$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa File: 36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa (raw, json) Hash identifier: VE5Ejp6Mf9KpLRy2u5dByI2stVE0SZukG277vdLpgq4= Subject key identifier: 0D:D1:35:3B:F0:52:1B:35:B3:5A:DC:C6:50:A7:F7:BF:CA:AB:8E:2B Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584AE2FBC35E3337E9D0AC90EE00 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 812 IP address blocks: 164.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c3:5e:33:37:e9:d0:ac:90:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=43fb5aeb-b7d0-4c83-8101-288655151555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:23:b2:cf:47:b3:5e:4c:c3:2a:e5:1b:cf: e8:3a:20:21:7b:b4:94:f9:fc:db:db:85:a2:e6:84: 9f:c8:54:39:13:36:79:2b:50:75:c2:ee:a0:35:19: 7e:35:6c:f9:09:d8:33:6f:ab:36:53:78:31:b7:01: b6:29:dd:c2:80:d7:44:32:e5:a3:56:55:3e:7a:14: 33:c5:d1:53:77:77:81:56:b8:2f:b8:43:54:aa:6b: 0f:11:70:bf:64:06:f1:7c:a4:d7:53:3c:ae:92:13: bd:9f:7a:8e:ed:a3:db:9b:ca:15:64:4b:6f:fb:23: ae:09:93:56:eb:4e:b0:e1:cf:15:13:a8:53:e5:16: 11:b3:60:bc:ee:43:00:fc:a4:81:d5:f1:00:5a:3c: 5c:82:c9:4e:6b:0b:7e:88:78:9c:94:6e:3a:ce:49: 46:36:ec:da:70:85:53:cd:f6:ab:f8:d7:07:8b:b3: 0f:b2:e7:4c:2f:19:4d:f4:db:10:a2:76:8c:07:9d: d0:72:e1:81:5b:21:43:32:b9:0e:ec:99:7e:0d:e2: b6:60:4e:5e:c0:90:5e:04:d9:d0:46:5b:6d:b0:ac: bb:2f:d8:01:a8:98:9b:96:81:00:42:26:51:7e:aa: f4:01:95:f3:e2:77:a7:7d:fb:18:62:6d:bc:36:92: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D1:35:3B:F0:52:1B:35:B3:5A:DC:C6:50:A7:F7:BF:CA:AB:8E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fc:9a:ae:6f:9f:0e:14:1f:7e:df:2a:4c:f9:ae:25:ad:d0: 61:e2:4d:8b:be:06:22:e3:1b:32:fa:e6:d0:2c:82:d1:0f:54: 3d:87:d2:a6:14:17:08:0c:57:8f:5b:b0:91:1f:40:17:52:c2: d0:e5:2c:98:aa:82:cd:9e:f4:c3:05:e9:8a:ef:83:0c:3d:61: 6a:e2:3d:66:c8:61:40:47:99:37:09:a6:d1:65:4e:a0:4c:04: 44:57:87:73:5a:9a:82:98:ed:ee:5c:1c:7f:d7:13:fa:04:b6: 62:22:4e:39:d1:97:8e:1a:51:41:5f:1a:2c:3b:63:ef:59:32: 8b:5b:64:e7:86:ad:a8:8b:c0:7f:72:77:b0:52:c4:cf:3e:0c: 5d:ad:a7:71:93:b4:e2:7c:d5:46:fd:4e:1b:ac:60:59:16:ec: e3:fc:89:c6:17:7b:7a:94:d7:3f:fc:04:cb:a4:63:ec:00:8e: 53:8b:7a:2b:79:96:b0:e0:38:c3:99:7f:06:85:f9:33:fa:7a: af:19:1f:76:fa:6a:f6:c1:37:9b:88:0f:f9:b4:0d:8c:ec:af: e9:63:b2:7e:1e:84:38:9a:f3:61:2a:cf:bb:18:df:7d:56:9c: 29:05:96:f8:fa:a1:53:f8:e9:8c:da:26:c7:5f:a7:83:cc:12: a7:e3:c7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8NeMzfp0KyQ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk NDNmYjVhZWItYjdkMC00YzgzLTgxMDEtMjg4NjU1MTUxNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84jss9Hs15MwyrlG8/oOiAhe7SU+fzb24Wi 5oSfyFQ5EzZ5K1B1wu6gNRl+NWz5Cdgzb6s2U3gxtwG2Kd3CgNdEMuWjVlU+ehQz xdFTd3eBVrgvuENUqmsPEXC/ZAbxfKTXUzyukhO9n3qO7aPbm8oVZEtv+yOuCZNW 606w4c8VE6hT5RYRs2C87kMA/KSB1fEAWjxcgslOawt+iHiclG46zklGNuzacIVT zfar+NcHi7MPsudMLxlN9NsQonaMB53QcuGBWyFDMrkO7Jl+DeK2YE5ewJBeBNnQ RlttsKy7L9gBqJibloEAQiZRfqr0AZXz4nenffsYYm28NpLJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3RNTvwUhs1s1rcxlCn97/Kq44rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvMzY0NjhlMjgtY2E0Mi0z OTE2LTg4OTAtZDJmYTNhYzJlNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT8mq5vnw4UH37fKkz5riWt0GHiTYu+BiLjGzL65tAsgtEPVD2H0qYU FwgMV49bsJEfQBdSwtDlLJiqgs2e9MMF6Yrvgww9YWriPWbIYUBHmTcJptFlTqBM BERXh3NamoKY7e5cHH/XE/oEtmIiTjnRl44aUUFfGiw7Y+9ZMotbZOeGraiLwH9y d7BSxM8+DF2tp3GTtOJ81Ub9ThusYFkW7OP8icYXe3qU1z/8BMukY+wAjlOLeit5 lrDgOMOZfwaF+TP6eq8ZH3b6avbBN5uID/m0DYzsr+ljsn4ehDia82Eqz7sY331W nCkFlvj6oVP46YzaJsdfp4PMEqfjxyg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:16 2025 by rpki-client