$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa File: dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa (raw, json) Hash identifier: D8xmFDstWnS3b1c8roHdWj54Apk4c4Nt8cYjcSFMjrU= Subject key identifier: 2E:88:5D:02:0E:E2:40:53:2F:05:E4:06:8B:52:EA:2A:97:F3:54:EA Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584AAB265EF19A3F95DD99E4C300 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 26512 IP address blocks: 168.245.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5e:f1:9a:3f:95:dd:99:e4:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=5bcdab82-85e9-4476-882f-109c6b1b4f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:4c:b0:2c:03:09:b3:59:34:a0:44:12:be: 00:a0:5f:60:d3:3f:b8:bd:44:13:7a:d7:13:a7:c2: bf:71:5b:83:ec:5c:82:0b:ff:3f:60:44:2c:83:99: 8c:b0:fa:f1:9d:15:03:aa:bc:8a:bc:72:4e:02:8e: 42:cb:83:e9:6c:c5:ad:dd:43:af:f2:02:14:5b:8b: de:f2:66:19:a7:62:ef:6f:ff:bf:49:f2:bf:d7:a7: 40:f5:39:19:1d:fd:3d:fe:93:6e:ca:16:94:4f:11: c9:52:8c:61:78:89:c6:47:30:8e:94:ff:53:f3:15: 75:e9:da:e3:2a:63:12:9f:9d:36:83:c1:8f:7b:88: b6:81:bd:29:53:c9:ac:00:d2:d8:64:a5:e8:1a:26: 38:5a:16:2f:9c:75:af:0d:87:d6:49:23:10:c8:57: 95:12:a4:b7:51:dc:83:17:97:a5:e2:82:e8:e9:73: 53:e8:cd:43:eb:32:52:f6:3e:0c:6e:e0:c1:82:fe: 92:f2:c5:5c:17:0e:09:73:90:d5:39:63:f0:4b:d3: 86:de:af:7e:31:c2:4a:68:58:a9:9e:58:b9:1e:0a: ff:fa:32:fe:87:16:c3:c6:db:dd:00:e0:a6:f8:5d: e2:b9:c7:6e:10:36:68:c3:01:10:89:21:64:d1:d4: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:88:5D:02:0E:E2:40:53:2F:05:E4:06:8B:52:EA:2A:97:F3:54:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 168.245.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:31:58:98:27:8e:f4:42:02:aa:94:be:88:f0:56:f8:13:3b: f4:00:94:a7:a9:ed:8e:a4:41:70:36:9e:93:5f:e1:fc:48:0b: e7:67:ab:64:90:15:9c:7f:af:55:2d:47:1a:47:4d:d5:19:40: f7:37:6a:3f:4c:7b:3b:34:63:e3:2b:0e:61:8a:75:1a:35:b0: 19:e6:67:80:c1:40:b7:f5:ec:f0:e5:0a:77:17:92:6b:9a:8a: 54:ff:a0:ce:cf:3b:5e:6a:53:3d:73:fc:de:01:ae:d6:b6:03: 20:9d:97:1e:68:b3:b0:49:c3:ca:95:d0:2d:cb:38:4f:30:f7: 65:6c:fd:ec:0c:bd:df:ec:f9:8a:57:da:3d:f6:1c:fd:61:2e: 41:89:14:02:f4:40:81:03:32:e8:fc:20:ce:31:eb:1e:93:69: 93:74:ef:f8:f1:51:8a:0f:73:ca:93:02:39:c6:cf:1d:3f:b9: 74:9c:b1:6c:74:b4:8f:ad:86:93:82:45:15:58:5d:32:5d:e4: ad:bb:61:41:7a:26:c2:24:4d:98:ce:69:bd:7c:aa:31:2e:9f: 98:9f:98:5c:d1:50:e5:83:74:ab:40:c1:23:1b:e6:7f:ff:db: 64:1b:44:5c:f2:49:91:9c:94:50:a2:0a:0a:42:b5:04:c1:0d: 04:87:f4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJl7xmj+V3ZnkwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NWJjZGFiODItODVlOS00NDc2LTg4MmYtMTA5YzZiMWI0Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFlMsCwDCbNZNKBEEr4AoF9g0z+4vUQTetcT p8K/cVuD7FyCC/8/YEQsg5mMsPrxnRUDqryKvHJOAo5Cy4PpbMWt3UOv8gIUW4ve 8mYZp2Lvb/+/SfK/16dA9TkZHf09/pNuyhaUTxHJUoxheInGRzCOlP9T8xV16drj KmMSn502g8GPe4i2gb0pU8msANLYZKXoGiY4WhYvnHWvDYfWSSMQyFeVEqS3UdyD F5el4oLo6XNT6M1D6zJS9j4MbuDBgv6S8sVcFw4Jc5DVOWPwS9OG3q9+McJKaFip nli5Hgr/+jL+hxbDxtvdAOCm+F3iucduEDZowwEQiSFk0dQjRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6IXQIO4kBTLwXkBotS6iqX81TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGQ2ZDU5MjAtZmZlYi0z Y2IwLTlmNGYtNDJmYTZlNjk3NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsxWJgnjvRCAqqUvojwVvgTO/QAlKep7Y6kQXA2npNf4fxIC+dnq2SQ FZx/r1UtRxpHTdUZQPc3aj9Mezs0Y+MrDmGKdRo1sBnmZ4DBQLf17PDlCncXkmua ilT/oM7PO15qUz1z/N4Brta2AyCdlx5os7BJw8qV0C3LOE8w92Vs/ewMvd/s+YpX 2j32HP1hLkGJFAL0QIEDMuj8IM4x6x6TaZN07/jxUYoPc8qTAjnGzx0/uXScsWx0 tI+thpOCRRVYXTJd5K27YUF6JsIkTZjOab18qjEun5ifmFzRUOWDdKtAwSMb5n// 22QbRFzySZGclFCiCgpCtQTBDQSH9D8= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:20 2025 by rpki-client