$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d21f407b-ddc3-3940-b90f-85a1e4118146.roa File: d21f407b-ddc3-3940-b90f-85a1e4118146.roa (raw, json) Hash identifier: nPbMqcZhSDzX3l95ardebA4U7g8ptltKC2AZIgVo6/Y= Subject key identifier: BA:6E:4B:59:F7:36:4E:EE:78:9C:50:BD:7A:9F:54:A5:8E:0E:77:A0 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FF61BB0E3A23437395F80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d21f407b-ddc3-3940-b90f-85a1e4118146.roa Signing time: Mon 16 Jun 2025 16:03:17 +0000 ROA not before: Mon 16 Jun 2025 16:03:17 +0000 ROA not after: Sun 14 Sep 2025 16:03:17 +0000 asID: 81 IP address blocks: 152.27.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:f6:1b:b0:e3:a2:34:37:39:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:17 2025 GMT Not After : Sep 14 16:03:17 2025 GMT Subject: CN=d94751e1-2b77-4918-82dc-d5a73f4f9c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:17:c8:7f:50:d4:4e:a7:7a:a3:85:de:fb: 8b:77:db:c8:1e:5b:86:d9:8e:73:5a:3f:86:aa:4a: 20:ef:b0:50:1e:ba:a9:78:d0:e0:90:86:90:6f:4a: 3d:a4:4f:e9:47:1b:5a:9e:5e:6b:41:49:b8:23:57: b6:59:73:7e:88:57:e3:48:67:f7:46:eb:e2:70:71: a7:57:0a:12:ae:a1:67:6c:88:d1:ef:57:5f:f1:90: b1:d2:aa:b3:78:5c:12:f0:36:fc:c8:57:46:08:ab: d0:63:08:da:61:c8:2a:9a:9d:c2:67:1b:1f:5a:d4: 33:c5:b0:87:2c:6f:23:ed:10:5f:75:d9:da:c7:4e: b7:9d:57:3c:80:12:f7:d4:71:aa:16:c3:fa:ff:26: fd:07:e0:63:00:48:88:c7:29:87:ca:4f:97:15:34: 7d:9b:9a:2f:1d:ff:4d:6e:6f:7b:af:87:77:1b:5a: 1f:3b:de:27:53:5a:09:8a:e5:41:22:bb:58:cf:40: c6:f6:b9:91:f9:dd:e0:0d:fe:27:77:78:b4:a1:e2: 40:29:9e:ae:3d:ef:c0:4d:fd:55:cf:4f:f3:fa:3a: 7e:46:05:a8:7e:f6:27:37:c8:32:8c:69:a7:40:79: 6a:f3:c9:ce:f4:3d:fb:de:11:b9:eb:54:17:d5:ee: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6E:4B:59:F7:36:4E:EE:78:9C:50:BD:7A:9F:54:A5:8E:0E:77:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d21f407b-ddc3-3940-b90f-85a1e4118146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.27.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a5:60:cd:65:f3:9b:a8:c3:d4:5f:c6:0d:67:b2:59:ef:43: c8:11:55:8d:41:05:ce:17:73:d4:85:5e:af:f0:3c:48:d3:fd: a6:aa:57:d9:f4:10:d0:17:76:bb:d2:0f:5b:9a:9d:0b:b3:48: be:20:d0:38:6e:dc:99:53:ba:03:5b:d7:e9:55:14:e0:85:77: 79:29:46:6b:86:9a:33:f8:2d:e0:ae:a3:00:d0:6a:3c:f9:22: 2f:ad:56:0c:b9:e4:f1:83:8c:f1:aa:06:a2:89:42:e0:dd:f2: ed:34:28:e3:51:12:92:f7:4f:f0:2c:7a:a7:b7:03:30:0e:26: 36:f0:aa:16:eb:9c:01:76:f2:ac:80:09:4f:65:0c:f4:57:5c: 25:9b:bc:21:5a:c0:4a:c3:1c:57:67:b7:09:bd:e7:90:58:29: 27:0c:22:91:1e:e6:ae:02:91:10:70:61:d9:8d:c0:94:2b:99: 17:66:0f:2f:2c:d5:32:f1:af:6e:72:19:01:23:1b:27:43:20: ee:93:8e:6c:34:a1:e2:e8:f6:7a:e5:7f:a8:31:e4:7f:96:13: 22:66:ac:8b:f1:af:fa:bb:c4:39:43:cc:b6:a5:1f:c0:cf:35: 89:b6:de:ab:6b:61:6f:2d:aa:31:99:a2:c2:9a:c8:77:f6:d2: f4:a4:37:4a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEo2P/YbsOOiNDc5X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMxN1oXDTI1MDkxNDE2MDMxN1owLzEtMCsGA1UEAxMk ZDk0NzUxZTEtMmI3Ny00OTE4LTgyZGMtZDVhNzNmNGY5YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmkXyH9Q1E6neqOF3vuLd9vIHluG2Y5zWj+G qkog77BQHrqpeNDgkIaQb0o9pE/pRxtanl5rQUm4I1e2WXN+iFfjSGf3RuvicHGn VwoSrqFnbIjR71df8ZCx0qqzeFwS8Db8yFdGCKvQYwjaYcgqmp3CZxsfWtQzxbCH LG8j7RBfddnax063nVc8gBL31HGqFsP6/yb9B+BjAEiIxymHyk+XFTR9m5ovHf9N bm97r4d3G1ofO94nU1oJiuVBIrtYz0DG9rmR+d3gDf4nd3i0oeJAKZ6uPe/ATf1V z0/z+jp+RgWofvYnN8gyjGmnQHlq88nO9D373hG561QX1e69pwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLpuS1n3Nk7ueJxQvXqfVKWODnegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDIxZjQwN2ItZGRjMy0z OTQwLWI5MGYtODVhMWU0MTE4MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVaVgzWXzm6jD1F/GDWeyWe9DyBFVjUEFzhdz1IVer/A8SNP9pqpX2fQQ 0Bd2u9IPW5qdC7NIviDQOG7cmVO6A1vX6VUU4IV3eSlGa4aaM/gt4K6jANBqPPki L61WDLnk8YOM8aoGoolC4N3y7TQo41ESkvdP8Cx6p7cDMA4mNvCqFuucAXbyrIAJ T2UM9FdcJZu8IVrASsMcV2e3Cb3nkFgpJwwikR7mrgKREHBh2Y3AlCuZF2YPLyzV MvGvbnIZASMbJ0Mg7pOObDSh4uj2euV/qDHkf5YTImasi/Gv+rvEOUPMtqUfwM81 ibbeq2thby2qMZmiwprId/bS9KQ3Sg== -----END CERTIFICATE-----Generated at Tue Jul 1 12:34:54 2025 by rpki-client