$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa File: a08bb5f5-0230-374a-a51a-b761cea58493.roa (raw, json) Hash identifier: 1Lb1y0rD6rRfKXSN4KZH9EdlZG2cFXAWekywopmAZSE= Subject key identifier: ED:F3:ED:B2:A2:3D:22:3E:21:8F:0A:80:FB:98:01:43:9E:BA:45:B5 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584A82AB4796AB04EDB2461D08C0 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 10384 IP address blocks: 152.87.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:47:96:ab:04:ed:b2:46:1d:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=d480d3dc-aa81-4fad-bd0a-03e30131f9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:ea:40:b6:50:d2:05:dd:d5:28:ec:0f:bc: ac:dd:69:08:31:00:db:53:10:01:89:f6:46:47:19: 27:20:ef:6f:36:a8:e7:98:a5:81:47:aa:47:06:d5: 14:fa:bf:51:d9:30:ae:31:1a:5a:80:35:32:e5:7f: 02:c7:ee:b4:ef:bf:c4:8d:dc:8b:67:a4:c0:f2:11: 81:cd:62:9b:61:1e:ce:97:45:67:c8:46:e5:f6:7e: dc:0d:5b:75:a7:73:ab:b4:3e:f8:d9:fe:6a:04:c5: 15:0b:72:9d:8a:83:7e:40:5a:e8:3e:82:83:73:d1: a3:83:08:21:fb:37:a9:3c:11:3f:67:f8:da:a3:ef: b0:fc:f8:99:7f:27:7e:a9:6b:de:aa:0b:b7:28:db: 55:28:8a:98:dc:3d:e2:51:6b:d4:5b:97:17:a9:18: ca:64:58:a0:e5:fa:11:7f:77:a1:ea:56:95:9e:89: 7d:2f:fd:23:14:27:89:e6:9b:ae:78:2e:b6:0c:cb: ae:0e:15:fd:05:c4:7b:61:02:3f:cd:c9:76:2d:8f: 3e:48:a0:e5:69:6a:c1:e7:6d:4e:d6:7e:e9:45:44: 82:1c:10:1b:75:f5:2b:0a:68:c5:27:07:25:17:be: df:54:a4:7a:5a:60:96:4f:36:a6:be:07:66:25:d8: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F3:ED:B2:A2:3D:22:3E:21:8F:0A:80:FB:98:01:43:9E:BA:45:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:68:ef:dc:7e:ce:8a:d4:b6:15:2f:ea:18:d5:62:37:5d:06: bb:c6:66:b2:c2:e3:8a:f4:3f:55:1b:2d:0a:67:b5:58:3d:e2: 78:98:d7:9d:fb:7d:9f:8b:2f:74:0e:8e:78:43:81:67:db:09: 42:1f:c3:1d:6c:ae:04:55:55:c7:88:46:e6:bc:f7:46:80:18: 8c:87:c0:bb:58:c5:17:b5:a0:19:8e:fc:69:8f:e2:1c:c8:83: 50:28:67:c3:ae:de:29:44:90:cf:20:3a:cb:0d:c1:ae:f2:11: 28:67:9f:70:a4:0f:49:ad:a3:aa:a4:60:5e:f1:a0:f2:34:48: cb:66:b7:5e:71:12:ce:8b:0f:e6:67:af:6c:80:f0:86:ef:d5: a7:8b:35:e1:2c:e1:24:02:18:aa:f4:c9:78:59:ba:61:b5:68: 04:89:e0:cc:80:ee:76:f0:cd:3c:0b:ae:ab:72:41:8b:08:b6: 8f:a3:dd:02:9e:04:c5:b2:f3:54:51:a5:48:33:b3:83:39:d5: 1e:32:a5:9d:7d:cd:0d:ad:c0:a6:54:c4:cf:76:c3:cd:1e:93: 03:36:0d:ce:39:52:70:b6:fd:b1:fe:a8:f1:ee:61:46:b7:53: dd:6d:b6:c6:a8:ec:b1:6e:df:10:d6:0d:7c:ab:03:a8:86:8a: fc:6a:af:81 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqCq0eWqwTtskYdCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ZDQ4MGQzZGMtYWE4MS00ZmFkLWJkMGEtMDNlMzAxMzFmOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ifqQLZQ0gXd1SjsD7ys3WkIMQDbUxABifZG RxknIO9vNqjnmKWBR6pHBtUU+r9R2TCuMRpagDUy5X8Cx+6077/EjdyLZ6TA8hGB zWKbYR7Ol0VnyEbl9n7cDVt1p3OrtD742f5qBMUVC3KdioN+QFroPoKDc9Gjgwgh +zepPBE/Z/jao++w/PiZfyd+qWveqgu3KNtVKIqY3D3iUWvUW5cXqRjKZFig5foR f3eh6laVnol9L/0jFCeJ5puueC62DMuuDhX9BcR7YQI/zcl2LY8+SKDlaWrB521O 1n7pRUSCHBAbdfUrCmjFJwclF77fVKR6WmCWTzamvgdmJdip1wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO3z7bKiPSI+IY8KgPuYAUOeukW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvYTA4YmI1ZjUtMDIzMC0z NzRhLWE1MWEtYjc2MWNlYTU4NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmFcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiWjv3H7OitS2FS/qGNViN10Gu8ZmssLjivQ/VRstCme1WD3ieJjXnft9 n4svdA6OeEOBZ9sJQh/DHWyuBFVVx4hG5rz3RoAYjIfAu1jFF7WgGY78aY/iHMiD UChnw67eKUSQzyA6yw3BrvIRKGefcKQPSa2jqqRgXvGg8jRIy2a3XnESzosP5mev bIDwhu/Vp4s14SzhJAIYqvTJeFm6YbVoBIngzIDudvDNPAuuq3JBiwi2j6PdAp4E xbLzVFGlSDOzgznVHjKlnX3NDa3AplTEz3bDzR6TAzYNzjlScLb9sf6o8e5hRrdT 3W22xqjssW7fENYNfKsDqIaK/GqvgQ== -----END CERTIFICATE-----Generated at Wed Aug 13 09:45:16 2025 by rpki-client