$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa File: e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa (raw, json) Hash identifier: Ibbn9QOOFe/SrmQ8ZyltXj2zYmXPRlfCM/Uz4pGj7bQ= Subject key identifier: 72:4B:CE:2C:5E:E0:4B:E6:95:85:07:D9:BC:9C:B0:9B:13:49:26:63 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584BAEC7B227F493E7BA4D1EC300 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 92 IP address blocks: 128.153.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b2:27:f4:93:e7:ba:4d:1e:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=e99b8a3e-4b5b-4ac1-82d8-340576f119cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:fd:ac:ec:2d:f6:73:e9:e2:6b:5e:2f:c6: fb:65:1b:a0:14:4b:93:aa:b6:db:d2:bb:30:d1:b1: 3f:1d:1f:9e:61:c2:b3:ad:7b:81:c9:54:79:d3:e3: 3c:9e:01:ef:a7:d0:bd:8f:7f:9d:9a:b3:11:17:ce: 17:75:99:0e:63:47:cf:d9:79:9e:3e:1b:59:6a:12: 78:61:ba:52:5d:02:f5:29:c2:78:98:06:65:f7:82: 32:3f:f9:38:3e:97:ca:c0:c5:ae:6f:95:1d:a1:77: b7:b5:c8:9f:d3:a2:03:3f:61:88:35:74:45:8b:91: 51:9d:6e:cb:d2:2e:c8:7f:59:b5:2c:2f:f8:e0:29: 85:47:38:7c:83:c4:96:b9:aa:a9:db:32:0f:8f:d7: c0:49:29:44:f8:7f:96:24:2b:8e:02:6f:50:02:cb: ba:6d:15:37:6f:91:9c:d8:9c:13:62:25:82:b4:11: 97:3e:1f:c6:6a:82:1d:5c:79:0d:78:89:b1:22:4c: af:c1:0e:7a:e9:10:c5:61:16:00:ea:49:29:de:3d: 08:33:3f:0b:9a:f0:30:9b:99:c8:59:a9:37:1c:b8: c0:63:60:e8:27:30:90:9d:a6:20:b4:3e:7d:4a:cf: 89:69:39:72:ab:90:4b:de:e0:00:51:8b:e0:ee:5e: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:CE:2C:5E:E0:4B:E6:95:85:07:D9:BC:9C:B0:9B:13:49:26:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/e8816754-e16a-32a7-bb1f-a56e254e0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:90:84:b0:b3:ec:f1:64:02:03:0a:b5:a2:f4:90:5f:4d:03: d6:82:01:b5:a6:d3:73:61:a8:49:ec:77:7f:ba:3f:97:a6:b1: d6:da:00:b5:f6:68:bb:4d:b5:e1:0b:73:4b:11:b2:cd:57:3e: a6:fe:bd:c9:54:91:7b:13:16:46:c3:0e:8d:50:6a:ae:9c:20: 14:1f:5f:e6:63:7c:96:65:83:0c:7d:4c:ed:d7:32:91:79:38: 12:31:55:7a:e2:8e:17:62:58:a6:2f:1a:00:62:9d:9a:a4:49: f2:1d:3a:39:09:92:9e:56:a1:c9:c1:98:89:32:20:ca:d4:91: a4:29:b1:72:6d:62:76:71:8c:d9:69:c3:3a:b6:7c:a0:46:a9: a1:76:bb:bd:d3:db:68:da:1c:d8:8e:23:81:32:30:3d:f5:8c: a1:de:94:d1:9f:49:77:44:b1:f3:3f:7b:54:a4:49:5f:b4:d8: 85:15:ca:23:af:ac:9d:39:41:2f:fe:42:3e:b4:28:fe:56:54: 85:d8:a1:b8:d4:ad:5d:7d:e6:0a:e0:7c:22:4e:15:1c:f2:75: a6:8e:88:a3:1e:3a:ba:63:01:6f:87:c6:2d:d8:42:23:d0:30: cf:31:be:b6:76:32:d1:1b:7d:24:3b:89:3d:df:b9:ce:73:be: 2f:54:c8:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7In9JPnuk0ewwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZTk5YjhhM2UtNGI1Yi00YWMxLTgyZDgtMzQwNTc2ZjExOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBj9rOwt9nPp4mteL8b7ZRugFEuTqrbb0rsw 0bE/HR+eYcKzrXuByVR50+M8ngHvp9C9j3+dmrMRF84XdZkOY0fP2XmePhtZahJ4 YbpSXQL1KcJ4mAZl94IyP/k4PpfKwMWub5UdoXe3tcif06IDP2GINXRFi5FRnW7L 0i7If1m1LC/44CmFRzh8g8SWuaqp2zIPj9fASSlE+H+WJCuOAm9QAsu6bRU3b5Gc 2JwTYiWCtBGXPh/GaoIdXHkNeImxIkyvwQ566RDFYRYA6kkp3j0IMz8LmvAwm5nI Wak3HLjAY2DoJzCQnaYgtD59Ss+JaTlyq5BL3uAAUYvg7l7EWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJLzixe4EvmlYUH2bycsJsTSSZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvZTg4MTY3NTQtZTE2YS0z MmE3LWJiMWYtYTU2ZTI1NGUwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCQhLCz7PFkAgMKtaL0kF9NA9aCAbWm03NhqEnsd3+6P5emsdbaALX2 aLtNteELc0sRss1XPqb+vclUkXsTFkbDDo1Qaq6cIBQfX+ZjfJZlgwx9TO3XMpF5 OBIxVXrijhdiWKYvGgBinZqkSfIdOjkJkp5WocnBmIkyIMrUkaQpsXJtYnZxjNlp wzq2fKBGqaF2u73T22jaHNiOI4EyMD31jKHelNGfSXdEsfM/e1SkSV+02IUVyiOv rJ05QS/+Qj60KP5WVIXYobjUrV195grgfCJOFRzydaaOiKMeOrpjAW+Hxi3YQiPQ MM8xvrZ2MtEbfSQ7iT3fuc5zvi9UyN8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:45:56 2025 by rpki-client