$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa File: dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa (raw, json) Hash identifier: VE7GO3dYe8sccqU3UBE0jlM84MNu17sPlQGMX8kbe4g= Subject key identifier: C3:C7:7C:78:C5:D7:3E:87:CB:CD:89:50:67:17:CE:14:67:AB:E6:3C Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A0C05645ADE484CA2E8A06200 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 15313 IP address blocks: 147.124.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:64:5a:de:48:4c:a2:e8:a0:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=259d9bc9-3d4b-4b40-a46d-c4e3883f0907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a2:0e:5f:8c:ac:3a:46:28:1a:20:f5:28:ca: d3:fd:80:cd:3c:df:b5:1b:8f:33:6e:95:2d:02:3b: 2a:d6:8f:88:ab:61:9c:52:a3:e3:b8:8b:4f:1a:47: 17:f1:cf:ad:c6:3d:d0:c0:d7:a4:bf:fc:ff:7d:dd: ea:7f:4f:ec:ba:b4:fc:04:72:45:e0:e0:cb:09:eb: 2e:95:b2:82:d7:b5:5e:2d:69:5d:53:90:6b:be:d4: 5c:54:50:d4:b3:0c:95:67:71:6f:fc:66:a2:e1:09: c2:ef:41:29:2e:fd:af:ef:c2:77:bf:2f:2d:41:23: ce:ef:14:eb:50:dc:ea:fb:a9:9a:b6:1b:2c:20:92: 51:0b:fd:4a:71:f3:d4:02:f0:d5:33:65:02:da:8c: 58:7f:4c:f8:2e:81:a7:5a:5b:d3:56:9b:10:5e:e4: 7b:f4:58:da:f1:87:84:77:5c:ff:49:27:8d:37:fe: ce:78:05:89:8f:18:22:5b:22:4d:32:96:f9:e0:f0: 67:52:69:35:ba:3e:3e:35:1b:2b:76:b2:fa:0d:77: 30:19:8d:91:9b:f3:45:ad:46:c4:cd:9f:ac:97:82: 1d:a2:e9:10:1a:89:e3:eb:23:52:dd:fe:77:4d:9a: c9:81:ec:7c:56:e8:9e:01:bf:14:4e:a7:34:e0:02: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C7:7C:78:C5:D7:3E:87:CB:CD:89:50:67:17:CE:14:67:AB:E6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f4:21:98:b7:c3:24:97:c9:54:d8:48:9a:69:cc:9e:bf:92: c6:2e:26:0a:9c:18:a7:16:4a:64:57:16:ee:31:95:93:be:72: c1:c3:dd:39:34:46:71:ac:9f:96:a5:55:91:75:e5:66:bb:c7: 96:3a:07:1c:cf:da:5e:e4:a1:4d:b9:45:5b:7c:34:a1:25:fd: 4f:ee:6f:34:3b:78:39:04:86:56:d2:4f:45:1f:29:14:fe:bd: 20:c2:4a:44:32:47:32:be:02:1c:b7:f5:00:90:1a:0c:fb:5f: 1f:2d:7d:54:0b:dd:17:0c:7f:fd:5d:20:84:fc:8f:df:ee:3b: 70:55:77:da:c6:fc:1c:1b:40:77:ae:91:6f:93:59:26:1b:d1: db:c0:15:ab:3e:b0:08:60:2a:21:94:75:21:4c:ef:17:66:57: ca:a1:9b:91:87:90:12:77:d7:50:74:f8:f0:50:1d:83:a6:f9: a8:f3:d0:68:bb:14:de:68:89:87:a9:b6:c3:a5:ff:77:7a:6f: ac:1a:c3:a3:2b:ca:df:72:53:54:cf:1c:9c:45:ca:bb:25:37: 72:e5:fb:35:96:ab:f5:fa:5a:29:cf:49:24:8e:cc:9f:76:9c: 41:48:14:25:e0:d5:db:19:7a:e8:e7:84:e9:b5:58:a9:1d:4c: 43:c9:3f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWRa3khMouigYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MjU5ZDliYzktM2Q0Yi00YjQwLWE0NmQtYzRlMzg4M2YwOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86IOX4ysOkYoGiD1KMrT/YDNPN+1G48zbpUt Ajsq1o+Iq2GcUqPjuItPGkcX8c+txj3QwNekv/z/fd3qf0/surT8BHJF4ODLCesu lbKC17VeLWldU5BrvtRcVFDUswyVZ3Fv/Gai4QnC70EpLv2v78J3vy8tQSPO7xTr UNzq+6mathssIJJRC/1KcfPUAvDVM2UC2oxYf0z4LoGnWlvTVpsQXuR79Fja8YeE d1z/SSeNN/7OeAWJjxgiWyJNMpb54PBnUmk1uj4+NRsrdrL6DXcwGY2Rm/NFrUbE zZ+sl4IdoukQGonj6yNS3f53TZrJgex8VuieAb8UTqc04AIG+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPHfHjF1z6Hy82JUGcXzhRnq+Y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZGFjYjdkYjUtZjNlMy0z MGY0LTkwYTktNmZhOWMwNmZjOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL0IZi3wySXyVTYSJppzJ6/ksYuJgqcGKcWSmRXFu4xlZO+csHD3Tk0 RnGsn5alVZF15Wa7x5Y6BxzP2l7koU25RVt8NKEl/U/ubzQ7eDkEhlbST0UfKRT+ vSDCSkQyRzK+Ahy39QCQGgz7Xx8tfVQL3RcMf/1dIIT8j9/uO3BVd9rG/BwbQHeu kW+TWSYb0dvAFas+sAhgKiGUdSFM7xdmV8qhm5GHkBJ311B0+PBQHYOm+ajz0Gi7 FN5oiYeptsOl/3d6b6waw6Mryt9yU1TPHJxFyrslN3Ll+zWWq/X6WinPSSSOzJ92 nEFIFCXg1dsZeujnhOm1WKkdTEPJP5c= -----END CERTIFICATE-----Generated at Mon Jun 30 00:56:24 2025 by rpki-client