$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa File: f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa (raw, json) Hash identifier: tG03qU2OmRGxK/cHF/J444adAB1MKXh6MnNSu2F+9ek= Subject key identifier: 0D:4C:96:2F:F8:08:08:4F:F2:39:42:FE:D7:79:7B:6B:44:35:05:8C Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584A466CCC408F3DB144EE648900 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa Signing time: Sun 22 Jun 2025 11:06:34 +0000 ROA not before: Sun 22 Jun 2025 11:06:34 +0000 ROA not after: Sat 20 Sep 2025 11:06:34 +0000 asID: 30313 IP address blocks: 152.216.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:6c:cc:40:8f:3d:b1:44:ee:64:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Jun 22 11:06:34 2025 GMT Not After : Sep 20 11:06:34 2025 GMT Subject: CN=477a646a-199d-47f2-91a1-8fee7f50722d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:43:da:59:85:a3:1b:e8:18:cd:00:68:93: 21:60:b0:8f:6b:c9:a8:a4:73:be:e7:c9:1b:83:f9: e2:56:6b:ec:fa:cd:63:04:15:46:ef:97:20:48:a6: 1c:70:e1:12:24:a2:ee:ba:03:f2:d3:f5:43:4f:1c: 5d:cb:f5:fb:16:71:b8:9c:43:91:6d:9a:87:af:db: 69:27:84:20:8b:9f:7d:49:fb:d8:63:db:31:ba:d8: 88:16:3e:29:f5:d3:68:88:27:81:70:5d:77:7e:40: 01:db:80:bf:36:8d:81:bf:c1:0a:c0:92:ee:86:7e: 9f:67:46:31:4c:03:23:e3:9a:53:2a:2e:c8:18:01: a1:8c:72:39:a3:a9:ff:76:5a:96:3d:9c:61:67:be: a7:cc:7b:d3:38:24:1d:95:15:89:4e:ee:81:62:eb: ed:ec:68:43:11:15:57:e2:24:35:ca:75:f7:30:41: 23:a6:cf:57:57:2f:da:71:ae:0d:99:d0:60:e5:43: f4:57:60:53:c8:ff:30:1d:65:14:c3:26:4c:ae:39: b1:09:51:5b:10:dd:c6:93:0b:0f:c2:e0:35:be:ed: b6:00:9b:e5:ce:29:6a:f4:09:5e:7d:c9:27:7c:28: d2:fc:5a:da:9b:56:ed:4b:ee:5e:16:df:90:87:e0: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:96:2F:F8:08:08:4F:F2:39:42:FE:D7:79:7B:6B:44:35:05:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e9:04:25:38:1e:42:7a:b3:1c:b1:59:98:2b:fe:ad:36:19: e5:c6:ec:c9:74:a7:40:39:24:d5:0c:de:99:01:53:cf:46:09: fe:9d:1c:af:fb:2e:73:bc:4c:cc:f8:bb:d5:8f:f1:53:86:85: a6:75:d7:ce:20:c4:b5:06:41:26:5e:58:2f:41:81:c7:f3:01: 03:e3:03:eb:de:14:0d:84:45:9d:ce:c0:82:26:1a:f1:0e:7b: ad:ce:d3:e1:4f:f0:dd:80:8c:41:40:96:cc:96:7c:5a:c7:86: 00:a4:92:32:4a:6d:2d:52:49:54:07:06:77:0d:b1:84:31:e5: b5:c1:04:29:b7:11:59:29:09:23:61:04:0a:56:ad:c2:53:8a: 42:94:f9:8f:2a:a9:bd:11:b9:68:09:3a:be:9c:00:21:aa:88: f2:ef:e7:9b:f1:e9:5d:0d:ab:18:4f:62:04:65:4c:71:f2:bd: 15:c9:ab:8e:17:0c:f2:6d:8c:5e:7c:f6:dd:5c:a7:04:fc:b4: 0e:35:1a:39:2d:2d:3f:1c:a5:e5:d5:78:b0:42:db:26:4c:3b: f1:f9:c1:d5:ee:6e:df:f5:ae:29:46:05:37:fd:0e:a3:dc:9c: 6c:33:5c:3e:8a:b7:c0:1a:47:2a:2e:e1:e9:a2:c4:f1:9c:44: 7f:53:07:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGbMxAjz2xRO5kiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDYyMjExMDYzNFoXDTI1MDkyMDExMDYzNFowLzEtMCsGA1UEAxMk NDc3YTY0NmEtMTk5ZC00N2YyLTkxYTEtOGZlZTdmNTA3MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2tD2lmFoxvoGM0AaJMhYLCPa8mopHO+58kb g/niVmvs+s1jBBVG75cgSKYccOESJKLuugPy0/VDTxxdy/X7FnG4nEORbZqHr9tp J4Qgi599SfvYY9sxutiIFj4p9dNoiCeBcF13fkAB24C/No2Bv8EKwJLuhn6fZ0Yx TAMj45pTKi7IGAGhjHI5o6n/dlqWPZxhZ76nzHvTOCQdlRWJTu6BYuvt7GhDERVX 4iQ1ynX3MEEjps9XVy/aca4NmdBg5UP0V2BTyP8wHWUUwyZMrjmxCVFbEN3GkwsP wuA1vu22AJvlzilq9AlefcknfCjS/Fram1btS+5eFt+Qh+AjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1Mli/4CAhP8jlC/td5e2tENQWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvZjM0YzNlMWEtMTRjMC0z NzY4LTllYWUtZTUwZTQ0OTNlZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHpBCU4HkJ6sxyxWZgr/q02GeXG7Ml0p0A5JNUM3pkBU89GCf6dHK/7 LnO8TMz4u9WP8VOGhaZ1184gxLUGQSZeWC9BgcfzAQPjA+veFA2ERZ3OwIImGvEO e63O0+FP8N2AjEFAlsyWfFrHhgCkkjJKbS1SSVQHBncNsYQx5bXBBCm3EVkpCSNh BApWrcJTikKU+Y8qqb0RuWgJOr6cACGqiPLv55vx6V0NqxhPYgRlTHHyvRXJq44X DPJtjF589t1cpwT8tA41GjktLT8cpeXVeLBC2yZMO/H5wdXubt/1rilGBTf9DqPc nGwzXD6Kt8AaRyou4emixPGcRH9TBz4= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:44 2025 by rpki-client