$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa File: cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa (raw, json) Hash identifier: SNcmzNA+eTSWdOnK80nQbqN4TY/q9U4iZGYb6ju+C1g= Subject key identifier: 24:A0:D3:31:74:5B:FB:5E:18:44:56:73:75:56:3C:A0:9A:F3:78:F6 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584AF9513DC90007162F9BE8673E Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 14618 IP address blocks: 164.153.128.0/24 maxlen: 32 164.153.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3d:c9:00:07:16:2f:9b:e8:67:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=43eebe61-1053-4b9d-86e3-f981edae96ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:58:8e:77:da:a2:24:ca:53:f3:10:12:d1: c4:f5:38:8d:48:53:ed:af:30:82:d8:0a:2d:be:1f: 48:be:c6:7e:c0:24:51:7a:23:f4:89:23:08:2c:c8: e5:68:80:1b:e6:39:0d:04:98:a0:fb:aa:5b:72:bd: 2d:25:8c:f5:f3:fa:71:a3:13:8f:f3:3a:6d:33:93: 92:24:41:65:74:4f:2d:48:0d:81:68:4f:fd:b5:c0: 88:91:41:f2:5a:71:e2:f2:6c:bf:74:22:13:0e:19: 4d:09:c3:2a:ad:39:63:38:98:36:7a:94:43:0f:22: 37:91:75:9b:ba:2a:9a:ec:65:c0:0c:86:7d:53:06: 59:f5:a8:29:21:f1:d2:05:43:eb:f2:65:2a:07:a5: 0a:9c:fc:05:84:66:55:5b:c0:c2:a6:19:cc:46:0a: 76:01:d8:a1:40:05:b0:69:49:dd:db:64:eb:b9:77: 98:4c:ff:6d:c4:52:51:4c:69:db:b4:60:0c:08:3d: 2c:46:ce:44:9e:63:6f:cd:00:f8:ce:0e:27:7b:b0: a3:9e:72:33:48:e2:bd:52:60:76:96:b9:7a:7a:fc: e9:11:70:99:b7:5a:1d:0b:36:d9:3f:82:23:fe:da: 89:1f:bb:c1:c3:5e:42:78:85:97:bc:fb:02:03:5e: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:D3:31:74:5B:FB:5E:18:44:56:73:75:56:3C:A0:9A:F3:78:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:27:00:59:da:22:cf:95:c4:23:62:81:67:a9:a5:69:33:10: 88:95:6b:54:8c:83:66:21:ba:95:f5:79:66:04:4f:c2:25:20: a4:47:25:11:93:b5:17:38:f9:36:a6:10:e0:32:72:c0:a0:26: 67:85:58:a1:44:a1:5e:45:6e:70:76:d5:bd:e4:fb:02:d4:93: 8e:fd:ad:47:10:8f:30:fa:97:77:de:e2:b5:c3:60:cb:76:6a: 1a:2b:be:d2:32:c0:cb:7e:19:d6:a4:5b:3a:ca:74:d3:36:69: 27:ec:f1:14:8d:44:38:49:37:58:83:43:10:c8:04:4f:b7:ed: 1d:e8:2a:60:3d:d1:c6:05:ae:49:23:5e:a6:92:bf:f4:68:47: 4b:49:b2:46:0d:64:94:24:0f:bf:52:fc:6f:2c:f8:5a:88:c4: e2:80:0d:6a:31:e4:52:08:23:e4:df:2d:db:a1:c8:8d:e2:0f: 25:0a:76:5a:dc:a9:43:62:0f:0e:2d:8b:7e:71:e7:92:01:a5: d1:82:64:f7:6e:0a:ce:51:8f:b2:d1:71:90:08:c1:35:bb:71: 3a:07:b2:68:01:e3:10:22:83:20:03:ac:02:b8:b0:65:51:01: c2:0c:bf:5a:ae:48:ef:68:2c:a7:59:c9:0a:46:7f:5a:7b:07: 02:c6:16:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UT3JAAcWL5voZz4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDNlZWJlNjEtMTA1My00YjlkLTg2ZTMtZjk4MWVkYWU5NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqlYjnfaoiTKU/MQEtHE9TiNSFPtrzCC2Aot vh9IvsZ+wCRReiP0iSMILMjlaIAb5jkNBJig+6pbcr0tJYz18/pxoxOP8zptM5OS JEFldE8tSA2BaE/9tcCIkUHyWnHi8my/dCITDhlNCcMqrTljOJg2epRDDyI3kXWb uiqa7GXADIZ9UwZZ9agpIfHSBUPr8mUqB6UKnPwFhGZVW8DCphnMRgp2AdihQAWw aUnd22TruXeYTP9txFJRTGnbtGAMCD0sRs5EnmNvzQD4zg4ne7CjnnIzSOK9UmB2 lrl6evzpEXCZt1odCzbZP4Ij/tqJH7vBw15CeIWXvPsCA14W0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSg0zF0W/teGERWc3VWPKCa83j2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvY2QyOGYxZDUtY2JiNi0z YWI2LWI3M2EtNDM0ZDUwNWNiMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUnAFnaIs+VxCNigWeppWkzEIiVa1SMg2YhupX1eWYET8IlIKRHJRGT tRc4+TamEOAycsCgJmeFWKFEoV5FbnB21b3k+wLUk479rUcQjzD6l3fe4rXDYMt2 ahorvtIywMt+GdakWzrKdNM2aSfs8RSNRDhJN1iDQxDIBE+37R3oKmA90cYFrkkj XqaSv/RoR0tJskYNZJQkD79S/G8s+FqIxOKADWox5FIII+TfLduhyI3iDyUKdlrc qUNiDw4ti35x55IBpdGCZPduCs5Rj7LRcZAIwTW7cToHsmgB4xAigyADrAK4sGVR AcIMv1quSO9oLKdZyQpGf1p7BwLGFnk= -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:14 2025 by rpki-client