$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa File: a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa (raw, json) Hash identifier: UkF19Fd8yBzD3ae/VvgXASnLyd9udp6LqUrjXRMmxXE= Subject key identifier: 9D:93:EB:95:52:47:3D:53:B4:76:A0:BF:C2:24:61:0D:5A:5B:6B:EB Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584AC7111D6A22168D68A8C61600 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 32710 IP address blocks: 164.153.166.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1d:6a:22:16:8d:68:a8:c6:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=2723e232-eb74-4bad-b1ef-2f6745674598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:3d:df:ca:77:5a:45:ef:6c:7a:e8:3b:be: 4c:fe:2e:a4:f1:19:5c:5d:16:81:89:ed:cd:b9:b1: 68:85:82:93:d1:e2:59:17:27:24:60:7c:bd:1b:98: 14:dd:ac:92:38:03:0a:41:ab:ea:e4:00:be:e7:e2: 99:53:48:12:eb:68:79:ee:ab:9e:06:80:8c:08:ac: 02:53:42:78:28:3e:b8:1b:2b:74:e2:35:ee:61:8a: 28:8f:55:9f:0a:ca:a3:08:66:26:50:9c:68:cb:37: f1:6f:1a:c9:e2:0b:51:37:2d:3a:13:d8:20:a4:e4: a3:83:83:11:cb:12:40:7d:6c:2b:4f:7f:a7:11:5e: 20:1c:bf:ef:28:8b:b4:a8:3a:96:37:f9:72:ed:93: 80:6e:df:e9:7d:be:8c:b9:33:ea:dc:98:70:83:ed: 89:2c:cc:14:7d:6a:0c:87:4c:9a:7c:64:a0:cd:38: cb:ca:8e:24:9c:0c:94:d2:4d:c0:cc:ba:74:68:0f: b9:eb:95:7a:f2:dc:58:47:6a:14:72:22:61:da:60: e3:7a:ab:45:12:2a:74:8c:b9:e4:3a:7b:6f:b1:b8: e9:05:1e:75:53:e3:3e:da:5d:65:cc:28:df:b3:7a: af:4d:b4:f5:2d:df:fa:08:e5:12:9a:68:f1:9e:97: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:93:EB:95:52:47:3D:53:B4:76:A0:BF:C2:24:61:0D:5A:5B:6B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:e9:66:df:5f:59:71:2f:84:df:1c:e2:bb:28:7f:cd:cb:6f: 70:83:15:c4:9e:34:6b:62:c1:25:dc:65:e9:03:ea:60:e1:72: 45:d7:b3:e1:89:a1:ce:c6:e0:2f:11:11:ce:eb:9e:d1:db:01: 5d:a8:dc:39:6e:68:ac:60:b1:ed:d8:55:47:8d:4c:5f:ed:19: 7d:b6:47:66:64:93:6c:9a:c7:f4:ef:f9:df:f2:eb:20:31:fa: 8c:3c:ea:04:7d:fd:94:89:ea:d5:6e:8d:5d:00:0b:c7:6a:09: ba:58:bb:32:e8:41:2d:10:44:b5:e9:f9:63:96:71:0d:93:2a: 17:c1:d3:97:06:50:f7:17:0f:57:40:88:7b:2b:ba:70:06:c0: 68:88:31:2c:40:0a:d5:25:35:15:b1:73:f3:4d:c8:62:f4:e8: 2b:06:99:b4:27:8d:3e:6d:c6:e5:4e:25:15:ff:c1:29:c8:48: 37:12:6c:04:68:fa:a7:2b:aa:fa:ef:1b:1a:40:bd:dd:06:36: 4d:a5:11:9d:e4:8c:63:81:a2:78:8d:10:24:a7:6e:2e:3f:0e: 9a:32:66:cf:42:1d:a6:56:55:fb:18:fd:c4:e5:42:c0:2d:73: 5f:2c:bc:85:e1:35:f9:3d:d9:8a:b8:75:31:2f:16:79:1d:21: aa:dc:57:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHER1qIhaNaKjGFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjcyM2UyMzItZWI3NC00YmFkLWIxZWYtMmY2NzQ1Njc0NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZQ938p3WkXvbHroO75M/i6k8RlcXRaBie3N ubFohYKT0eJZFyckYHy9G5gU3aySOAMKQavq5AC+5+KZU0gS62h57queBoCMCKwC U0J4KD64Gyt04jXuYYooj1WfCsqjCGYmUJxoyzfxbxrJ4gtRNy06E9ggpOSjg4MR yxJAfWwrT3+nEV4gHL/vKIu0qDqWN/ly7ZOAbt/pfb6MuTPq3Jhwg+2JLMwUfWoM h0yafGSgzTjLyo4knAyU0k3AzLp0aA+565V68txYR2oUciJh2mDjeqtFEip0jLnk OntvsbjpBR51U+M+2l1lzCjfs3qvTbT1Ld/6COUSmmjxnpfBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2T65VSRz1TtHagv8IkYQ1aW2vrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYTIwOTc1MDAtZDhjMC0z MDk1LWFhM2EtZjNlMWJiNTZmOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTpZt9fWXEvhN8c4rsof83Lb3CDFcSeNGtiwSXcZekD6mDhckXXs+GJ oc7G4C8REc7rntHbAV2o3DluaKxgse3YVUeNTF/tGX22R2Zkk2yax/Tv+d/y6yAx +ow86gR9/ZSJ6tVujV0AC8dqCbpYuzLoQS0QRLXp+WOWcQ2TKhfB05cGUPcXD1dA iHsrunAGwGiIMSxACtUlNRWxc/NNyGL06CsGmbQnjT5txuVOJRX/wSnISDcSbARo +qcrqvrvGxpAvd0GNk2lEZ3kjGOBoniNECSnbi4/DpoyZs9CHaZWVfsY/cTlQsAt c18svIXhNfk92Yq4dTEvFnkdIarcV/o= -----END CERTIFICATE-----Generated at Sat Aug 23 13:19:07 2025 by rpki-client