$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa File: 4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa (raw, json) Hash identifier: qXFxKHJwHoLOEpAF1ZlVz8xv4dhora5R+4NzN8nwgz0= Subject key identifier: 85:E5:F2:EE:DD:8E:63:46:0D:22:76:5E:8C:80:DE:7C:EE:E4:A0:8B Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584A466C56481F5B9D00E4CD2E80 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa Signing time: Sun 22 Jun 2025 11:05:38 +0000 ROA not before: Sun 22 Jun 2025 11:05:38 +0000 ROA not after: Sat 20 Sep 2025 11:05:38 +0000 asID: 30313 IP address blocks: 152.216.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:6c:56:48:1f:5b:9d:00:e4:cd:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Jun 22 11:05:38 2025 GMT Not After : Sep 20 11:05:38 2025 GMT Subject: CN=db791f40-fec1-4b1a-beae-294e49754d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:b1:ec:69:6b:ab:e7:3c:91:d4:af:b4:4d: 2d:28:f8:e1:b8:07:cb:fe:ad:9f:01:6a:a9:e1:e9: 6e:be:73:5a:38:41:a5:ad:70:c4:8c:16:c7:25:22: 66:ee:18:22:d0:7c:af:c3:a8:5a:f2:da:39:ff:a5: 06:b1:d6:fc:b6:19:80:82:78:05:1d:d1:85:04:c1: 65:6e:b0:8c:39:fb:23:9b:07:32:40:54:73:a8:ef: e4:7f:58:c2:22:22:3a:e7:ee:73:54:cb:05:1c:4c: dd:bc:2f:32:00:ac:19:6e:98:5f:a4:b3:04:bf:82: d2:3a:51:cc:54:1b:ad:b8:e0:04:a5:d7:34:e1:bb: 4c:65:99:32:4c:0a:ee:be:db:44:3f:6c:c1:43:b2: 14:a3:92:64:e0:42:b8:e8:28:69:d2:15:03:d2:9b: 24:23:3e:b0:d4:b2:b9:29:36:85:31:e1:67:09:29: dd:8d:86:73:cd:69:1a:bf:7d:23:9b:97:fd:dd:e2: f9:f6:01:ad:5d:4d:52:a6:c2:46:ef:67:87:c3:16: 5e:40:a9:97:2a:a4:7f:72:7d:99:9b:20:38:22:49: 43:e1:4b:0a:10:e7:77:2c:8f:1b:f5:71:25:2c:0f: 57:ad:c6:95:31:aa:52:4c:36:9e:71:bf:5f:ae:d3: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E5:F2:EE:DD:8E:63:46:0D:22:76:5E:8C:80:DE:7C:EE:E4:A0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e2:93:5b:2e:8c:16:db:3b:ec:d0:3a:1d:b9:02:2a:38:a4: 70:b1:cc:de:53:3a:e3:3d:ec:ae:09:c2:06:de:01:ce:1b:55: b7:49:1f:e9:22:a1:a5:76:99:c5:cf:a3:c6:86:0d:c8:1b:8f: 20:37:5d:95:43:25:ec:89:43:73:2a:55:09:b3:85:96:6f:82: 76:4b:50:e6:74:a1:a0:21:29:b7:38:14:27:eb:5c:07:68:e5: dc:d9:96:fa:20:34:97:32:ce:b2:04:91:aa:8d:b7:61:42:d5: 0d:12:bf:7c:cb:00:b4:f2:8e:75:5b:de:06:dc:0f:6e:10:83: 93:09:3d:45:75:48:93:3f:31:c9:aa:79:f3:60:21:bd:4f:66: 6e:22:ff:23:94:22:e9:62:a0:aa:aa:4b:18:c6:9c:cf:db:3e: bb:01:3a:10:21:4e:40:f2:14:40:8c:9b:17:1d:e0:af:b9:8a: 5e:43:1a:02:9b:55:82:74:92:42:82:d8:ee:6c:f8:1d:7c:d5: c6:4e:c3:0d:33:b3:a7:50:e7:b4:e5:9f:ec:4f:de:08:9a:e6: 1a:49:4c:e1:6c:1e:a6:ab:df:35:21:e2:da:45:f6:67:9d:4e: 02:99:6d:6f:1b:bc:12:8a:0a:ad:8f:fb:af:13:6b:49:0d:d5: 58:58:46:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGbFZIH1udAOTNLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDYyMjExMDUzOFoXDTI1MDkyMDExMDUzOFowLzEtMCsGA1UEAxMk ZGI3OTFmNDAtZmVjMS00YjFhLWJlYWUtMjk0ZTQ5NzU0ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJax7Glrq+c8kdSvtE0tKPjhuAfL/q2fAWqp 4eluvnNaOEGlrXDEjBbHJSJm7hgi0Hyvw6ha8to5/6UGsdb8thmAgngFHdGFBMFl brCMOfsjmwcyQFRzqO/kf1jCIiI65+5zVMsFHEzdvC8yAKwZbphfpLMEv4LSOlHM VButuOAEpdc04btMZZkyTAruvttEP2zBQ7IUo5Jk4EK46Chp0hUD0pskIz6w1LK5 KTaFMeFnCSndjYZzzWkav30jm5f93eL59gGtXU1SpsJG72eHwxZeQKmXKqR/cn2Z myA4IklD4UsKEOd3LI8b9XElLA9XrcaVMapSTDaecb9frtPYmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXl8u7djmNGDSJ2XoyA3nzu5KCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvNGM0NmIwYWUtNDg0My0z Zjc4LWFlMTUtMWExYWEwMzJiMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ik1sujBbbO+zQOh25Aio4pHCxzN5TOuM97K4JwgbeAc4bVbdJH+ki oaV2mcXPo8aGDcgbjyA3XZVDJeyJQ3MqVQmzhZZvgnZLUOZ0oaAhKbc4FCfrXAdo 5dzZlvogNJcyzrIEkaqNt2FC1Q0Sv3zLALTyjnVb3gbcD24Qg5MJPUV1SJM/Mcmq efNgIb1PZm4i/yOUIulioKqqSxjGnM/bPrsBOhAhTkDyFECMmxcd4K+5il5DGgKb VYJ0kkKC2O5s+B181cZOww0zs6dQ57Tln+xP3gia5hpJTOFsHqar3zUh4tpF9med TgKZbW8bvBKKCq2P+68Ta0kN1VhYRh0= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:38 2025 by rpki-client