$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa File: 5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (raw, json) Hash identifier: IE5lnVE8/N93psCiaDcQCkd3BWVpm0n9aberkkdmXHY= Subject key identifier: 7C:D8:04:99:DD:28:17:65:39:52:DD:D5:7F:0C:CD:3B:F2:86:91:71 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584ABD4B8A8D86BA5AF134BAB400 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 21766 IP address blocks: 152.97.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8a:8d:86:ba:5a:f1:34:ba:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=03f3ea63-7032-4b91-841a-9c3692cdda09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:3f:fa:74:8d:21:76:be:32:95:5a:65:e6: db:42:04:5d:8b:47:9d:90:df:52:7d:aa:27:36:b2: a4:2a:ed:ea:a4:b2:bb:5f:52:72:f0:00:2e:26:e6: bb:f1:1e:d6:f1:c3:59:a4:2c:1d:ca:fe:34:ac:8f: 5e:ae:4f:4e:a3:03:85:07:1e:2f:92:1d:96:5c:04: 91:c5:f2:53:a6:01:19:fd:3b:9d:41:92:06:8d:aa: c8:d6:6a:f4:ef:82:49:a5:40:8c:85:94:b3:26:63: 4e:b9:e2:05:44:51:95:37:17:1e:b7:ef:d2:a9:3e: a7:05:22:57:7d:ce:07:44:bf:83:10:af:cf:7a:64: af:d7:71:dc:f1:62:94:31:d4:4e:8a:47:dc:e6:8e: fa:45:9e:4c:8b:22:7b:be:84:aa:01:bc:38:63:27: a0:ff:ee:65:2d:ee:8c:d1:c6:34:eb:52:60:33:34: 0c:ae:66:90:d7:1f:8d:4e:b9:c1:a1:1b:7d:63:bc: 39:e1:5e:16:80:fa:b2:de:dd:4d:df:5f:9c:e9:fe: 91:4a:5e:57:c0:ab:55:46:bd:77:47:71:c3:41:9b: a6:7e:69:24:7f:e9:c9:7b:a4:fb:0f:63:11:98:89: 7b:f1:bc:82:3a:25:49:d9:b1:ec:4e:f4:fc:e9:f0: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:04:99:DD:28:17:65:39:52:DD:D5:7F:0C:CD:3B:F2:86:91:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:5c:02:78:df:75:ba:c0:3b:22:f5:e6:3d:92:0d:31:08:e4: ad:39:1a:5a:81:11:73:a5:55:c6:0a:8d:61:63:d0:20:bf:63: ed:d1:02:77:6b:b3:60:1f:6b:07:c9:c8:9d:e7:af:f1:28:ff: c0:ce:ca:7a:8f:4c:55:ae:ac:30:04:17:1f:cd:ff:3e:f1:30: 4a:02:cd:64:d2:c2:77:df:2f:3b:9a:a1:70:40:83:af:80:f9: d9:0d:2a:bf:f8:9f:9b:bb:75:88:b3:aa:1c:96:7b:2f:96:14: fc:a4:42:72:b2:09:14:02:51:c7:60:d6:7c:2b:f6:ff:2c:05: 74:05:e7:d5:3b:2e:7c:21:87:9d:01:5e:01:f1:73:6d:7c:a2: ed:5b:16:3d:59:aa:4d:a5:fb:54:26:ea:4a:9a:b0:bd:23:83: 93:b5:d0:aa:0b:a5:15:5d:d8:f3:ea:ea:1d:37:22:a6:34:33: f2:18:22:3e:b9:4c:a1:dc:e4:fa:ed:4a:9a:b5:cd:b4:2e:19: 6d:0f:c7:3b:9a:26:a2:ef:e1:7e:40:5c:a4:61:51:b1:70:bc: c8:1f:c1:0f:01:34:0d:ad:04:bb:ed:24:9b:91:a1:19:87:0c: b6:b2:2d:f5:8e:d5:dd:00:e9:39:f6:da:39:25:49:18:cb:a1: 80:bf:98:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4qNhrpa8TS6tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDNmM2VhNjMtNzAzMi00YjkxLTg0MWEtOWMzNjkyY2RkYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZQ/+nSNIXa+MpVaZebbQgRdi0edkN9Sfaon NrKkKu3qpLK7X1Jy8AAuJua78R7W8cNZpCwdyv40rI9erk9OowOFBx4vkh2WXASR xfJTpgEZ/TudQZIGjarI1mr074JJpUCMhZSzJmNOueIFRFGVNxcet+/SqT6nBSJX fc4HRL+DEK/PemSv13Hc8WKUMdROikfc5o76RZ5MiyJ7voSqAbw4Yyeg/+5lLe6M 0cY061JgMzQMrmaQ1x+NTrnBoRt9Y7w54V4WgPqy3t1N31+c6f6RSl5XwKtVRr13 R3HDQZumfmkkf+nJe6T7D2MRmIl78byCOiVJ2bHsTvT86fAhhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzYBJndKBdlOVLd1X8MzTvyhpFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWI1MWE3MTAtZDkwMy0z YTlmLTk4YTItMWYyOWRhMDZlYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmGGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRcAnjfdbrAOyL15j2SDTEI5K05GlqBEXOlVcYKjWFj0CC/Y+3RAndr s2AfawfJyJ3nr/Eo/8DOynqPTFWurDAEFx/N/z7xMEoCzWTSwnffLzuaoXBAg6+A +dkNKr/4n5u7dYizqhyWey+WFPykQnKyCRQCUcdg1nwr9v8sBXQF59U7Lnwhh50B XgHxc218ou1bFj1Zqk2l+1Qm6kqasL0jg5O10KoLpRVd2PPq6h03IqY0M/IYIj65 TKHc5PrtSpq1zbQuGW0PxzuaJqLv4X5AXKRhUbFwvMgfwQ8BNA2tBLvtJJuRoRmH DLayLfWO1d0A6Tn22jklSRjLoYC/mBo= -----END CERTIFICATE-----Generated at Mon Aug 4 13:54:37 2025 by rpki-client