$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa File: 32bae387-9a90-39b8-b5de-920b138b534b.roa (raw, json) Hash identifier: 0z/aQ+TzkxwslFQzvJaujlHnCuG1C0hqKbgMvgJZaL0= Subject key identifier: 48:B2:42:97:E1:B4:4F:E5:4F:65:2D:CB:DD:4A:54:9F:BC:8B:52:12 Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584A03A545157BDC2064293F5D80 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 46192 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:45:15:7b:dc:20:64:29:3f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=6122deb5-9a56-4cd9-aa81-feb7be92492f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:9d:09:89:b7:cf:2f:8e:f0:c6:97:a7:52: 9d:f3:2a:c1:74:d9:f8:9b:26:c4:0f:5b:c5:68:22: 4a:14:68:bf:2d:7d:94:5b:1d:7a:a0:0a:4f:d4:f3: f4:70:90:16:72:e4:8b:f9:a5:d8:28:c6:15:5e:37: ac:16:16:d7:e6:9e:29:50:38:0c:b9:15:82:28:10: 7e:ca:2c:6a:5e:20:43:f6:0f:b0:22:e6:91:67:38: 3f:25:01:cd:f3:1d:49:51:65:d6:bd:19:a8:51:c0: a5:2b:f1:4f:88:2a:54:98:f4:b1:04:cc:cf:75:03: 60:9f:55:5c:1d:22:22:6c:fc:e3:50:ff:79:37:77: 64:93:9e:99:3e:29:93:d9:76:f4:f3:9d:84:c5:ed: 04:8a:64:d2:a5:da:9f:9b:9e:bc:d8:75:11:91:31: 20:41:20:40:e1:32:ca:e1:a5:e5:42:56:fd:36:2f: 42:97:18:4d:0e:cd:f8:37:6b:65:33:58:5a:5a:f0: d0:5c:66:62:bf:92:fa:0a:2e:bd:a0:a0:e2:d2:af: 2d:a9:f4:8d:86:0a:16:c8:b7:18:ad:07:e6:d4:8f: 04:30:82:6e:6d:fa:52:c1:44:48:74:30:6e:89:09: b9:78:37:ec:aa:17:11:be:c5:70:25:19:b1:72:41: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B2:42:97:E1:B4:4F:E5:4F:65:2D:CB:DD:4A:54:9F:BC:8B:52:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:31:5c:e5:60:32:78:76:d2:49:74:ff:c8:4a:1a:e4:86:97: 6c:2e:70:b4:f5:ed:13:5d:96:7f:9b:d3:d8:8c:d1:33:3a:31: 5a:92:82:03:97:24:5e:e8:25:1e:94:3f:f7:39:3c:15:8e:31: d9:87:fa:80:e6:73:8d:9e:4e:3e:c9:f1:cc:e7:9e:76:71:51: 15:b7:eb:90:56:e3:a4:b0:13:c7:c3:15:f2:8e:8a:19:ef:c0: 66:7e:19:31:8a:b9:41:6d:59:57:b3:17:3c:ab:b8:89:b3:bd: e2:31:77:05:ea:5a:e6:01:bd:0f:4c:46:66:e9:a2:36:68:df: b3:96:58:be:85:ed:9a:4d:2f:53:d5:10:29:36:a6:93:f3:6e: dc:46:bf:96:c4:8b:d3:a0:b5:96:f9:82:d4:15:be:5b:1b:f1: f8:64:5f:21:93:dd:0f:f9:73:2c:c2:23:64:df:cf:88:e9:d4: 8c:e9:fb:3c:63:26:30:9c:6f:fe:2f:d4:61:bf:ca:42:ec:c6: d1:ed:0d:11:6f:ff:d3:4f:fe:3c:0d:ff:a7:28:3f:af:01:91: a4:33:6e:b9:9f:49:73:b8:e2:7b:0b:c2:48:05:48:5f:da:7d: 96:c7:db:d5:dc:06:90:b7:c7:1a:19:1f:9f:72:53:a5:c5:8d: 26:65:b0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUUVe9wgZCk/XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NjEyMmRlYjUtOWE1Ni00Y2Q5LWFhODEtZmViN2JlOTI0OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqdCYm3zy+O8MaXp1Kd8yrBdNn4mybED1vF aCJKFGi/LX2UWx16oApP1PP0cJAWcuSL+aXYKMYVXjesFhbX5p4pUDgMuRWCKBB+ yixqXiBD9g+wIuaRZzg/JQHN8x1JUWXWvRmoUcClK/FPiCpUmPSxBMzPdQNgn1Vc HSIibPzjUP95N3dkk56ZPimT2Xb0852Exe0EimTSpdqfm5682HURkTEgQSBA4TLK 4aXlQlb9Ni9ClxhNDs34N2tlM1haWvDQXGZiv5L6Ci69oKDi0q8tqfSNhgoWyLcY rQfm1I8EMIJubfpSwURIdDBuiQm5eDfsqhcRvsVwJRmxckFpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiyQpfhtE/lT2Uty91KVJ+8i1ISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMzJiYWUzODctOWE5MC0z OWI4LWI1ZGUtOTIwYjEzOGI1MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8xXOVgMnh20kl0/8hKGuSGl2wucLT17RNdln+b09iM0TM6MVqSggOX JF7oJR6UP/c5PBWOMdmH+oDmc42eTj7J8cznnnZxURW365BW46SwE8fDFfKOihnv wGZ+GTGKuUFtWVezFzyruImzveIxdwXqWuYBvQ9MRmbpojZo37OWWL6F7ZpNL1PV ECk2ppPzbtxGv5bEi9OgtZb5gtQVvlsb8fhkXyGT3Q/5cyzCI2Tfz4jp1Izp+zxj JjCcb/4v1GG/ykLsxtHtDRFv/9NP/jwN/6coP68BkaQzbrmfSXO44nsLwkgFSF/a fZbH29XcBpC3xxoZH59yU6XFjSZlsPE= -----END CERTIFICATE-----Generated at Tue Jul 1 12:12:56 2025 by rpki-client