$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa File: 85f04602-815a-374a-b7b8-25f3d69f600e.roa (raw, json) Hash identifier: g8r6bdsxbW8ygtLqj8ViOgsdGtr0KLWD6JWqHJ69a20= Subject key identifier: 46:60:4D:9A:11:96:25:E0:89:54:30:E9:73:3E:1C:65:DA:3C:1E:23 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A480ADF604D3864960258BDC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 19905 IP address blocks: 150.195.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:df:60:4d:38:64:96:02:58:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=b3a4e6d7-ec42-406c-9614-046f99a37943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:da:ea:ba:52:a2:4e:00:44:b0:13:0e:87: de:02:2d:5b:0c:bf:4e:03:3d:61:b6:ed:a3:3f:31: 7a:26:a5:8f:20:69:37:af:47:34:b4:98:8b:92:2d: a4:e7:be:c6:ed:4a:71:57:49:42:39:d0:f4:39:44: 29:1f:4b:0a:fa:c5:14:2d:b2:c7:b7:97:c0:58:b9: 3c:fe:aa:b7:f5:30:b1:15:5e:f1:ac:54:71:f2:8d: 05:23:93:34:0c:fe:d0:0a:81:a1:38:5e:63:02:11: 81:8e:28:e6:77:6c:29:80:f1:52:fb:a8:a1:5d:c0: 6f:48:d9:b9:79:fe:41:40:ef:6f:a1:34:92:54:c8: f2:8b:42:62:c1:3d:32:7e:43:6d:aa:cc:50:d0:d2: 27:3a:35:a9:38:62:9f:1f:1b:28:03:09:f3:59:45: 73:f0:40:6f:4d:91:a9:45:10:5b:bb:cb:ad:fb:bb: 5e:59:88:de:18:4f:4f:00:3d:7c:5b:b0:b1:b5:4c: bf:27:4c:2f:a9:78:23:40:c7:0f:58:99:28:e9:4b: d1:39:f0:21:21:43:f4:91:9f:5d:f1:b6:a9:de:fb: d7:01:b8:97:69:4b:6e:08:7c:ab:9a:21:e4:75:85: a6:b9:f0:8f:6d:30:27:59:74:3c:62:61:91:a7:7b: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:4D:9A:11:96:25:E0:89:54:30:E9:73:3E:1C:65:DA:3C:1E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8c:67:b5:db:68:be:96:bf:fc:80:b8:eb:e7:1a:08:1a:dd: c0:03:a4:16:16:d8:66:82:89:3b:4f:26:85:cf:0d:38:f8:05: 34:6a:c0:77:a1:0b:98:52:f3:af:2b:c2:02:c0:1f:38:33:44: 38:80:ec:09:7b:b0:48:f3:73:84:9e:3e:70:cf:29:64:db:bd: 73:3e:60:09:4d:f3:e9:b0:2d:89:67:19:90:64:79:1c:81:af: 11:1e:2c:c5:0c:de:72:86:fd:6f:9e:69:06:23:c4:58:26:c9: 20:cb:33:69:99:7a:2f:cb:b0:03:99:f9:3f:ca:b6:25:61:fc: cd:1f:57:0e:63:96:0d:d3:5f:d0:c4:02:86:5f:69:86:64:fa: 95:67:a4:6f:46:4a:ef:52:b2:a9:4a:84:4d:9c:6b:49:02:9a: 28:75:56:da:96:a1:47:39:32:bb:40:76:ec:cb:19:77:60:32: b3:6a:b0:1f:b4:78:8e:73:72:44:95:97:61:b2:9e:5e:bb:df: 09:a0:c3:df:28:64:d0:f3:b1:71:46:a9:db:49:e1:9e:70:1b: cc:d5:d7:32:c8:78:50:5b:5a:2c:47:41:ec:21:f7:4b:90:30: d6:83:f7:f0:86:40:39:78:28:1e:93:38:d0:0f:1d:74:e9:4e: aa:f1:d6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICt9gTThklgJYvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YjNhNGU2ZDctZWM0Mi00MDZjLTk2MTQtMDQ2Zjk5YTM3OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMba6rpSok4ARLATDofeAi1bDL9OAz1htu2j PzF6JqWPIGk3r0c0tJiLki2k577G7UpxV0lCOdD0OUQpH0sK+sUULbLHt5fAWLk8 /qq39TCxFV7xrFRx8o0FI5M0DP7QCoGhOF5jAhGBjijmd2wpgPFS+6ihXcBvSNm5 ef5BQO9voTSSVMjyi0JiwT0yfkNtqsxQ0NInOjWpOGKfHxsoAwnzWUVz8EBvTZGp RRBbu8ut+7teWYjeGE9PAD18W7CxtUy/J0wvqXgjQMcPWJko6UvROfAhIUP0kZ9d 8bap3vvXAbiXaUtuCHyrmiHkdYWmufCPbTAnWXQ8YmGRp3tX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZgTZoRliXgiVQw6XM+HGXaPB4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmMDQ2MDItODE1YS0z NzRhLWI3YjgtMjVmM2Q2OWY2MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKMZ7XbaL6Wv/yAuOvnGgga3cADpBYW2GaCiTtPJoXPDTj4BTRqwHeh C5hS868rwgLAHzgzRDiA7Al7sEjzc4SePnDPKWTbvXM+YAlN8+mwLYlnGZBkeRyB rxEeLMUM3nKG/W+eaQYjxFgmySDLM2mZei/LsAOZ+T/KtiVh/M0fVw5jlg3TX9DE AoZfaYZk+pVnpG9GSu9SsqlKhE2ca0kCmih1VtqWoUc5MrtAduzLGXdgMrNqsB+0 eI5zckSVl2Gynl673wmgw98oZNDzsXFGqdtJ4Z5wG8zV1zLIeFBbWixHQewh90uQ MNaD9/CGQDl4KB6TONAPHXTpTqrx1kc= -----END CERTIFICATE-----Generated at Sun Jun 29 11:01:02 2025 by rpki-client