$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa File: 542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json) Hash identifier: 0Ak/xm5Km+Igv+KzFJ8O+4IMU9FN6YvI2ygDIOj82GU= Subject key identifier: 42:B9:C0:AB:9C:F4:93:D9:53:54:0F:7B:E5:56:D6:54:77:6B:0C:83 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A4AD595CC6CBC2B5BA37F7600 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 21530 IP address blocks: 170.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:95:cc:6c:bc:2b:5b:a3:7f:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=b5dba285-384d-4c83-b5bb-fe12fada2da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:88:3d:14:4d:31:30:74:24:fe:a9:12:42:6d: 96:5d:fe:5e:9d:69:b3:be:3d:86:09:3b:67:b3:4b: bd:db:06:2f:a1:4d:4f:73:98:fe:59:aa:37:ce:bc: fe:cc:4d:1e:d5:75:c1:2e:8e:69:e7:d0:33:60:f1: 92:91:ad:a7:33:ef:4c:ae:d4:ea:78:9c:ac:fe:d0: e6:b2:1e:86:ba:6d:66:f8:ce:54:93:e8:bf:c7:b3: 5f:a0:65:ae:36:7e:46:5f:56:6d:70:68:70:f2:d2: 7a:33:19:65:76:c2:2e:55:10:eb:41:a9:43:55:7c: 35:4f:79:8f:ab:48:3d:da:29:94:92:01:43:de:35: fb:b5:8c:2d:e4:9b:65:77:55:a5:d4:5d:e4:32:3f: 4f:1b:4c:07:56:ae:ce:11:d1:2b:36:0d:a0:8d:27: c7:6f:01:4f:80:51:f9:d7:af:9d:44:c5:98:67:9f: 09:32:a9:1a:cc:31:70:d9:e6:80:97:0f:70:28:02: af:a9:cc:d7:04:27:0c:69:4b:4e:00:d4:a0:3b:12: 3f:3f:c2:46:7e:67:b0:a6:98:ae:e6:44:98:25:4b: af:72:0f:0f:f7:11:0c:71:a4:9b:d9:34:ab:36:b6: ac:52:38:50:e0:16:55:c9:9f:9b:95:60:f3:08:c1: 13:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B9:C0:AB:9C:F4:93:D9:53:54:0F:7B:E5:56:D6:54:77:6B:0C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:68:8c:97:23:7e:e7:0b:9b:85:9f:be:e7:41:9e:b5:de:0f: 31:57:cb:fb:91:eb:34:bc:ad:b5:88:c4:a3:23:df:d9:bc:e6: 18:33:2b:f9:28:7e:28:6a:10:b9:91:14:74:8b:ff:cf:36:a2: 86:2e:e7:d3:b3:6b:35:92:2d:3d:ec:29:97:2e:44:80:1c:4f: 42:f5:cd:82:52:a6:12:25:71:28:d9:52:56:a8:06:1c:30:37: ad:96:55:08:b0:41:9b:01:c3:e7:9e:5e:21:00:97:f3:79:ac: 98:5d:5e:80:c6:54:43:ce:50:91:4b:d9:df:35:53:25:2d:aa: b2:bb:53:c2:a6:af:b4:85:f8:0a:8f:66:aa:e1:f9:e6:8d:43: 0c:2d:0f:1f:77:3b:ee:78:5c:82:6b:2e:ce:35:00:97:48:fb: 6d:29:0f:d1:f3:52:33:d4:03:bf:64:35:dd:d8:59:ef:cc:94: 27:52:0c:2e:de:5f:33:d4:f5:b8:30:e3:5e:1a:e9:3e:a4:3c: cc:45:04:25:5f:10:9b:a3:5b:bc:92:24:ea:a4:f0:76:37:a8: 1f:ce:56:d6:b0:6d:ad:5d:78:3a:52:58:b1:9a:97:60:21:ae: b3:28:f4:30:2a:37:25:69:2e:60:b9:b3:c3:ef:2e:ef:c8:98: f0:bb:a0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZXMbLwrW6N/dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YjVkYmEyODUtMzg0ZC00YzgzLWI1YmItZmUxMmZhZGEyZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7og9FE0xMHQk/qkSQm2WXf5enWmzvj2GCTtn s0u92wYvoU1Pc5j+Wao3zrz+zE0e1XXBLo5p59AzYPGSka2nM+9MrtTqeJys/tDm sh6Gum1m+M5Uk+i/x7NfoGWuNn5GX1ZtcGhw8tJ6MxlldsIuVRDrQalDVXw1T3mP q0g92imUkgFD3jX7tYwt5Jtld1Wl1F3kMj9PG0wHVq7OEdErNg2gjSfHbwFPgFH5 16+dRMWYZ58JMqkazDFw2eaAlw9wKAKvqczXBCcMaUtOANSgOxI/P8JGfmewppiu 5kSYJUuvcg8P9xEMcaSb2TSrNrasUjhQ4BZVyZ+blWDzCMETjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK5wKuc9JPZU1QPe+VW1lR3awyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTQyZTg0N2MtMzcxNS0z YjI3LTlmNzQtYWRlNzdhMGZiMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChojJcjfucLm4WfvudBnrXeDzFXy/uR6zS8rbWIxKMj39m85hgzK/ko fihqELmRFHSL/882ooYu59OzazWSLT3sKZcuRIAcT0L1zYJSphIlcSjZUlaoBhww N62WVQiwQZsBw+eeXiEAl/N5rJhdXoDGVEPOUJFL2d81UyUtqrK7U8Kmr7SF+AqP Zqrh+eaNQwwtDx93O+54XIJrLs41AJdI+20pD9HzUjPUA79kNd3YWe/MlCdSDC7e XzPU9bgw414a6T6kPMxFBCVfEJujW7ySJOqk8HY3qB/OVtawba1deDpSWLGal2Ah rrMo9DAqNyVpLmC5s8PvLu/ImPC7oKM= -----END CERTIFICATE-----Generated at Mon Jun 30 04:22:11 2025 by rpki-client