$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa File: a157c38f-dc2b-375e-818d-d69613c22af4.roa (raw, json) Hash identifier: s/sfuOBKXLXJfcMaqNnlfz+khvGBYiRYLf1APjiX5yM= Subject key identifier: 12:3C:45:44:24:21:35:93:3C:B3:6E:73:75:8A:65:A5:E4:B1:96:FA Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD66967DDDBDE2023DB80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 7106 IP address blocks: 216.255.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d6:69:67:dd:db:de:20:23:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=faaa248e-1fe3-4c95-ac91-88a4e4048f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:ed:c0:fc:3e:87:6b:49:e7:93:11:5d:4c: c4:4c:d7:f4:7f:28:90:19:65:18:c6:a2:c0:48:6e: 68:f8:ff:e3:8a:ec:5f:4b:ce:81:19:08:52:55:1e: 83:cb:8f:d0:22:34:ee:ca:a1:4d:63:97:2c:2b:a6: ab:ef:82:f5:ad:cf:aa:9e:bb:35:76:fb:5e:1e:b6: 91:c6:ec:0f:d3:a1:8a:fb:4d:d8:46:7f:ac:6e:a0: 07:30:9b:43:52:a5:39:44:7d:6d:da:17:5e:65:49: ca:bf:22:50:db:52:c6:37:fc:13:d9:cc:5a:95:12: 5a:0e:78:47:84:2c:46:d1:4a:cb:4e:e2:c0:5d:bd: 19:30:b9:de:78:79:08:b4:0c:db:29:37:4e:c0:7b: f7:70:6f:ca:58:1e:44:d7:05:89:a4:74:5c:69:df: b5:60:31:36:77:b2:5e:a4:1b:1c:ad:b7:ab:f3:66: 30:3c:35:bc:27:df:09:88:c4:74:ed:55:b0:90:23: 3c:63:cf:fc:c4:96:9a:9f:22:ad:51:a6:29:9c:e5: 81:c0:fd:54:c5:cf:22:a5:4b:84:ef:3a:77:23:ea: fe:89:6b:26:df:09:01:18:75:d5:a1:d3:29:ac:66: 18:f2:eb:32:9d:ee:ea:b5:4e:55:7e:68:27:2d:ec: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3C:45:44:24:21:35:93:3C:B3:6E:73:75:8A:65:A5:E4:B1:96:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:af:43:9e:96:4f:6c:fb:9b:36:d0:fc:5a:30:da:1f:fe:2a: 54:40:6c:b7:73:ca:29:c3:b0:9f:76:62:f6:84:06:64:71:44: 9b:45:37:4e:a3:51:0d:57:75:d3:46:eb:3b:02:cf:4a:c6:d5: ed:fa:82:58:97:d8:10:9c:bc:61:a1:81:43:1e:39:1f:45:fc: cf:11:39:f7:06:37:e2:27:11:d3:3e:d4:70:95:cb:2b:88:3d: 73:5f:e8:18:60:98:23:76:a4:61:db:40:43:96:36:96:40:84: b6:08:a7:4b:c5:7c:d3:c3:ca:8f:ed:28:7c:94:83:b7:40:35: 93:64:be:90:24:1d:50:fe:c0:77:66:b1:19:f8:0a:e2:76:5d: e1:12:a4:3f:77:ab:b6:92:d1:22:56:54:a6:dd:64:9f:99:4f: 2a:f1:3f:59:36:58:6f:14:22:7d:a4:58:b0:6c:57:b6:a5:f1: 20:47:0e:0a:da:e6:33:3c:55:54:49:b2:75:ec:6e:36:bb:f5: 1b:fa:34:1d:f7:e3:f7:46:3b:1c:46:eb:ad:2c:57:38:22:6f: 12:71:56:44:5e:39:4f:45:73:e2:93:82:a3:40:19:bb:e9:31: ac:1e:1c:8a:ca:a7:f8:00:29:07:36:fd:eb:3c:0e:64:b7:94: db:d4:ac:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539ZpZ93b3iAj24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk ZmFhYTI0OGUtMWZlMy00Yzk1LWFjOTEtODhhNGU0MDQ4ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz7twPw+h2tJ55MRXUzETNf0fyiQGWUYxqLA SG5o+P/jiuxfS86BGQhSVR6Dy4/QIjTuyqFNY5csK6ar74L1rc+qnrs1dvteHraR xuwP06GK+03YRn+sbqAHMJtDUqU5RH1t2hdeZUnKvyJQ21LGN/wT2cxalRJaDnhH hCxG0UrLTuLAXb0ZMLneeHkItAzbKTdOwHv3cG/KWB5E1wWJpHRcad+1YDE2d7Je pBscrber82YwPDW8J98JiMR07VWwkCM8Y8/8xJaanyKtUaYpnOWBwP1Uxc8ipUuE 7zp3I+r+iWsm3wkBGHXVodMprGYY8usyne7qtU5VfmgnLexaqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI8RUQkITWTPLNuc3WKZaXksZb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYTE1N2MzOGYtZGMyYi0z NzVlLTgxOGQtZDY5NjEzYzIyYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2P8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWvQ56WT2z7mzbQ/Fow2h/+KlRAbLdzyinDsJ92YvaEBmRxRJtFN06j UQ1XddNG6zsCz0rG1e36gliX2BCcvGGhgUMeOR9F/M8ROfcGN+InEdM+1HCVyyuI PXNf6BhgmCN2pGHbQEOWNpZAhLYIp0vFfNPDyo/tKHyUg7dANZNkvpAkHVD+wHdm sRn4CuJ2XeESpD93q7aS0SJWVKbdZJ+ZTyrxP1k2WG8UIn2kWLBsV7al8SBHDgra 5jM8VVRJsnXsbja79Rv6NB334/dGOxxG660sVzgibxJxVkReOU9Fc+KTgqNAGbvp MaweHIrKp/gAKQc2/es8DmS3lNvUrEo= -----END CERTIFICATE-----Generated at Mon Jun 30 17:36:41 2025 by rpki-client