$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/5b9af106-8433-397c-b11d-62fb32319103.roa File: 5b9af106-8433-397c-b11d-62fb32319103.roa (raw, json) Hash identifier: qaazjlJ9DVY4HGC1AOVbISaVRzj0/TkW7t/ZYo1Urm0= Subject key identifier: CA:78:47:81:8E:89:E2:C2:02:69:BF:8E:13:B9:5F:1E:7D:AA:74:D2 Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa Certificate serial: 010D0C9F4328584A5FC5DF47ACB69AA32929BA00 Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/5b9af106-8433-397c-b11d-62fb32319103.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 60841 IP address blocks: 128.254.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:df:47:ac:b6:9a:a3:29:29:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=aac21e1b-55be-496e-84f6-88e6bead22b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:ea:38:1f:bf:02:6f:91:5d:d2:20:da:48: 12:51:13:42:c0:23:3f:22:89:d2:30:bb:0a:9b:22: d9:a9:c6:c4:2a:c3:6e:77:44:99:37:55:47:25:e7: a8:ad:2b:fb:83:5b:ab:f1:e2:66:36:97:27:e4:d6: 0f:4a:3b:df:1c:85:34:0c:69:34:24:9d:ab:c0:13: af:a1:9f:d9:c7:79:cb:ff:a4:0f:0e:a7:56:a2:c2: 80:27:67:85:dc:07:31:31:a1:9c:df:0a:77:21:05: 33:ab:64:7b:d3:cf:c7:28:9d:72:b2:5c:56:9d:71: ac:2f:ae:a4:63:da:66:d9:5d:76:cb:32:a2:d9:eb: b1:ce:84:1c:ea:5d:49:c2:77:0a:10:5f:08:44:0d: c8:e7:9b:99:9b:f2:44:7d:ed:f4:91:15:8c:2e:a2: ab:35:8e:c6:76:a7:4a:42:d4:44:9e:40:5a:96:95: 18:85:17:7f:2c:5e:d5:f3:6f:2b:2e:17:8f:9d:8a: cf:de:a9:18:26:c6:a3:50:a1:c1:7a:9a:1b:d6:78: 36:76:06:fa:3d:e4:84:52:ae:18:4e:e2:2d:c5:e3: dd:8b:b8:49:a5:59:9b:67:46:16:1e:87:87:46:80: 86:33:95:f9:0e:80:bb:03:17:46:97:13:ad:4f:42: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:78:47:81:8E:89:E2:C2:02:69:BF:8E:13:B9:5F:1E:7D:AA:74:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/5b9af106-8433-397c-b11d-62fb32319103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl X509v3 Authority Key Identifier: keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer sbgp-ipAddrBlock: critical IPv4: 128.254.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f8:e1:7d:0e:83:48:75:c8:32:98:7a:08:41:19:52:44:88: e1:6d:b5:ac:69:44:a3:fb:34:ee:90:d8:6c:96:94:1d:1d:43: bd:b9:6d:b1:c5:3b:ef:80:78:9b:31:c2:62:3e:4f:51:01:1d: 29:9c:c3:85:2a:ad:b6:18:69:c5:fb:cb:de:99:df:54:a8:1a: e5:b7:b9:79:38:11:30:f7:80:39:ff:85:13:0a:73:82:a2:c2: 19:70:a8:47:97:49:8f:81:f1:28:df:8b:76:29:8e:67:50:8e: 21:c4:44:95:79:ea:9d:1e:eb:a4:84:15:16:8a:c4:aa:93:fb: a6:b2:8f:33:cc:79:2e:56:95:f3:77:14:4b:5b:9f:76:05:f0: 7f:91:da:46:5f:42:71:05:27:e0:ca:01:07:4f:a4:c6:b6:cc: 76:10:24:05:c2:3b:1c:57:1d:1f:1a:b5:e1:57:10:f8:07:b5: 50:1e:86:dd:8e:98:a5:e7:c0:58:6a:6f:90:1e:0e:45:7a:88: d6:9f:03:ea:74:aa:e0:0d:21:98:0a:f8:8f:42:5d:50:e6:65: 63:5e:94:47:b7:8c:5f:94:ae:e6:2f:6e:93:0f:ea:41:e4:2f: 6c:06:5b:3b:50:9f:8a:17:12:43:58:fc:0b:6c:aa:f4:49:b0: c4:27:7d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxd9HrLaaoykpugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm MmZhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YWFjMjFlMWItNTViZS00OTZlLTg0ZjYtODhlNmJlYWQyMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsPqOB+/Am+RXdIg2kgSURNCwCM/IonSMLsK myLZqcbEKsNud0SZN1VHJeeorSv7g1ur8eJmNpcn5NYPSjvfHIU0DGk0JJ2rwBOv oZ/Zx3nL/6QPDqdWosKAJ2eF3AcxMaGc3wp3IQUzq2R708/HKJ1yslxWnXGsL66k Y9pm2V12yzKi2euxzoQc6l1JwncKEF8IRA3I55uZm/JEfe30kRWMLqKrNY7GdqdK QtREnkBalpUYhRd/LF7V828rLhePnYrP3qkYJsajUKHBepob1ng2dgb6PeSEUq4Y TuItxePdi7hJpVmbZ0YWHoeHRoCGM5X5DoC7AxdGlxOtT0KAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp4R4GOieLCAmm/jhO5Xx59qnTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvNWI5YWYxMDYtODQzMy0z OTdjLWIxMWQtNjJmYjMyMzE5MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx ZmE1MGYyZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD44X0Og0h1yDKYeghBGVJEiOFttaxpRKP7NO6Q2GyWlB0dQ725bbHF O++AeJsxwmI+T1EBHSmcw4UqrbYYacX7y96Z31SoGuW3uXk4ETD3gDn/hRMKc4Ki whlwqEeXSY+B8Sjfi3YpjmdQjiHERJV56p0e66SEFRaKxKqT+6ayjzPMeS5WlfN3 FEtbn3YF8H+R2kZfQnEFJ+DKAQdPpMa2zHYQJAXCOxxXHR8ateFXEPgHtVAeht2O mKXnwFhqb5AeDkV6iNafA+p0quANIZgK+I9CXVDmZWNelEe3jF+UruYvbpMP6kHk L2wGWztQn4oXEkNY/AtsqvRJsMQnfYw= -----END CERTIFICATE-----Generated at Wed Jul 2 23:20:42 2025 by rpki-client