$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8719b965-b472-3401-af06-30c55b3e59fc.roa File: 8719b965-b472-3401-af06-30c55b3e59fc.roa (raw, json) Hash identifier: t1k3wDK4DKA1evZ3aXPMA/v7QnG9RJEFKVqsE0lbB2I= Subject key identifier: 5C:82:4D:40:B6:F0:BD:62:41:B1:40:4A:AE:E8:A1:F8:A9:77:22:1B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FF5EB6B8FAC2687919E00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8719b965-b472-3401-af06-30c55b3e59fc.roa Signing time: Mon 16 Jun 2025 16:03:17 +0000 ROA not before: Mon 16 Jun 2025 16:03:17 +0000 ROA not after: Sun 14 Sep 2025 16:03:17 +0000 asID: 81 IP address blocks: 152.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:f5:eb:6b:8f:ac:26:87:91:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:17 2025 GMT Not After : Sep 14 16:03:17 2025 GMT Subject: CN=6bba1636-7469-4cb1-8e4c-6654c5cf1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:95:5c:a1:17:20:11:d9:b7:2e:95:41:f0: 00:7f:32:9a:33:4d:ed:0a:f4:05:56:12:1c:35:26: 86:6d:c2:7f:c4:8b:a6:58:16:c5:a5:f7:ea:6c:d7: 86:cb:da:4c:12:45:57:27:42:ca:d4:35:72:72:e1: ef:34:6e:6f:3e:6d:64:d6:db:55:2c:55:9f:13:92: 03:29:4a:fe:78:b9:c6:07:44:2f:d1:f8:62:40:82: 4f:98:c5:ec:ae:86:94:b7:62:b1:95:57:25:aa:90: b1:27:6e:97:85:ca:48:7f:de:40:0a:18:2e:69:1a: a2:17:50:ba:bc:13:bd:44:c3:76:18:a5:14:48:2c: 3f:37:54:81:7b:a1:00:64:79:f5:a7:7c:a0:11:aa: 94:4b:6b:da:75:af:58:83:cd:03:a2:de:b7:6a:23: ee:f6:90:77:2a:a9:47:d0:b4:ce:7d:36:18:9a:a8: 0f:81:f4:72:6f:f8:97:84:59:49:4b:ea:42:4e:95: 76:47:3f:82:4c:88:68:e2:3f:90:d9:fa:80:e5:0d: 77:e8:b7:be:3a:03:4f:79:1d:58:30:2c:84:19:87: 33:31:58:94:88:e4:7e:9e:7b:07:0b:36:02:2f:90: 9a:23:c7:71:2e:28:6e:e0:0b:a4:bb:cc:19:ad:70: 83:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:82:4D:40:B6:F0:BD:62:41:B1:40:4A:AE:E8:A1:F8:A9:77:22:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8719b965-b472-3401-af06-30c55b3e59fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.16.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:66:ed:34:0d:fa:10:d4:23:ad:1b:b9:40:85:9c:45:60:24: 78:27:a1:5b:df:00:18:f0:b1:5d:e0:90:4a:f1:bc:00:0e:1a: c8:a7:75:57:7d:58:eb:45:4f:4e:57:0d:d4:8b:87:e4:6c:65: 4a:95:42:61:79:43:14:d1:c9:4d:1a:7f:06:e4:c2:75:e3:5c: 00:21:ce:3f:e4:53:8b:f2:8c:c9:b6:44:60:89:60:0e:ad:3a: 4e:0a:3c:74:b1:23:0b:69:cd:cb:20:03:4e:6e:ca:65:c0:41: be:bc:0f:24:3e:09:97:d4:ee:de:d5:27:a3:fe:d7:22:6e:b8: 23:3c:16:46:e2:fc:16:58:b0:1d:55:45:f7:2a:5a:63:28:e6: 76:ab:ff:fd:63:97:99:b8:28:39:8a:21:d3:98:d8:51:52:6e: f2:b8:69:6d:b9:e8:b6:8b:e9:f5:6d:56:e7:f9:ef:69:7d:d7: e2:87:02:b2:ac:5b:25:b7:2f:24:7f:b7:f0:1c:3c:e8:f4:37: 70:a1:24:10:ee:2b:ba:0e:a0:bf:7f:d6:14:dc:45:39:53:7b: 9c:4d:4f:5b:17:16:18:ba:4f:28:73:9c:8f:f7:e2:b3:cb:3c: f4:43:21:c1:a4:dc:79:3a:d6:2d:39:a0:57:99:9a:9b:a8:bc: fd:dc:7f:0a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEo2P/Xra4+sJoeRngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMxN1oXDTI1MDkxNDE2MDMxN1owLzEtMCsGA1UEAxMk NmJiYTE2MzYtNzQ2OS00Y2IxLThlNGMtNjY1NGM1Y2YxYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XiVXKEXIBHZty6VQfAAfzKaM03tCvQFVhIc NSaGbcJ/xIumWBbFpffqbNeGy9pMEkVXJ0LK1DVycuHvNG5vPm1k1ttVLFWfE5ID KUr+eLnGB0Qv0fhiQIJPmMXsroaUt2KxlVclqpCxJ26XhcpIf95AChguaRqiF1C6 vBO9RMN2GKUUSCw/N1SBe6EAZHn1p3ygEaqUS2vada9Yg80Dot63aiPu9pB3KqlH 0LTOfTYYmqgPgfRyb/iXhFlJS+pCTpV2Rz+CTIho4j+Q2fqA5Q136Le+OgNPeR1Y MCyEGYczMViUiOR+nnsHCzYCL5CaI8dxLihu4Auku8wZrXCDVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFyCTUC28L1iQbFASq7oofipdyIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODcxOWI5NjUtYjQ3Mi0z NDAxLWFmMDYtMzBjNTViM2U1OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAambtNA36ENQjrRu5QIWcRWAkeCehW98AGPCxXeCQSvG8AA4ayKd1V31Y 60VPTlcN1IuH5GxlSpVCYXlDFNHJTRp/BuTCdeNcACHOP+RTi/KMybZEYIlgDq06 Tgo8dLEjC2nNyyADTm7KZcBBvrwPJD4Jl9Tu3tUno/7XIm64IzwWRuL8FliwHVVF 9ypaYyjmdqv//WOXmbgoOYoh05jYUVJu8rhpbbnotovp9W1W5/nvaX3X4ocCsqxb JbcvJH+38Bw86PQ3cKEkEO4rug6gv3/WFNxFOVN7nE1PWxcWGLpPKHOcj/fis8s8 9EMhwaTceTrWLTmgV5mam6i8/dx/Cg== -----END CERTIFICATE-----Generated at Tue Jul 1 18:03:35 2025 by rpki-client