$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa File: 91d55642-0c47-39e6-9f01-b3db6078eb51.roa (raw, json) Hash identifier: dtJgJ3LkJeonFoRGQvAtjZQtObi5EKlbT7hqpeT/aps= Subject key identifier: 45:5C:31:78:B1:61:0C:04:DA:96:6F:12:B2:8D:6C:67:B7:E6:0C:BA Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F43285849F2E52BE5793E1D772BC05200 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 30165 IP address blocks: 147.253.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2b:e5:79:3e:1d:77:2b:c0:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=bb66420d-3992-4c1f-b8d6-a70072e3da4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:cc:e9:a4:74:48:6e:44:c5:b5:1e:ef:66: 0d:7c:68:1f:6c:cb:ed:33:ae:ab:db:c5:42:6a:a1: 1e:73:21:28:f3:41:3d:c0:50:4f:45:59:f9:49:64: 1c:3e:a7:21:16:e2:a9:74:6f:3a:b7:2f:28:f6:c5: 4a:ec:86:0c:63:3b:a9:73:9a:09:1e:43:9a:09:24: 8d:b4:ed:06:de:ec:8b:26:7b:5c:75:41:f5:eb:5a: 8e:7d:21:5d:67:d0:1d:7c:8f:0f:3d:d4:8c:73:10: 65:dd:1c:a4:8d:58:b1:d3:25:ca:2f:af:6b:ee:df: 49:b5:41:20:db:39:26:06:fd:2a:1a:f1:f8:02:b8: 14:ca:ad:04:08:44:81:05:57:a6:df:8f:86:63:a8: 73:0f:29:be:d0:d6:26:b2:c6:1a:51:ee:1d:b5:ef: 6a:ce:0c:76:85:fb:9d:91:fa:3a:b7:fd:3b:eb:3d: d8:58:4f:d7:9f:3f:05:51:8d:39:4d:f2:3d:ed:94: 1c:84:ce:cf:49:0f:e5:d6:9e:bd:73:2d:3c:42:72: 6d:f3:9c:f7:fb:dd:e1:54:31:d9:1c:4f:fd:7b:52: 07:6c:bf:a4:ed:18:69:15:21:23:d2:d5:5e:67:45: 34:d5:da:24:51:94:07:74:85:1f:b5:ca:ea:17:b6: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:31:78:B1:61:0C:04:DA:96:6F:12:B2:8D:6C:67:B7:E6:0C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv4: 147.253.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:30:d3:5e:9d:4f:75:06:f6:31:00:28:bc:3a:f9:1c:99:42: 33:ea:1e:1c:6f:8e:37:71:76:e7:cd:41:8e:0a:d6:95:68:62: 38:b8:ad:29:90:c1:61:43:81:39:ac:e5:dc:63:90:4d:ed:7b: a9:20:6c:41:2c:59:0e:9a:36:00:25:07:a6:b5:c5:08:7a:03: ba:08:5b:0d:87:e6:64:22:6a:99:9c:10:eb:e9:3b:7c:38:e0: 81:b3:38:f0:c2:ee:ba:e8:7e:07:da:a8:4c:04:f0:26:44:05: 88:b4:fc:b3:9a:24:90:c9:76:3d:89:0c:b9:73:0e:43:45:e4: eb:99:39:41:1d:80:0c:ca:8e:82:5d:cd:d9:0d:5e:41:c0:2c: e1:3a:4d:81:1a:cc:b7:5d:0c:05:d9:b6:26:3f:68:0c:11:16: 41:c2:c1:08:1c:45:fb:85:6b:8d:b5:88:d3:57:c1:14:3e:7d: 65:a5:3d:3b:fe:d8:11:e1:ae:96:3f:28:23:d7:0c:36:23:37: de:63:ad:ac:fe:2a:fd:89:4d:13:15:cb:78:dd:e8:a1:7f:6a: a4:82:de:09:c1:9e:61:fc:4d:a1:08:8d:ad:66:36:6e:e6:67: e9:e7:30:7e:e6:70:50:f1:98:c9:01:d7:8d:b9:2a:ca:0f:ff: 88:f5:3d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5SvleT4ddyvAUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk YmI2NjQyMGQtMzk5Mi00YzFmLWI4ZDYtYTcwMDcyZTNkYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3PM6aR0SG5ExbUe72YNfGgfbMvtM66r28VC aqEecyEo80E9wFBPRVn5SWQcPqchFuKpdG86ty8o9sVK7IYMYzupc5oJHkOaCSSN tO0G3uyLJntcdUH161qOfSFdZ9AdfI8PPdSMcxBl3RykjVix0yXKL69r7t9JtUEg 2zkmBv0qGvH4ArgUyq0ECESBBVem34+GY6hzDym+0NYmssYaUe4dte9qzgx2hfud kfo6t/076z3YWE/Xnz8FUY05TfI97ZQchM7PSQ/l1p69cy08QnJt85z3+93hVDHZ HE/9e1IHbL+k7RhpFSEj0tVeZ0U01dokUZQHdIUftcrqF7ZEawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVcMXixYQwE2pZvErKNbGe35gy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvOTFkNTU2NDItMGM0Ny0z OWU2LTlmMDEtYjNkYjYwNzhlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFk/3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUw016dT3UG9jEAKLw6+RyZQjPqHhxvjjdxdufNQY4K1pVoYji4rSmQ wWFDgTms5dxjkE3te6kgbEEsWQ6aNgAlB6a1xQh6A7oIWw2H5mQiapmcEOvpO3w4 4IGzOPDC7rrofgfaqEwE8CZEBYi0/LOaJJDJdj2JDLlzDkNF5OuZOUEdgAzKjoJd zdkNXkHALOE6TYEazLddDAXZtiY/aAwRFkHCwQgcRfuFa421iNNXwRQ+fWWlPTv+ 2BHhrpY/KCPXDDYjN95jraz+Kv2JTRMVy3jd6KF/aqSC3gnBnmH8TaEIja1mNm7m Z+nnMH7mcFDxmMkB1425KsoP/4j1Pa8= -----END CERTIFICATE-----Generated at Wed Jul 2 14:41:45 2025 by rpki-client