$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa File: 0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa (raw, json) Hash identifier: uMOhUa2Sixj+mjpbJtDP7bQ3b+kpvXgVKxYkmZBvQTc= Subject key identifier: D9:95:96:2C:08:65:FF:C6:4C:3F:EB:3B:12:87:08:BB:7A:20:07:03 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A9FFB8FB73042AC0580721680 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33442 IP address blocks: 157.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8f:b7:30:42:ac:05:80:72:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=82d1ed18-2fa1-4fc3-a488-78b414e784d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e7:ec:0b:d5:82:0a:1c:0c:c5:b3:26:3f:b5: fd:61:63:0e:97:74:31:cc:63:81:3e:6e:29:5b:00: 80:8a:9f:83:d3:5d:2f:de:93:2e:7f:2a:a9:ac:cc: df:f8:69:ff:27:14:e2:19:4e:e5:52:d2:3b:86:b0: 8b:6d:8c:34:ae:49:70:a7:88:fc:b0:49:7d:c0:55: aa:b7:e6:13:59:8f:2b:a2:5c:f9:e5:02:15:bb:f4: dd:2d:67:74:bc:80:5f:50:5c:38:01:ce:83:89:80: 54:aa:59:66:0f:b1:85:89:6a:78:85:01:71:49:83: ab:7c:65:46:47:83:20:e0:e6:d4:19:4c:aa:3d:db: b4:0f:92:f5:fb:b7:40:71:f2:79:4f:0a:0c:f6:43: e8:9f:bb:8d:48:e3:1d:61:68:20:f2:b5:e7:d7:95: 1a:35:d1:12:5b:71:ba:27:d9:35:32:28:98:e4:74: a5:4c:4e:66:f1:42:e6:cb:0a:ac:3c:bf:3d:22:c4: 21:e8:3f:30:4c:6c:4a:00:3b:67:78:73:60:3c:f7: 03:4d:1f:2d:9d:48:f0:3e:98:ae:4c:80:0a:69:b0: 3c:4c:a3:63:57:74:71:00:03:26:03:e7:92:c2:8a: 3d:2d:d7:ed:ec:23:c4:9d:2a:de:67:95:73:b5:04: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:96:2C:08:65:FF:C6:4C:3F:EB:3B:12:87:08:BB:7A:20:07:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:88:04:0b:f9:49:16:9c:c8:ed:b6:a3:82:a7:f9:c0:60:e1: 58:ee:38:cf:8a:4a:87:0a:fb:f9:67:22:8e:e9:26:45:79:25: 46:14:e1:38:d2:5a:84:d1:36:c8:50:0a:29:6a:12:19:85:8b: d1:e1:61:bb:b9:47:ba:83:9e:80:89:3a:36:7d:18:b9:3e:7c: d1:43:90:b6:c8:03:53:80:80:3b:d8:73:bb:3d:83:a4:24:c3: f5:df:5c:24:23:67:58:89:40:e3:af:ac:38:a4:6e:8d:80:3f: e3:c6:db:67:15:06:eb:83:d9:ce:c0:37:fd:54:e6:a4:4f:9d: 5e:ca:df:d3:b9:5b:51:30:8e:b1:20:62:47:03:3d:6a:24:6e: 5a:8f:f1:d9:ae:92:4d:54:c0:2e:39:a5:7c:77:e8:94:81:9f: 0b:2b:b3:8d:74:3c:82:07:65:15:d6:92:fb:ac:2c:66:01:cc: 54:8d:b1:0a:75:db:be:07:a8:f7:02:09:42:f9:5c:6e:61:cb: 38:f2:80:d5:28:e6:b6:36:1e:db:16:58:6d:46:55:7a:20:e3: d8:39:fe:3d:cd:b8:f1:6a:77:9b:3b:f1:53:f6:c9:9d:fb:72: ca:32:a2:6c:9c:fc:7c:81:5e:d7:a2:8b:7e:18:6b:b9:79:a8: f1:ca:4b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4+3MEKsBYByFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ODJkMWVkMTgtMmZhMS00ZmMzLWE0ODgtNzhiNDE0ZTc4NGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ufsC9WCChwMxbMmP7X9YWMOl3QxzGOBPm4p WwCAip+D010v3pMufyqprMzf+Gn/JxTiGU7lUtI7hrCLbYw0rklwp4j8sEl9wFWq t+YTWY8rolz55QIVu/TdLWd0vIBfUFw4Ac6DiYBUqllmD7GFiWp4hQFxSYOrfGVG R4Mg4ObUGUyqPdu0D5L1+7dAcfJ5TwoM9kPon7uNSOMdYWgg8rXn15UaNdESW3G6 J9k1MiiY5HSlTE5m8ULmywqsPL89IsQh6D8wTGxKADtneHNgPPcDTR8tnUjwPpiu TIAKabA8TKNjV3RxAAMmA+eSwoo9Ldft7CPEnSreZ5VztQSUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmVliwIZf/GTD/rOxKHCLt6IAcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGI1OWViMmYtNzQyZi0z NzkyLWE4NjUtYTBiZTQwZjFlM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnevzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSIBAv5SRacyO22o4Kn+cBg4VjuOM+KSocK+/lnIo7pJkV5JUYU4TjS WoTRNshQCilqEhmFi9HhYbu5R7qDnoCJOjZ9GLk+fNFDkLbIA1OAgDvYc7s9g6Qk w/XfXCQjZ1iJQOOvrDikbo2AP+PG22cVBuuD2c7AN/1U5qRPnV7K39O5W1EwjrEg YkcDPWokblqP8dmukk1UwC45pXx36JSBnwsrs410PIIHZRXWkvusLGYBzFSNsQp1 274HqPcCCUL5XG5hyzjygNUo5rY2HtsWWG1GVXog49g5/j3NuPFqd5s78VP2yZ37 csoyomyc/HyBXteii34Ya7l5qPHKS2A= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:32 2025 by rpki-client