:b0:d5:3e:b2:8c:ac:c4:28: 3c:c2:76:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4MBRT2UDsEligAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NDA4OTNlMWMtMTBkMy00YjlkLWI3ODktMThhNWYwZWZiNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ASrRDTKvWrBeg0cv3VEEBHkb9QiHvemJiOR wUd4SRRcvqOf+WmjbIcK5ctEB7CRydtApm0F1YSd0HXOKaojWC1orkVRwDJh0Z/0 5fRSt3lswdbbCfIhsainNYZBidgt4i7PpIXKlEuQaV5xirC+ccMRtknb8J1pepGZ Xbb+fc34GKK/+8dk7s+dY4kk1hX/E16lRT1Bemdl67v88PssLOewdD5SPnflxz+R VhkeDsPkNDZ38vkbM5pfT764xjxlBXZzcpmZn9wId9DbmeD8alciSeysbtVIHesX kjAIlM2d8uYkxr2npvZHmdEdE3Es0ouCQPNcH5J4oB/vh52Z2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUVQrCK8WHsye7HdlFxbHNzJlT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvYWQzNjhmMGEtNDQ4Ny0z ZWM1LWFjZTEtMTUxMmZkNmYzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjDjmSKU/1OIVsPyiC5IXgBgGz4cx51UC33TE9kkpsiw8pF3Y1n6kfl r9NHzFcwU5OOFHRrvBwv8yjoeL5L7h3K1RooPv51VDptvzcKN63cdT6Qr4738K8q hH21nWoRTSUTjUs784KlEpMMSf2gmsc9T6hE1eqpcOhIaOtMQwz3Y67A+JAvc+GA vwQGNa1pLnP+fsIfCBE9pARs3veizRIgwpB0s297ecnLKeVGUfvOk1FPFhX8hmM/ sOE7d0yy/pK9A1xtj9ZL2Ir8bOl9FQW2TjHZ8r+ZN+2Qys8l+gitlh4E7R0VOBU5 921gNRKM1sgcShaw1T6yjKzEKDzCdqo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:29 2025 by rpki-client