$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa File: ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa (raw, json) Hash identifier: Zc/N91IZo7LO5pGEdXV1uScSYTf69nAlfO3IS62DpBI= Subject key identifier: B2:76:A6:FA:E2:95:3B:84:5B:4C:8A:C7:75:0F:D4:E6:03:38:EA:B6 Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584AA0D0CD95C130B7F11DE457C0 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa Signing time: Thu 24 Jul 2025 20:10:49 +0000 ROA not before: Thu 24 Jul 2025 20:10:49 +0000 ROA not after: Wed 22 Oct 2025 20:10:49 +0000 asID: 395516 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:d0:cd:95:c1:30:b7:f1:1d:e4:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Jul 24 20:10:49 2025 GMT Not After : Oct 22 20:10:49 2025 GMT Subject: CN=e225a9b0-3ac4-4a91-a395-f8aa40e6d180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:d6:08:a8:16:5b:57:a0:a5:d5:48:8f:43: f2:f7:0d:b4:1e:65:63:72:c9:e4:5d:41:ac:df:19: b2:4b:c5:1f:ae:7d:6f:d7:b7:b3:fa:3d:cc:6e:b9: c6:a7:b6:fc:c1:02:b7:a3:47:73:bd:49:28:38:38: 2b:88:82:86:78:aa:5f:45:05:f0:43:a2:cc:4c:dc: d3:42:40:58:b1:0e:3c:db:26:70:91:58:25:b3:1f: fa:85:b8:91:e3:1e:b5:46:87:06:a1:ec:9d:2c:4b: a6:f6:74:14:3c:b8:2e:43:ff:7c:6d:41:db:fc:c0: fe:0a:43:19:a5:5b:46:83:64:f3:94:ec:6b:dc:1e: e4:62:91:41:2b:10:4c:1c:45:5d:f8:e3:48:49:d9: 8a:7e:da:f5:10:db:ea:5d:cb:51:85:83:30:6e:88: 79:c7:68:d1:c0:e2:ed:42:1f:87:e9:a6:09:7e:98: 38:2e:b0:2d:01:23:78:90:c2:fd:59:8c:f5:64:b3: 87:4e:c2:f9:e7:a7:a7:79:f2:8a:30:de:57:39:83: 4b:19:85:f6:6e:bd:9f:38:22:ae:0c:26:f0:ad:ee: 46:c5:c6:78:52:c1:28:07:70:30:98:1c:d2:c5:3d: 65:07:be:a8:df:13:07:ba:86:54:cb:d7:18:6d:b5: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:A6:FA:E2:95:3B:84:5B:4C:8A:C7:75:0F:D4:E6:03:38:EA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9d:06:52:bb:d2:76:67:52:da:c0:9a:fe:b0:27:a1:34:b8: dd:f7:f8:94:e9:84:81:b1:68:1a:e4:5c:96:2a:d2:13:1a:a4: ac:59:5a:da:4a:d5:9b:0e:b2:c9:65:cb:f1:48:8f:f5:4c:30: 60:72:c9:f0:e1:eb:91:be:fc:2a:15:66:48:f7:d3:81:c4:85: 52:00:c7:57:89:3a:39:94:00:a6:b2:c6:01:1e:e5:75:bb:9c: 2a:b5:79:35:80:7a:f2:54:08:44:5b:ab:f7:d2:45:0e:1d:b0: 55:50:9e:46:14:b9:b7:0b:52:19:ad:cb:89:1d:8a:69:fa:26: 2a:f8:9b:a2:af:18:ff:13:a9:32:d8:94:05:2f:88:91:44:f3: 4e:d2:2a:bf:21:85:74:65:c4:62:43:5c:f6:47:22:7f:fd:9d: f1:a5:68:99:df:9e:36:13:0c:d6:37:6e:9e:51:8d:2b:7b:ae: 88:8a:20:c5:b4:60:12:ba:8b:81:f3:30:4e:d6:e1:49:f4:02: 70:71:24:44:a2:22:a1:95:11:ef:8b:19:ff:b0:b3:25:c9:53: be:2f:88:b1:e3:b8:8a:93:31:70:d0:06:32:d9:1a:e3:49:71: 98:1b:f9:e2:37:d7:9a:74:41:df:21:1a:2d:6e:40:a5:82:33: 64:98:3a:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqg0M2VwTC38R3kV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI1MDcyNDIwMTA0OVoXDTI1MTAyMjIwMTA0OVowLzEtMCsGA1UEAxMk ZTIyNWE5YjAtM2FjNC00YTkxLWEzOTUtZjhhYTQwZTZkMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKjWCKgWW1egpdVIj0Py9w20HmVjcsnkXUGs 3xmyS8Ufrn1v17ez+j3MbrnGp7b8wQK3o0dzvUkoODgriIKGeKpfRQXwQ6LMTNzT QkBYsQ482yZwkVglsx/6hbiR4x61RocGoeydLEum9nQUPLguQ/98bUHb/MD+CkMZ pVtGg2TzlOxr3B7kYpFBKxBMHEVd+ONISdmKftr1ENvqXctRhYMwboh5x2jRwOLt Qh+H6aYJfpg4LrAtASN4kML9WYz1ZLOHTsL556enefKKMN5XOYNLGYX2br2fOCKu DCbwre5GxcZ4UsEoB3AwmBzSxT1lB76o3xMHuoZUy9cYbbUnmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ2pvrilTuEW0yKx3UP1OYDOOq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvYWQzNjhmMGEtNDQ4Ny0z ZWM1LWFjZTEtMTUxMmZkNmYzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqdBlK70nZnUtrAmv6wJ6E0uN33+JTphIGxaBrkXJYq0hMapKxZWtpK 1ZsOsslly/FIj/VMMGByyfDh65G+/CoVZkj304HEhVIAx1eJOjmUAKayxgEe5XW7 nCq1eTWAevJUCERbq/fSRQ4dsFVQnkYUubcLUhmty4kdimn6Jir4m6KvGP8TqTLY lAUviJFE807SKr8hhXRlxGJDXPZHIn/9nfGlaJnfnjYTDNY3bp5RjSt7roiKIMW0 YBK6i4HzME7W4Un0AnBxJESiIqGVEe+LGf+wsyXJU74viLHjuIqTMXDQBjLZGuNJ cZgb+eI315p0Qd8hGi1uQKWCM2SYOhI= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:21 2025 by rpki-client