$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa File: 2aa91757-41a3-3878-bde1-4f11a5d770af.roa (raw, json) Hash identifier: 4IbpzGQ/2At8aunbgSPf4IMxAN5AmWUzaY6hWQoWGkI= Subject key identifier: 78:FF:CB:B9:66:D2:84:FE:13:8D:09:3A:4F:56:07:CB:72:9C:D3:2C Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A8C70CA18A6B2A79F615C9180 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 33442 IP address blocks: 157.235.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:ca:18:a6:b2:a7:9f:61:5c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=bcd56ab3-eb9c-48c3-b8ac-2f91cf307d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:c2:e1:41:12:1d:e5:85:fe:56:ef:e3:e4: d6:61:1f:c1:a7:7e:c3:8c:6c:df:ea:81:f7:25:1f: e2:44:9d:3d:a4:a4:de:5c:e5:2d:27:20:dc:c2:71: 44:cd:64:4c:08:14:12:0d:dc:08:4d:f3:b7:bc:d8: 12:e1:c4:37:e0:f5:24:da:9b:46:60:19:a9:45:c3: 18:3e:56:1e:11:23:09:7b:5c:18:a1:4c:a0:d5:de: bb:ed:84:43:b5:51:ba:da:48:2e:fc:43:cc:78:b8: 89:2b:97:ee:fc:25:da:6c:69:d2:22:b0:e2:df:81: a1:ee:67:23:65:b4:db:89:5b:8d:29:aa:79:24:9d: 0e:46:fa:92:09:41:f8:e6:76:b2:48:33:93:5f:59: 7a:8f:ba:4f:76:cf:41:a5:eb:2f:d0:95:b5:ad:d3: ff:bd:01:f7:58:bb:9f:22:95:68:f5:f9:dc:65:4e: c4:5d:b2:72:24:c3:47:47:4f:11:77:af:0b:f4:ac: c6:75:a8:fa:5f:7f:50:05:59:d1:0a:14:fa:95:0e: af:f2:a1:a0:9e:6b:67:68:de:d1:49:82:9f:62:56: 7c:c5:3b:ff:12:09:e9:00:a2:f1:6c:47:65:71:1a: 36:45:77:60:7a:68:24:b9:24:23:38:4f:c7:52:68: 51:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:CB:B9:66:D2:84:FE:13:8D:09:3A:4F:56:07:CB:72:9C:D3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:29:e8:79:7d:8b:f2:5c:01:ca:b0:9b:5c:bc:ca:4b:96:d8: 3e:dd:f7:fc:24:b2:49:f8:91:2c:5d:4f:f6:39:2c:13:60:f7: 7c:d3:8f:19:25:77:de:11:bb:02:4c:12:ce:0e:6a:ca:f2:d1: 55:d5:3a:7b:34:24:ed:b3:c1:72:c1:85:0a:bb:95:2d:e7:84: cb:ee:04:d0:c4:94:54:7a:8d:38:b0:4c:7c:60:db:91:8d:d4: 15:4d:fb:da:3d:69:02:6d:d9:73:bc:dd:2b:31:27:01:5d:04: d1:14:8b:66:b5:89:52:ca:de:10:20:ae:cd:a4:98:96:12:56: ca:eb:27:c3:77:87:e8:2a:f1:84:ed:b3:86:ed:b8:dd:2e:35: 85:59:5b:ea:f0:84:9a:42:95:8d:14:d2:71:3a:f2:8d:23:c7: 40:12:c0:92:b1:1f:d9:68:d6:19:1a:fd:7f:5b:fc:63:1b:3c: f6:5b:e9:69:61:6f:e5:b8:63:74:be:2b:7d:07:6c:aa:99:ce: 52:e1:0b:e7:b7:6a:f3:74:9c:49:2c:c9:0f:74:77:af:01:01: 08:25:c7:0d:23:95:12:5d:25:d7:f0:9f:ae:69:f0:0c:ca:f5: 83:01:1b:df:26:88:61:c0:b2:68:33:11:21:cf:d3:d9:f1:48: 02:18:3f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMoYprKnn2FckYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YmNkNTZhYjMtZWI5Yy00OGMzLWI4YWMtMmY5MWNmMzA3ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEzC4UESHeWF/lbv4+TWYR/Bp37DjGzf6oH3 JR/iRJ09pKTeXOUtJyDcwnFEzWRMCBQSDdwITfO3vNgS4cQ34PUk2ptGYBmpRcMY PlYeESMJe1wYoUyg1d677YRDtVG62kgu/EPMeLiJK5fu/CXabGnSIrDi34Gh7mcj ZbTbiVuNKap5JJ0ORvqSCUH45naySDOTX1l6j7pPds9Bpesv0JW1rdP/vQH3WLuf IpVo9fncZU7EXbJyJMNHR08Rd68L9KzGdaj6X39QBVnRChT6lQ6v8qGgnmtnaN7R SYKfYlZ8xTv/EgnpAKLxbEdlcRo2RXdgemgkuSQjOE/HUmhRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj/y7lm0oT+E40JOk9WB8tynNMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMmFhOTE3NTctNDFhMy0z ODc4LWJkZTEtNGYxMWE1ZDc3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnesnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcp6Hl9i/JcAcqwm1y8ykuW2D7d9/wkskn4kSxdT/Y5LBNg93zTjxkl d94RuwJMEs4Oasry0VXVOns0JO2zwXLBhQq7lS3nhMvuBNDElFR6jTiwTHxg25GN 1BVN+9o9aQJt2XO83SsxJwFdBNEUi2a1iVLK3hAgrs2kmJYSVsrrJ8N3h+gq8YTt s4btuN0uNYVZW+rwhJpClY0U0nE68o0jx0ASwJKxH9lo1hka/X9b/GMbPPZb6Wlh b+W4Y3S+K30HbKqZzlLhC+e3avN0nEksyQ90d68BAQglxw0jlRJdJdfwn65p8AzK 9YMBG98miGHAsmgzESHP09nxSAIYP6o= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:52 2025 by rpki-client