$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa File: cc509968-63d9-33f6-b60c-2664e0511e7f.roa (raw, json) Hash identifier: /sN+uznXg1e43eXvktUmz9KKb4+bAyD29eLk24nqK7E= Subject key identifier: 66:FD:F7:17:DD:76:2B:54:9B:14:B5:AD:72:1F:D8:60:83:67:BD:E9 Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584AA42B8A3BC496F99B1F167500 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 144.81.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8a:3b:c4:96:f9:9b:1f:16:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=db641360-404c-4047-8b66-15d4a3702c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:45:d8:e5:f5:06:bf:0c:8d:dc:c1:6d:04: ca:61:e6:bc:6d:91:09:e8:9b:fa:d1:3e:8d:78:15: 1c:ec:cd:44:aa:46:22:d7:9a:ee:63:88:a6:19:fc: 19:a4:2b:13:b3:93:2d:70:84:92:25:db:88:81:63: 0b:86:21:61:7a:a9:96:5b:44:11:d9:6b:2a:0d:51: ef:9a:1b:b0:6b:56:34:84:b0:36:0d:a9:8b:1d:9b: 88:3a:30:0e:e2:ed:77:d9:61:6b:d9:d5:ce:9c:5b: 79:22:70:ec:48:de:88:ef:e2:88:9f:15:1c:e4:96: b2:30:bb:2d:09:35:ef:7a:f2:e2:5d:30:71:90:ab: 7a:62:88:bd:25:a0:4b:4b:4a:ae:71:f2:b0:d2:f3: 77:ac:23:68:21:b2:9e:a9:07:99:44:97:0c:24:cc: 2e:27:4a:52:39:d9:d2:68:38:65:0d:fe:21:bc:e3: e5:b7:98:7d:75:13:69:76:5f:b6:ca:bf:65:e4:43: d8:b0:c9:88:ae:26:61:23:4e:66:ff:1d:cf:a8:ed: 12:7c:c9:45:6c:b6:ae:9a:66:f3:b7:7a:5d:3c:bf: c6:e2:e3:64:b7:1f:90:0c:31:94:3b:90:b5:97:d4: ef:60:71:13:38:f0:52:94:9d:91:6d:4b:e6:f5:40: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FD:F7:17:DD:76:2B:54:9B:14:B5:AD:72:1F:D8:60:83:67:BD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c0:0e:48:f0:fa:08:b2:44:fe:bb:f6:ab:05:dd:c5:ea:80: a6:37:6e:c1:03:bb:85:17:de:5c:7a:cc:ad:cd:6d:41:ab:54: 4e:35:b3:79:ab:ce:2a:fc:9b:b3:cc:ba:8f:0b:02:7b:d4:0e: 1c:08:3d:93:b6:f3:06:e3:8d:1f:de:21:09:d5:72:cd:bb:e4: 21:b3:56:e8:fe:7a:b6:cb:27:5c:44:c0:7c:8f:ce:fa:88:05: 9a:4b:d4:ac:47:6c:1c:9b:d3:4e:72:40:b2:db:78:8d:36:f7: 31:d9:64:d1:d2:84:81:0e:5a:0e:0d:22:f1:43:d8:b2:a0:5b: eb:08:03:7b:6a:e2:31:70:67:b0:12:0a:d0:95:59:8b:9a:75: d7:e6:ce:7b:5e:fe:3e:20:8f:9b:03:82:e5:79:c6:58:51:d4: c1:01:e8:1b:e3:17:9d:dd:c1:04:65:ca:b5:fd:d2:7a:cf:10: a8:db:cb:08:6d:10:1c:70:8a:97:78:93:7a:d9:dc:dd:be:2e: 3d:f5:df:61:b7:d6:85:a8:0f:54:06:00:91:0c:a7:22:f1:d8: fd:85:5f:1c:33:05:30:61:7b:94:67:53:13:6f:58:55:72:ca: a8:e9:8e:f2:36:09:09:24:82:58:a8:f3:ec:ef:85:b6:57:96: e8:0d:51:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4o7xJb5mx8WdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZGI2NDEzNjAtNDA0Yy00MDQ3LThiNjYtMTVkNGEzNzAyYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZF2OX1Br8MjdzBbQTKYea8bZEJ6Jv60T6N eBUc7M1EqkYi15ruY4imGfwZpCsTs5MtcISSJduIgWMLhiFheqmWW0QR2WsqDVHv mhuwa1Y0hLA2DamLHZuIOjAO4u132WFr2dXOnFt5InDsSN6I7+KInxUc5JayMLst CTXvevLiXTBxkKt6Yoi9JaBLS0qucfKw0vN3rCNoIbKeqQeZRJcMJMwuJ0pSOdnS aDhlDf4hvOPlt5h9dRNpdl+2yr9l5EPYsMmIriZhI05m/x3PqO0SfMlFbLaummbz t3pdPL/G4uNktx+QDDGUO5C1l9TvYHETOPBSlJ2RbUvm9UDy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb99xfdditUmxS1rXIf2GCDZ73pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvY2M1MDk5NjgtNjNkOS0z M2Y2LWI2MGMtMjY2NGUwNTExZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDADkjw+giyRP679qsF3cXqgKY3bsEDu4UX3lx6zK3NbUGrVE41s3mr zir8m7PMuo8LAnvUDhwIPZO28wbjjR/eIQnVcs275CGzVuj+erbLJ1xEwHyPzvqI BZpL1KxHbByb005yQLLbeI029zHZZNHShIEOWg4NIvFD2LKgW+sIA3tq4jFwZ7AS CtCVWYuaddfmznte/j4gj5sDguV5xlhR1MEB6BvjF53dwQRlyrX90nrPEKjbywht EBxwipd4k3rZ3N2+Lj3132G31oWoD1QGAJEMpyLx2P2FXxwzBTBhe5RnUxNvWFVy yqjpjvI2CQkkglio8+zvhbZXlugNUWk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:36 2025 by rpki-client