$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa File: f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa (raw, json) Hash identifier: qZAM8DK0DYVMEdYcwYNA5uYeCRaUI4Hx10vkJ8wTWcI= Subject key identifier: B2:15:F7:F2:72:1C:33:7A:12:93:E8:85:41:F2:0C:9D:89:D0:10:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A480ADF709358F82CBA2C5580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 30036 IP address blocks: 150.195.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:df:70:93:58:f8:2c:ba:2c:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=3ff24add-3cdd-4b76-b297-ef897ca6c273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9a:09:8b:04:4d:75:1f:60:87:2f:02:4e:87: 87:e1:44:06:68:83:df:39:03:38:86:c9:c2:cb:15: 0c:e9:27:93:18:56:1b:78:a4:77:42:f6:19:ab:c1: 03:ef:19:e3:cf:9e:b1:19:54:ef:6a:1b:ec:ed:70: 0f:88:b2:84:ca:f4:65:5e:6f:62:ad:2d:8a:86:6a: d5:c1:3d:8e:40:79:0f:61:cb:bb:89:f7:c4:72:88: 3f:9f:67:a7:22:2b:1a:bc:cf:d3:58:16:99:6e:f0: 18:90:7a:bd:a9:64:6e:cd:07:85:6a:4f:0c:fc:ba: 3d:dc:8c:a9:7b:dd:7a:38:ee:b2:86:6a:fc:4b:3d: 20:b4:71:94:4c:b1:9b:a4:89:73:dd:e8:73:85:24: d3:5d:f5:12:d9:2b:c3:09:e4:9b:f1:a1:72:69:ba: 58:ab:74:7f:c3:ed:99:46:44:ec:67:00:26:ee:96: fd:22:bc:e2:b4:84:89:9b:39:29:f3:8b:fa:3c:80: 04:a9:0a:3e:14:a2:6e:15:9c:97:91:81:a3:a9:a7: 97:c4:12:de:bc:b7:ba:db:ab:5c:f0:b3:7d:96:67: 60:fa:50:09:ba:03:18:18:45:99:0c:68:78:fa:3a: 82:27:83:20:88:d2:03:e0:d0:13:0b:42:0d:3d:83: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:15:F7:F2:72:1C:33:7A:12:93:E8:85:41:F2:0C:9D:89:D0:10:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5338cb2-13a0-3da8-9e5d-721193d0be3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:54:df:c1:19:13:d5:cd:87:76:77:c1:f3:a2:0f:85:31:84: a4:43:46:e6:ec:fa:03:b8:c2:b5:a6:f8:0b:44:ff:73:de:e3: d3:1a:4b:56:cc:25:75:6e:75:42:c1:94:70:20:54:eb:7f:13: 49:e3:9d:1c:ed:2b:2a:ae:fc:0c:24:2a:c6:0d:7f:5d:1a:d1: 20:bc:3f:9a:e6:56:cd:91:f8:8a:b6:73:66:f6:ee:d5:86:11: 58:e7:b9:78:d7:0e:e2:64:0e:b2:33:95:9b:71:4c:d2:01:09: e8:f5:98:d2:89:7f:f8:d8:62:91:9c:cc:5d:44:47:88:74:28: 17:3f:c8:8e:e3:4c:9a:83:20:95:72:db:71:4a:91:4c:f9:b8: 67:40:3d:7d:81:fe:1d:7d:a6:c7:9e:90:1e:fd:89:d9:e4:5e: 31:1e:95:33:81:77:35:ca:7f:e1:ec:77:16:ef:2a:c2:49:44: 9d:ed:a2:a8:ba:ff:e7:5f:b6:13:ed:9e:a3:31:64:cc:75:47: 89:23:1c:dc:3d:43:80:51:4d:cc:1f:80:e0:ca:e4:68:00:ac: f2:73:c6:1a:d4:f3:45:61:0a:12:5e:7f:fa:f2:ab:b3:4c:cb: 0c:32:b6:39:d0:f3:28:08:02:98:d7:1f:9d:15:4c:e2:53:f1: b2:50:3b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICt9wk1j4LLosVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk M2ZmMjRhZGQtM2NkZC00Yjc2LWIyOTctZWY4OTdjYTZjMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpoJiwRNdR9ghy8CToeH4UQGaIPfOQM4hsnC yxUM6SeTGFYbeKR3QvYZq8ED7xnjz56xGVTvahvs7XAPiLKEyvRlXm9irS2KhmrV wT2OQHkPYcu7iffEcog/n2enIisavM/TWBaZbvAYkHq9qWRuzQeFak8M/Lo93Iyp e916OO6yhmr8Sz0gtHGUTLGbpIlz3ehzhSTTXfUS2SvDCeSb8aFyabpYq3R/w+2Z RkTsZwAm7pb9IrzitISJmzkp84v6PIAEqQo+FKJuFZyXkYGjqaeXxBLevLe626tc 8LN9lmdg+lAJugMYGEWZDGh4+jqCJ4MgiNID4NATC0INPYMHwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIV9/JyHDN6EpPohUHyDJ2J0BCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUzMzhjYjItMTNhMC0z ZGE4LTllNWQtNzIxMTkzZDBiZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZU38EZE9XNh3Z3wfOiD4UxhKRDRubs+gO4wrWm+AtE/3Pe49MaS1bM JXVudULBlHAgVOt/E0njnRztKyqu/AwkKsYNf10a0SC8P5rmVs2R+Iq2c2b27tWG EVjnuXjXDuJkDrIzlZtxTNIBCej1mNKJf/jYYpGczF1ER4h0KBc/yI7jTJqDIJVy 23FKkUz5uGdAPX2B/h19pseekB79idnkXjEelTOBdzXKf+HsdxbvKsJJRJ3toqi6 /+dfthPtnqMxZMx1R4kjHNw9Q4BRTcwfgODK5GgArPJzxhrU80VhChJef/ryq7NM ywwytjnQ8ygIApjXH50VTOJT8bJQO4U= -----END CERTIFICATE-----Generated at Sun Jun 29 22:56:41 2025 by rpki-client