$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa File: 0dbdb44f-ac3e-376f-90dd-5a4848410620.roa (raw, json) Hash identifier: MoNo9ALfXa56kiqo16MyFVyaJrW3dwEB4jGPh9uoA8Q= Subject key identifier: 58:3D:8C:10:52:A9:B2:0F:00:03:AD:5D:B3:51:FE:06:9C:45:08:5A Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Certificate serial: 010D0C9F4328584A45403E9D575394D2E6089260 Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 192.157.36.0/23 maxlen: 24 2602:f7db::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3e:9d:57:53:94:d2:e6:08:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=bca798d4-61ac-4073-ae55-fc4069d9c9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:b6:dc:4e:b5:fd:6a:7c:2d:47:88:bb:cd: 16:e7:5a:d2:e4:6a:b5:6a:7b:a5:5f:1e:7e:7a:33: 92:98:1a:16:e5:33:c9:b8:90:fd:62:19:c4:fa:54: fa:26:de:d6:51:87:72:a8:ae:ef:1b:59:04:71:be: 85:e1:0d:b3:9c:3b:9a:8a:78:8a:77:83:9a:52:7a: a0:29:ff:6e:bf:f9:f0:39:83:9c:16:ad:6f:11:dc: 1a:97:63:8c:dc:14:a3:69:b6:29:7f:9a:7f:d5:58: c5:79:2e:ab:01:16:61:8d:5e:22:7a:1a:e7:29:f0: 2f:b7:e3:bc:3f:b8:ae:e0:52:dc:c6:18:e8:b4:ec: 47:f6:0f:57:d0:69:17:82:d9:79:e4:eb:69:21:5c: 43:eb:b5:14:af:a4:24:c7:4a:90:21:d2:4c:a3:ab: 55:85:bd:88:3c:82:e1:a9:2f:40:01:66:34:31:d2: 10:f7:ff:bb:65:2e:ae:ac:ef:47:06:4b:75:14:ba: 32:5f:b0:53:c0:fc:84:a0:72:e0:a8:a7:1f:bd:48: 5b:94:a9:e2:ed:67:a5:4f:bb:a3:d4:0c:6e:a2:3e: 5c:c4:aa:67:85:f1:2e:82:f2:c5:ff:a3:5e:d0:8c: fb:f1:1a:ce:2c:15:d6:4d:ac:33:99:22:cc:ce:eb: 54:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:8C:10:52:A9:B2:0F:00:03:AD:5D:B3:51:FE:06:9C:45:08:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl X509v3 Authority Key Identifier: keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer sbgp-ipAddrBlock: critical IPv4: 192.157.36.0/23 IPv6: 2602:f7db::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:68:17:91:78:db:c1:2f:da:46:c4:c9:54:3e:e5:98:49:48: 87:76:d2:b1:07:35:c6:a0:a7:4d:3f:bf:6e:a5:3a:e1:76:59: 45:db:b7:7b:af:8d:e9:b3:fd:fc:06:cc:0b:4d:04:bd:76:4e: e1:65:9d:6b:ea:9e:78:3b:c9:46:6a:d8:01:da:56:f1:53:da: e4:da:7b:9a:bc:08:75:3d:c1:56:3c:37:f8:e9:41:74:09:b7: 1c:7c:69:e6:e5:ae:aa:8e:05:03:d6:cf:79:15:1f:0a:ae:4c: ae:ef:30:95:14:f1:f9:4a:a1:90:42:4e:29:b2:cb:dd:d0:74: a6:ab:11:6a:f2:1f:78:7e:c0:e1:c6:c7:d9:03:99:de:2e:d1: 9e:b1:cb:53:7d:cf:cb:1c:d4:2c:02:13:76:32:53:ff:7f:cc: e3:e5:88:c5:e5:24:5a:86:2f:d6:e2:52:b5:7d:d5:c9:d7:71: b9:f3:d0:3f:66:a1:dd:3a:4a:c8:f8:f9:13:85:bc:19:7f:0a: 02:ea:e0:06:a2:41:f0:bf:f7:a6:df:7b:82:88:0c:6e:ce:45: 41:fb:58:d5:aa:ea:60:81:47:b8:e6:25:04:94:bc:72:c4:9b: 5b:62:fd:4b:63:6d:56:45:e6:0e:81:35:34:68:ef:4f:0c:52: 8d:79:8a:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpFQD6dV1OU0uYIkmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm MWE0MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk YmNhNzk4ZDQtNjFhYy00MDczLWFlNTUtZmM0MDY5ZDljOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7223E61/Wp8LUeIu80W51rS5Gq1anulXx5+ ejOSmBoW5TPJuJD9YhnE+lT6Jt7WUYdyqK7vG1kEcb6F4Q2znDuainiKd4OaUnqg Kf9uv/nwOYOcFq1vEdwal2OM3BSjabYpf5p/1VjFeS6rARZhjV4iehrnKfAvt+O8 P7iu4FLcxhjotOxH9g9X0GkXgtl55OtpIVxD67UUr6Qkx0qQIdJMo6tVhb2IPILh qS9AAWY0MdIQ9/+7ZS6urO9HBkt1FLoyX7BTwPyEoHLgqKcfvUhblKni7WelT7uj 1Axuoj5cxKpnhfEugvLF/6Ne0Iz78RrOLBXWTawzmSLMzutU1QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFg9jBBSqbIPAAOtXbNR/gacRQhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvMGRiZGI0NGYtYWMzZS0z NzZmLTkwZGQtNWE0ODQ4NDEwNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx YjNjMmYxYTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwJ0kMA4E AgACMAgDBgAmAvfbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYaBeReNvBL9pGxMlUPuWYSUiHdtKxBzXG oKdNP79upTrhdllF27d7r43ps/38BswLTQS9dk7hZZ1r6p54O8lGatgB2lbxU9rk 2nuavAh1PcFWPDf46UF0CbccfGnm5a6qjgUD1s95FR8Krkyu7zCVFPH5SqGQQk4p ssvd0HSmqxFq8h94fsDhxsfZA5neLtGesctTfc/LHNQsAhN2MlP/f8zj5YjF5SRa hi/W4lK1fdXJ13G589A/ZqHdOkrI+PkThbwZfwoC6uAGokHwv/em33uCiAxuzkVB +1jVqupggUe45iUElLxyxJtbYv1LY21WReYOgTU0aO9PDFKNeYrE -----END CERTIFICATE-----Generated at Sun Jun 29 01:56:11 2025 by rpki-client