$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa File: 9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa (raw, json) Hash identifier: 3HfeXOUvCU42qWKMIQDK2/oOV0ckNhvbgcYx7XLKchU= Subject key identifier: EB:F5:F0:B5:7B:C8:C2:80:E9:AD:32:70:30:82:B9:7D:FC:DC:70:DF Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584A49706D0FE67297A701F0FF00 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 25697 IP address blocks: 209.151.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:6d:0f:e6:72:97:a7:01:f0:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=7bf4c9a3-21a3-4e37-a349-7d0adb137f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:0b:97:d6:f7:2a:82:14:c3:0d:5a:4a:23: 84:f3:e0:12:5a:59:4c:42:89:37:13:81:2f:dd:d8: 15:bd:c1:12:b6:f8:f4:8e:ef:87:57:84:f8:71:41: 29:0d:b9:06:80:50:ee:50:1b:95:8d:bd:63:2d:11: 31:93:d1:0c:c2:1b:39:38:a9:17:54:01:86:a2:3c: 92:ef:89:aa:aa:7b:dd:d2:5c:97:8a:29:c6:a2:30: 7a:c5:2c:7a:af:31:f8:95:2d:15:1d:b5:c3:07:25: 7c:9d:9a:a3:8c:55:96:d1:03:4f:11:bd:bb:bb:24: 16:4f:01:46:6f:1a:6b:cb:48:6c:91:4f:29:71:91: 6c:8e:2c:27:34:ab:34:8c:4d:60:4a:02:06:54:0c: 75:3a:92:c8:94:77:4c:88:7f:f4:f8:76:0a:35:6d: 21:51:d7:a4:e7:d5:62:ca:d7:2f:69:cc:18:de:f6: 16:83:68:99:1e:13:e2:35:2c:89:02:5a:f9:2c:2d: 40:a3:6b:fa:20:3e:53:2b:28:2f:5b:a5:e1:70:08: 51:9b:95:9c:d8:d5:0f:45:9d:84:20:26:56:02:6b: 60:0c:97:1d:e9:53:c8:f2:ed:4d:8d:02:a3:57:6c: b5:d1:be:62:4a:cd:9a:ad:6d:bc:27:c3:1d:7e:ce: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F5:F0:B5:7B:C8:C2:80:E9:AD:32:70:30:82:B9:7D:FC:DC:70:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:df:0b:94:3a:d5:c3:e7:d9:d8:8a:c8:5b:91:3e:5f:c8:6f: 0e:00:e9:e2:d2:77:7b:23:86:f7:4a:09:81:31:a1:f2:c0:c2: 3f:1b:75:01:64:c6:1f:2c:b0:7f:55:00:73:88:28:59:11:bc: d1:59:aa:2a:69:d1:c5:79:e5:1c:65:40:63:6f:63:94:3f:4f: 09:66:6a:53:b3:54:89:0f:fd:3a:f7:86:63:4a:24:cb:ed:1c: d5:18:7f:b2:f8:ba:dc:34:4f:e7:6f:9a:e8:13:72:a1:52:a8: 6e:ee:ff:da:b5:e7:6a:4d:de:3f:9d:c1:51:6c:3b:6c:21:ed: a1:8d:fa:9d:b8:fb:a6:9c:ad:a6:d0:17:d6:76:5a:c5:47:db: d6:59:79:45:ad:93:60:52:b0:45:f8:6d:89:bc:47:3d:9e:ed: b2:ef:00:87:1e:c6:a3:8c:0f:43:3f:66:75:79:73:0f:8c:62: 6f:d9:90:37:38:33:15:87:08:ae:3e:c1:83:b5:2d:41:3f:1d: 04:25:56:1f:12:54:db:40:9c:73:a2:97:eb:e6:c5:c4:c7:27: 55:9f:6e:c0:66:64:fb:6c:db:f5:67:ce:55:6b:46:91:9f:ce: 59:d7:b5:a2:9f:03:12:2e:95:32:71:93:96:61:e8:eb:a9:3f: c8:fd:cb:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcG0P5nKXpwHw/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk N2JmNGM5YTMtMjFhMy00ZTM3LWEzNDktN2QwYWRiMTM3ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ULl9b3KoIUww1aSiOE8+ASWllMQok3E4Ev 3dgVvcEStvj0ju+HV4T4cUEpDbkGgFDuUBuVjb1jLRExk9EMwhs5OKkXVAGGojyS 74mqqnvd0lyXiinGojB6xSx6rzH4lS0VHbXDByV8nZqjjFWW0QNPEb27uyQWTwFG bxpry0hskU8pcZFsjiwnNKs0jE1gSgIGVAx1OpLIlHdMiH/0+HYKNW0hUdek59Vi ytcvacwY3vYWg2iZHhPiNSyJAlr5LC1Ao2v6ID5TKygvW6XhcAhRm5Wc2NUPRZ2E ICZWAmtgDJcd6VPI8u1NjQKjV2y10b5iSs2arW28J8Mdfs5PwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv18LV7yMKA6a0ycDCCuX383HDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvOWFjZjQ3YmEtODE5Ny0z NTk4LTk4ZmUtZDc1NDRiN2M2ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3fC5Q61cPn2diKyFuRPl/Ibw4A6eLSd3sjhvdKCYExofLAwj8bdQFk xh8ssH9VAHOIKFkRvNFZqipp0cV55RxlQGNvY5Q/TwlmalOzVIkP/Tr3hmNKJMvt HNUYf7L4utw0T+dvmugTcqFSqG7u/9q152pN3j+dwVFsO2wh7aGN+p24+6acrabQ F9Z2WsVH29ZZeUWtk2BSsEX4bYm8Rz2e7bLvAIcexqOMD0M/ZnV5cw+MYm/ZkDc4 MxWHCK4+wYO1LUE/HQQlVh8SVNtAnHOil+vmxcTHJ1WfbsBmZPts2/VnzlVrRpGf zlnXtaKfAxIulTJxk5Zh6OupP8j9y5E= -----END CERTIFICATE-----Generated at Mon Jun 30 08:42:04 2025 by rpki-client