$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa File: 87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa (raw, json) Hash identifier: duB6+Jb9xbzhbp0i3qCkZW51Uk47/UIlPox+I/zLCVc= Subject key identifier: E9:AA:59:A9:0A:46:A2:BF:57:9B:C6:99:97:65:9C:69:45:51:90:E4 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584A466BC7FD15D77B4F53A56E00 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa Signing time: Sun 22 Jun 2025 11:04:31 +0000 ROA not before: Sun 22 Jun 2025 11:04:31 +0000 ROA not after: Sat 20 Sep 2025 11:04:31 +0000 asID: 30313 IP address blocks: 152.216.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:6b:c7:fd:15:d7:7b:4f:53:a5:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Jun 22 11:04:31 2025 GMT Not After : Sep 20 11:04:31 2025 GMT Subject: CN=6de70d28-ccc0-4003-b43a-4c70f93c3ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:1d:a5:f2:12:48:80:94:61:95:d8:9c:ad: 25:38:f1:af:f6:5f:db:cb:83:06:f7:a3:32:4e:6d: cf:1f:5a:bf:19:c9:10:86:85:82:33:57:15:57:5d: 47:c4:8f:10:34:59:07:33:07:42:5a:03:a6:16:07: 0a:f8:31:0a:6f:e8:ff:77:34:af:57:9e:e3:92:d0: df:88:cd:51:ec:a2:e5:d6:9b:be:2d:1f:20:01:d4: 75:b9:96:e3:35:48:da:a4:25:e0:ac:26:94:09:98: 89:76:4a:02:71:f5:2f:1e:9a:0b:8c:52:9a:5b:8f: 1e:e7:ed:ba:64:9c:1c:34:66:28:63:7b:cc:3a:24: 76:bc:be:86:42:61:58:dc:1a:89:44:43:37:18:69: 3d:41:c5:b5:86:04:c2:6b:84:a3:16:cb:45:c3:20: 3e:a4:f4:e3:7b:63:3e:6d:3a:f6:8d:b7:90:61:14: f0:7c:d6:14:33:bf:93:81:a4:d3:c4:59:23:6c:9c: 0b:a7:cd:9a:2f:d2:03:4e:0d:70:66:95:2d:73:92: 98:1a:69:f7:d5:85:a6:76:62:b2:60:7a:40:64:8c: 90:81:05:c7:44:41:19:4e:f1:5e:c8:dc:f8:86:ae: ce:fe:38:28:99:b2:ab:e5:7f:1d:9b:62:1a:b0:e5: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:59:A9:0A:46:A2:BF:57:9B:C6:99:97:65:9C:69:45:51:90:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:39:c1:cc:1f:3d:c9:2c:a7:2e:16:bd:6c:3a:19:f7:b6:1c: 71:fc:e1:d4:b5:44:b9:99:c1:2f:55:bc:05:d1:9f:dc:e9:92: 58:40:0b:39:95:bf:3d:3c:4b:5e:65:5a:3a:37:1b:ea:e0:00: da:65:71:61:44:0a:44:15:c7:8e:9f:8c:67:87:51:3f:97:0a: fd:a0:22:47:51:b9:ee:29:ef:61:f7:69:d8:82:e9:1c:9f:58: 1f:c9:16:8c:1a:70:18:67:b7:92:75:3f:82:24:df:78:d4:a9: 07:dd:87:26:13:cd:cc:4f:82:69:9e:c9:bb:ab:e1:5c:b2:9f: 10:52:92:7d:7b:f3:c5:a9:27:c6:65:a1:34:6c:a9:b0:33:75: 31:09:3b:79:4d:f1:2e:95:23:02:3f:68:17:57:de:bc:7b:b1: ec:71:92:ad:86:5d:33:10:cc:79:fd:02:8a:8d:45:f6:37:d1: 0c:e5:9f:a0:9a:c5:45:be:3b:0e:d3:a0:9b:61:15:47:ab:ca: a5:06:74:9e:01:20:43:f5:f6:72:67:18:49:9a:47:6c:c9:de: d1:6d:df:86:ee:6f:98:3b:d2:0c:b9:94:62:ac:94:28:58:98: 05:74:92:eb:2c:92:c4:a6:0c:80:d3:6a:d3:ee:9d:39:ad:9d: 0f:c1:87:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGa8f9Fdd7T1OlbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDYyMjExMDQzMVoXDTI1MDkyMDExMDQzMVowLzEtMCsGA1UEAxMk NmRlNzBkMjgtY2NjMC00MDAzLWI0M2EtNGM3MGY5M2MzYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3odpfISSICUYZXYnK0lOPGv9l/by4MG96My Tm3PH1q/GckQhoWCM1cVV11HxI8QNFkHMwdCWgOmFgcK+DEKb+j/dzSvV57jktDf iM1R7KLl1pu+LR8gAdR1uZbjNUjapCXgrCaUCZiJdkoCcfUvHpoLjFKaW48e5+26 ZJwcNGYoY3vMOiR2vL6GQmFY3BqJREM3GGk9QcW1hgTCa4SjFstFwyA+pPTje2M+ bTr2jbeQYRTwfNYUM7+TgaTTxFkjbJwLp82aL9IDTg1wZpUtc5KYGmn31YWmdmKy YHpAZIyQgQXHREEZTvFeyNz4hq7O/jgombKr5X8dm2IasOUtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmqWakKRqK/V5vGmZdlnGlFUZDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvODdmYWJjNDctYWIxYi0z ZDA1LWJkOTktN2I3YjBhMjk5ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk5wcwfPckspy4WvWw6Gfe2HHH84dS1RLmZwS9VvAXRn9zpklhACzmV vz08S15lWjo3G+rgANplcWFECkQVx46fjGeHUT+XCv2gIkdRue4p72H3adiC6Ryf WB/JFowacBhnt5J1P4Ik33jUqQfdhyYTzcxPgmmeybur4VyynxBSkn1788WpJ8Zl oTRsqbAzdTEJO3lN8S6VIwI/aBdX3rx7sexxkq2GXTMQzHn9AoqNRfY30Qzln6Ca xUW+Ow7ToJthFUeryqUGdJ4BIEP19nJnGEmaR2zJ3tFt34bub5g70gy5lGKslChY mAV0kussksSmDIDTatPunTmtnQ/Bh0k= -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:56 2025 by rpki-client