$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa File: 97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa (raw, json) Hash identifier: 6c5+G+dBw5nzu1XAOjHKu6I7wiIyqBejonqzvD+42DM= Subject key identifier: 2B:E9:D1:4A:FB:86:7D:68:F6:B6:FC:DA:C1:F8:E2:51:86:37:B2:19 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A51D076D295B27AB6DF47DB80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 62610 IP address blocks: 128.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:76:d2:95:b2:7a:b6:df:47:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=95bd22f2-1750-476d-836a-fbfa0a853521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:36:06:16:60:57:46:08:ef:a6:b2:a4:60: dc:38:69:00:ec:b0:9d:ff:f6:f1:0d:0c:03:19:90: 44:5a:57:74:10:8e:69:9c:52:0b:cf:71:48:30:8c: b9:7e:69:7b:3b:b6:c2:8a:b9:ca:f9:22:c7:8b:9f: 78:39:89:02:dd:78:a8:37:b5:9b:c3:3c:d1:38:ec: a7:7f:dc:47:96:24:f4:1d:94:92:22:3c:98:30:53: 40:7b:6b:98:6b:a4:c1:db:c3:19:e3:93:99:d9:df: 62:88:bd:95:b6:7a:76:05:61:68:9e:59:ab:7a:07: 37:2d:6b:a5:70:e0:8e:8d:3f:7a:2b:95:89:06:18: c9:d7:44:85:e9:aa:ff:c6:4a:7a:89:33:d1:d4:fc: 98:b6:d1:54:18:7c:7e:17:44:5a:46:33:55:be:e9: 1c:f7:96:88:e5:b8:7a:63:5c:43:42:a6:74:20:89: c0:e6:60:e2:dd:bd:ec:fa:bb:8d:b1:74:a0:e4:68: 9d:b9:68:6f:39:0e:8d:05:e3:97:37:ab:0b:5a:26: d7:6e:80:eb:ce:a3:8a:ea:44:e4:7e:44:08:a6:86: 2a:22:99:66:2b:99:67:6f:63:b2:f0:77:11:cb:d7: 18:e1:c1:be:79:15:c5:a2:3d:8b:5f:72:41:ed:6e: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:D1:4A:FB:86:7D:68:F6:B6:FC:DA:C1:F8:E2:51:86:37:B2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e9:88:a1:a4:f7:a4:66:31:e3:80:86:0e:f2:c3:03:26:7c: eb:89:8c:39:bd:65:98:e2:9b:92:60:98:52:9f:88:af:76:0b: 9d:62:63:f5:90:0f:b1:51:01:22:0d:d8:20:3c:29:33:62:2d: 24:6e:4c:6f:8e:93:58:f4:86:66:11:42:b0:b0:a6:5c:b8:06: d5:4c:cd:f0:24:a5:3b:53:dc:65:ea:fa:51:c8:65:e3:4a:b2: 65:e8:91:16:35:4f:9f:a7:a0:74:08:72:ca:0c:f9:6a:3b:fd: d6:dc:82:1e:1b:19:04:08:04:b3:54:b5:1c:21:0e:74:c0:45: 12:ca:95:10:fa:2c:01:38:e3:aa:c9:06:02:50:ac:11:4a:79: cf:e5:e6:f1:03:e9:12:77:bd:d7:07:4c:97:ff:0f:95:6c:84: b7:26:7d:63:cf:11:b9:70:6d:5a:e6:c9:80:0f:58:28:1a:cd: 72:3c:c5:18:24:1b:21:d9:3d:d6:b5:94:c4:88:fc:5a:79:3d: 42:bd:14:72:7c:1d:3a:45:c1:6d:f5:52:1d:a4:ca:62:08:af: b6:45:cd:68:f3:bf:6f:e0:d8:3b:26:2d:06:5b:c3:30:2f:6f: 8f:9e:f5:98:e9:2a:dc:73:17:53:fe:c5:19:50:88:c0:16:79: 18:02:a6:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HbSlbJ6tt9H24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OTViZDIyZjItMTc1MC00NzZkLTgzNmEtZmJmYTBhODUzNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW82BhZgV0YI76aypGDcOGkA7LCd//bxDQwD GZBEWld0EI5pnFILz3FIMIy5fml7O7bCirnK+SLHi594OYkC3XioN7WbwzzROOyn f9xHliT0HZSSIjyYMFNAe2uYa6TB28MZ45OZ2d9iiL2Vtnp2BWFonlmregc3LWul cOCOjT96K5WJBhjJ10SF6ar/xkp6iTPR1PyYttFUGHx+F0RaRjNVvukc95aI5bh6 Y1xDQqZ0IInA5mDi3b3s+ruNsXSg5GiduWhvOQ6NBeOXN6sLWibXboDrzqOK6kTk fkQIpoYqIplmK5lnb2Oy8HcRy9cY4cG+eRXFoj2LX3JB7W7P0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvp0Ur7hn1o9rb82sH44lGGN7IZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTdlYWE5YzEtYTllYS0z ZTVkLWIyMzUtMDk0MGM1ZGQ2OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvpiKGk96RmMeOAhg7ywwMmfOuJjDm9ZZjim5JgmFKfiK92C51iY/WQ D7FRASIN2CA8KTNiLSRuTG+Ok1j0hmYRQrCwply4BtVMzfAkpTtT3GXq+lHIZeNK smXokRY1T5+noHQIcsoM+Wo7/dbcgh4bGQQIBLNUtRwhDnTARRLKlRD6LAE446rJ BgJQrBFKec/l5vED6RJ3vdcHTJf/D5VshLcmfWPPEblwbVrmyYAPWCgazXI8xRgk GyHZPda1lMSI/Fp5PUK9FHJ8HTpFwW31Uh2kymIIr7ZFzWjzv2/g2DsmLQZbwzAv b4+e9ZjpKtxzF1P+xRlQiMAWeRgCpkM= -----END CERTIFICATE-----Generated at Mon Jun 30 06:04:29 2025 by rpki-client