$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa File: 8085afc2-07b3-3a9d-b454-91afbe081f01.roa (raw, json) Hash identifier: 8kdA9vdiadKyY4Cu+B5DTA1+P3Hx84Z5mEPmf48PLSU= Subject key identifier: 1C:02:81:FB:52:54:32:3B:F2:5B:4E:47:62:87:2A:E4:CD:03:30:ED Certificate issuer: /CN=37d65fc0-6e4c-4477-9488-812657d0d39e Certificate serial: 010D0C9F4328584A7C9CB2D532AC78A34FF29680 Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa Signing time: Wed 09 Jul 2025 20:05:55 +0000 ROA not before: Wed 09 Jul 2025 20:05:55 +0000 ROA not after: Tue 07 Oct 2025 20:05:55 +0000 asID: 14618 IP address blocks: 153.45.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7c:9c:b2:d5:32:ac:78:a3:4f:f2:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e Validity Not Before: Jul 9 20:05:55 2025 GMT Not After : Oct 7 20:05:55 2025 GMT Subject: CN=cb26b53b-a3a5-4a6a-ba8c-54659748860d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:bd:0d:1e:a3:67:55:a6:8d:8a:6d:99:27: ba:18:c9:aa:d3:63:b1:ff:6a:b1:1f:c9:60:ae:42: ab:33:10:0c:9b:cb:14:c1:9f:3e:28:17:f5:a5:66: 5b:4e:79:9f:72:55:93:c9:32:c8:75:37:5a:a2:04: a9:75:85:7d:89:41:14:f1:d9:31:78:9e:3d:ad:0f: 50:22:6f:93:1a:b2:fe:44:18:f7:bb:21:26:bc:3f: 2b:9a:8b:8b:0d:d7:af:0b:d2:d3:53:07:4f:7f:c2: 11:ea:ee:fb:b4:0c:1d:e4:7f:34:6b:50:12:cc:c2: 36:6b:fa:5e:57:e9:11:59:1a:5f:a3:79:50:6c:ab: cf:bd:be:11:f5:c1:9b:79:64:72:ee:bc:21:1c:49: 62:17:23:30:2f:4f:bd:6d:c9:8f:1d:84:54:ba:98: 19:e0:76:ff:5c:57:b9:43:44:62:c7:f9:83:9d:b9: 0a:45:97:ed:22:f1:52:9f:18:f0:3e:5d:33:0a:ca: 85:49:c9:9a:85:be:4f:2a:e8:28:28:63:7d:bf:fa: da:3c:0d:25:4e:74:41:1f:ae:13:20:9d:d8:85:e4: 47:be:45:10:7b:5c:9d:53:d2:d7:e5:fd:6e:ab:59: 24:b4:46:9f:9b:b6:bc:45:7b:42:08:f9:0f:00:3a: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:81:FB:52:54:32:3B:F2:5B:4E:47:62:87:2A:E4:CD:03:30:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl X509v3 Authority Key Identifier: keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer sbgp-ipAddrBlock: critical IPv4: 153.45.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:97:99:ac:e5:d8:36:6b:77:6b:db:d4:c0:e2:1f:4c:af:a2: cd:2c:18:77:c3:56:44:92:cc:55:ab:dc:c4:50:a3:a2:e6:22: 83:f4:6c:b7:42:84:ef:58:14:22:51:74:44:8c:c7:36:45:3d: 2c:46:84:64:4b:3d:83:48:be:b0:ce:a9:47:04:09:6f:87:a1: 07:b3:f3:70:09:b6:1d:6d:6a:12:6c:68:0a:1f:44:54:33:1c: 8c:e6:ea:c2:11:39:9a:15:7a:0b:52:11:5f:69:b3:17:46:d9: e9:a6:ef:50:26:31:eb:3b:3b:35:82:3f:fd:2c:ae:31:da:c0: 52:41:36:ba:43:6c:16:af:3a:a6:b3:5c:e1:79:ac:d4:f9:73: f9:ca:8e:af:8d:3e:fe:12:20:56:72:f8:e4:c8:dc:5b:f1:f9: 7c:ba:a2:3a:b8:bf:45:13:c8:c2:e8:f5:bb:89:0d:25:67:ac: dc:85:8a:2b:99:0b:00:de:8e:23:2e:8c:c6:43:dc:a5:6a:9b: a8:9e:4a:32:84:e4:4a:31:ff:c3:5a:9e:e0:5d:3b:f2:d4:2f: 92:7e:75:b3:c5:bd:42:84:cf:b1:23:45:72:1e:4f:83:eb:2a: f8:7a:66:9b:2a:ee:f8:e0:8d:5b:03:d3:e0:f5:10:6d:dd:0d: 94:f8:72:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp8nLLVMqx4o0/yloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBk MzllMB4XDTI1MDcwOTIwMDU1NVoXDTI1MTAwNzIwMDU1NVowLzEtMCsGA1UEAxMk Y2IyNmI1M2ItYTNhNS00YTZhLWJhOGMtNTQ2NTk3NDg4NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYa9DR6jZ1WmjYptmSe6GMmq02Ox/2qxH8lg rkKrMxAMm8sUwZ8+KBf1pWZbTnmfclWTyTLIdTdaogSpdYV9iUEU8dkxeJ49rQ9Q Im+TGrL+RBj3uyEmvD8rmouLDdevC9LTUwdPf8IR6u77tAwd5H80a1ASzMI2a/pe V+kRWRpfo3lQbKvPvb4R9cGbeWRy7rwhHEliFyMwL0+9bcmPHYRUupgZ4Hb/XFe5 Q0Rix/mDnbkKRZftIvFSnxjwPl0zCsqFScmahb5PKugoKGN9v/raPA0lTnRBH64T IJ3YheRHvkUQe1ydU9LX5f1uq1kktEafm7a8RXtCCPkPADrfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwCgftSVDI78ltOR2KHKuTNAzDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2 NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvODA4NWFmYzItMDdiMy0z YTlkLWI0NTQtOTFhZmJlMDgxZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzdkNjVmYzAtNmU0Yy00NDc3LTk0 ODgtODEyNjU3ZDBkMzllLzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05NDg4LTgxMjY1N2Qw ZDM5ZS5jcmwwHwYDVR0jBBgwFoAUkdjp9T5JxZ1idRxD5UGjuuSdPGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2 NTdkMGQzOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmS0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGXmazl2DZrd2vb1MDiH0yvos0sGHfDVkSSzFWr3MRQo6LmIoP0bLdC hO9YFCJRdESMxzZFPSxGhGRLPYNIvrDOqUcECW+HoQez83AJth1tahJsaAofRFQz HIzm6sIROZoVegtSEV9psxdG2emm71AmMes7OzWCP/0srjHawFJBNrpDbBavOqaz XOF5rNT5c/nKjq+NPv4SIFZy+OTI3Fvx+Xy6ojq4v0UTyMLo9buJDSVnrNyFiiuZ CwDejiMujMZD3KVqm6ieSjKE5Eox/8NanuBdO/LUL5J+dbPFvUKEz7EjRXIeT4Pr Kvh6Zpsq7vjgjVsD0+D1EG3dDZT4cng= -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:47 2025 by rpki-client