$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa File: 973468d0-7226-3ff1-a216-3007302b0b90.roa (raw, json) Hash identifier: deTIy2GR1qJQvWCS45Ww2EIj8Q4HhJE01fsczHAAt3Y= Subject key identifier: C5:8D:07:A9:53:12:77:D4:F6:89:45:C9:FC:6C:A6:F1:CA:98:46:57 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584A466B8E4C97492F772A2D7F48 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa Signing time: Sun 22 Jun 2025 11:04:04 +0000 ROA not before: Sun 22 Jun 2025 11:04:04 +0000 ROA not after: Sat 20 Sep 2025 11:04:04 +0000 asID: 30313 IP address blocks: 152.216.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:6b:8e:4c:97:49:2f:77:2a:2d:7f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Jun 22 11:04:04 2025 GMT Not After : Sep 20 11:04:04 2025 GMT Subject: CN=59f24284-1a98-4b6a-a10c-631ee7c2bd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:fe:18:ef:53:f7:78:35:bb:6d:6f:71:d6: 9a:88:30:a6:17:2a:e4:df:7b:cd:17:b5:2d:4f:11: b5:90:5d:4d:a3:e1:d6:c0:0d:b7:de:60:71:cc:06: 1d:8f:60:2a:27:e3:77:35:d9:60:a5:3c:c1:60:6a: 19:77:a9:fc:a0:41:b7:7b:6a:bb:a4:5c:46:ef:79: 1f:38:f2:5d:7f:e1:dc:80:a8:00:8a:16:3f:75:da: 43:00:86:a1:27:32:35:b3:7d:9e:33:87:03:d5:66: 68:40:2c:ed:84:10:22:9f:ec:9c:9a:ed:eb:89:76: c2:bd:4b:c4:d5:e4:c5:4e:dc:7f:4b:f8:6d:bb:2d: 2d:5b:8d:f7:43:2f:73:36:6b:0b:3d:a7:f3:ff:27: f7:47:8b:db:94:46:f8:b5:56:cc:8b:6f:58:b0:8a: ac:ce:77:9a:ff:6c:19:2f:59:3c:40:23:e1:2a:88: bd:da:2d:ab:47:29:4a:53:4e:ca:9f:02:42:09:c4: 0e:69:aa:2f:b6:40:08:ea:30:73:46:9a:5a:ad:df: 89:05:55:a1:b6:f8:de:55:5f:33:a1:57:92:42:56: cf:02:6a:0f:c5:a8:63:99:b2:03:63:10:ad:64:f4: 46:8c:a7:48:c9:92:70:47:c7:55:70:66:62:32:26: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8D:07:A9:53:12:77:D4:F6:89:45:C9:FC:6C:A6:F1:CA:98:46:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:86:df:e4:9c:db:46:16:13:72:e8:ff:86:8d:47:b0:ca:71: 34:4a:92:b8:d5:5a:19:c2:97:53:27:eb:b0:db:5f:9c:29:b1: ea:f0:83:ae:f2:5c:62:9d:20:42:34:99:73:b5:20:39:ec:f0: 36:6e:f2:0b:bb:f5:c2:43:59:06:a0:d6:98:82:2f:66:9d:c4: 36:7a:35:93:ec:1d:4b:f6:13:48:4b:94:0d:e3:e5:71:95:e7: 4d:56:fd:f9:a6:66:7d:b4:d7:d6:5b:f1:3b:ab:38:2b:ab:42: 2f:62:b9:a4:3b:72:23:8d:e6:0c:e1:2e:5c:c4:34:3d:c0:b0: f4:92:6b:52:b1:f7:64:9a:92:41:c4:ac:63:12:1f:87:0d:0f: da:a8:6e:ab:5c:46:f1:74:3d:6b:48:79:9e:f2:fc:c1:4c:cf: 6e:1e:0d:5b:1c:af:c8:05:80:e8:25:c5:49:67:dd:25:ec:e1: f9:34:49:fa:9e:f0:15:e5:37:6d:d1:42:90:a6:40:27:ed:69: c5:b1:e9:51:4d:97:f1:4c:8d:f8:4b:e4:b8:de:51:c8:10:61: 1b:9a:cd:ec:2a:ab:46:10:fd:eb:c3:b7:c9:f9:18:bf:32:ea: 99:04:02:0b:a7:de:a1:aa:27:b3:29:ee:d9:06:d3:e2:e7:00: c6:6f:82:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGa45Ml0kvdyotf0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDYyMjExMDQwNFoXDTI1MDkyMDExMDQwNFowLzEtMCsGA1UEAxMk NTlmMjQyODQtMWE5OC00YjZhLWExMGMtNjMxZWU3YzJiZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpz+GO9T93g1u21vcdaaiDCmFyrk33vNF7Ut TxG1kF1No+HWwA233mBxzAYdj2AqJ+N3NdlgpTzBYGoZd6n8oEG3e2q7pFxG73kf OPJdf+HcgKgAihY/ddpDAIahJzI1s32eM4cD1WZoQCzthBAin+ycmu3riXbCvUvE 1eTFTtx/S/htuy0tW433Qy9zNmsLPafz/yf3R4vblEb4tVbMi29YsIqsznea/2wZ L1k8QCPhKoi92i2rRylKU07KnwJCCcQOaaovtkAI6jBzRppard+JBVWhtvjeVV8z oVeSQlbPAmoPxahjmbIDYxCtZPRGjKdIyZJwR8dVcGZiMiYgnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWNB6lTEnfU9olFyfxspvHKmEZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvOTczNDY4ZDAtNzIyNi0z ZmYxLWEyMTYtMzAwNzMwMmIwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGG3+Sc20YWE3Lo/4aNR7DKcTRKkrjVWhnCl1Mn67DbX5wpserwg67y XGKdIEI0mXO1IDns8DZu8gu79cJDWQag1piCL2adxDZ6NZPsHUv2E0hLlA3j5XGV 501W/fmmZn2019Zb8TurOCurQi9iuaQ7ciON5gzhLlzEND3AsPSSa1Kx92SakkHE rGMSH4cND9qobqtcRvF0PWtIeZ7y/MFMz24eDVscr8gFgOglxUln3SXs4fk0Sfqe 8BXlN23RQpCmQCftacWx6VFNl/FMjfhL5LjeUcgQYRuazewqq0YQ/evDt8n5GL8y 6pkEAgun3qGqJ7Mp7tkG0+LnAMZvguk= -----END CERTIFICATE-----Generated at Tue Jul 1 16:52:41 2025 by rpki-client