$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa File: 5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (raw, json) Hash identifier: euRJ7Rft+ZeNpjo9P2BlVR9euWq1vYrd+kVWcHkxW1g= Subject key identifier: D7:8C:CA:2B:A6:B8:4F:8A:1F:5B:8C:67:86:83:FA:4B:FD:29:61:36 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584B047BFFFE99AC8A6607133980 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 21766 IP address blocks: 152.97.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:ff:fe:99:ac:8a:66:07:13:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a722b458-bf43-4862-a4c3-698684608b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:89:95:5f:ee:18:76:30:9d:68:29:6a:08: 9b:6a:07:b7:21:56:43:b9:84:59:26:27:19:c6:7a: b6:c2:00:53:e3:93:58:2b:72:39:83:4e:4c:c4:45: e7:5b:5b:80:2b:4d:b0:e4:89:ad:29:45:34:97:7f: a9:d9:1e:43:74:f3:c6:58:7e:b1:fe:e4:00:62:e9: fc:40:3f:c3:c6:15:06:26:c8:59:19:c1:8a:2c:f3: 56:0f:5a:db:3e:da:08:26:d3:c5:a4:b6:e2:c5:70: 72:79:09:36:c2:5f:13:fa:62:f5:8f:3a:9a:91:3d: 73:d3:fe:36:18:9e:26:ec:ab:a9:67:80:45:15:6e: 2e:e5:42:25:af:0d:74:3a:77:4b:6f:fc:e3:5d:23: 56:74:4d:e5:f1:b4:3c:4d:be:d0:4b:6a:85:9d:cc: 9b:9e:58:d8:77:32:01:85:38:da:c6:ea:e9:b8:39: 17:09:32:45:74:e6:49:34:19:2c:10:e2:30:1e:ee: bc:e9:08:47:47:88:d7:25:68:54:8e:99:86:50:a5: 11:29:78:76:cd:34:3d:95:e5:8b:57:f9:a4:37:68: 27:de:80:66:c6:3a:d6:73:c9:11:1e:8d:5c:94:65: 90:dd:c7:b8:6c:bf:72:59:9d:f4:1c:82:55:39:5a: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8C:CA:2B:A6:B8:4F:8A:1F:5B:8C:67:86:83:FA:4B:FD:29:61:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:00:a3:9d:c8:31:34:74:3a:cc:a0:b2:9a:03:38:f1:86:69: 99:c7:17:04:d0:24:f2:cc:c0:fb:1b:0a:74:b6:f6:e8:51:a3: 18:b7:56:3f:08:ee:cd:5d:b1:27:ae:46:2f:f6:6c:a9:6d:13: d7:03:dd:0f:49:dc:1a:6e:6d:44:dc:be:3c:7b:06:20:ce:70: 88:3f:b7:f6:08:6f:be:99:f7:b5:37:05:c7:2e:78:11:72:27: 49:d3:45:31:5a:36:36:94:b0:e9:6f:d8:65:e4:d5:11:89:3b: 54:08:19:2a:94:d7:03:f1:1e:79:8c:b1:a0:f9:64:27:8b:21: 41:61:05:02:43:78:9a:15:ae:bb:8f:41:78:b3:18:a8:0b:c7: 9d:db:5a:22:e5:64:90:0d:7d:03:9c:0b:7c:9a:88:7d:49:42: 05:54:88:91:15:36:0a:5d:f3:bd:9d:f4:3a:2e:97:88:89:86: 3c:b6:86:07:58:22:0e:56:a3:c8:59:08:2c:7e:21:bd:95:c8: e0:0c:9c:5d:80:7c:19:e8:ab:fa:60:3c:f2:c8:14:24:d6:d7: 79:6f:95:f5:1b:62:b9:ea:f8:6a:30:87:c3:70:38:d2:a1:bc: 96:12:4d:60:e6:57:5e:e8:c9:c3:e9:fe:38:76:ce:39:14:b7: fb:01:58:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe//+mayKZgcTOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTcyMmI0NTgtYmY0My00ODYyLWE0YzMtNjk4Njg0NjA4Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30eJlV/uGHYwnWgpagibage3IVZDuYRZJicZ xnq2wgBT45NYK3I5g05MxEXnW1uAK02w5ImtKUU0l3+p2R5DdPPGWH6x/uQAYun8 QD/DxhUGJshZGcGKLPNWD1rbPtoIJtPFpLbixXByeQk2wl8T+mL1jzqakT1z0/42 GJ4m7KupZ4BFFW4u5UIlrw10OndLb/zjXSNWdE3l8bQ8Tb7QS2qFncybnljYdzIB hTjaxurpuDkXCTJFdOZJNBksEOIwHu686QhHR4jXJWhUjpmGUKURKXh2zTQ9leWL V/mkN2gn3oBmxjrWc8kRHo1clGWQ3ce4bL9yWZ30HIJVOVrkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeMyiumuE+KH1uMZ4aD+kv9KWE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWFjZjU3YTktNmQ1ZC0z MmQ5LThlOWItOWEyMmNjZTFmZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmGFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYAo53IMTR0OsygspoDOPGGaZnHFwTQJPLMwPsbCnS29uhRoxi3Vj8I 7s1dsSeuRi/2bKltE9cD3Q9J3BpubUTcvjx7BiDOcIg/t/YIb76Z97U3BccueBFy J0nTRTFaNjaUsOlv2GXk1RGJO1QIGSqU1wPxHnmMsaD5ZCeLIUFhBQJDeJoVrruP QXizGKgLx53bWiLlZJANfQOcC3yaiH1JQgVUiJEVNgpd872d9Doul4iJhjy2hgdY Ig5Wo8hZCCx+Ib2VyOAMnF2AfBnoq/pgPPLIFCTW13lvlfUbYrnq+Gowh8NwONKh vJYSTWDmV17oycPp/jh2zjkUt/sBWPs= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:13 2025 by rpki-client