$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa File: 3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa (raw, json) Hash identifier: vADH/LEUCw+mFLGYKhFvbFZwTpL8wuTepANq/EFDUvg= Subject key identifier: 34:99:DD:57:15:4E:84:DB:29:CC:A5:84:50:F6:F6:F2:C0:E4:9C:4B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A35E58B5FD499C9691A0EC200 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 9009 IP address blocks: 158.115.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:8b:5f:d4:99:c9:69:1a:0e:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=acfe2490-afbb-47a0-ae96-a134aff48c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:b7:21:f0:ac:c4:05:b1:6d:97:25:77:3a: 93:65:fc:1e:c9:8a:6e:69:70:a9:e3:47:d2:32:cb: 63:ba:e8:e3:df:36:b3:33:eb:76:91:1d:0e:06:e8: 6e:e2:e5:75:e2:72:1c:8c:aa:d9:74:bb:76:62:29: 90:94:4a:aa:28:1d:f2:9e:fc:e0:02:1d:05:dd:50: 7f:6b:a7:ac:19:90:c4:79:5d:39:06:84:6b:82:d5: 81:26:2e:e4:4b:53:9d:d2:87:53:28:f2:6d:a4:f2: 9b:04:1d:e7:5f:d5:4f:df:7a:dc:21:61:b7:d8:52: 52:43:4d:3c:e7:b3:d0:44:46:54:42:5f:0c:1d:12: e5:52:a0:5e:a1:99:67:7a:37:a1:61:f2:a0:85:15: 8a:cc:6e:5e:10:70:77:89:dc:95:86:f0:12:4f:eb: 3b:83:7e:68:e2:4d:ef:91:cf:2e:84:99:e8:4d:21: c8:fc:ac:37:d8:06:2f:d6:a0:89:0b:42:64:64:aa: 8d:4c:56:1d:1d:91:d2:70:4f:d1:28:c7:1f:c8:6d: 5f:4a:ff:33:36:53:9d:07:52:1a:3f:6a:80:e0:00: 47:7d:5e:fa:41:d0:5b:dd:1e:5a:16:62:94:72:22: 5a:d6:27:f9:01:a4:d7:df:14:1f:c1:37:7d:be:32: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:99:DD:57:15:4E:84:DB:29:CC:A5:84:50:F6:F6:F2:C0:E4:9C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:76:ed:e6:8c:8e:b3:26:8c:ff:cd:d0:34:af:35:b4:52:aa: 07:62:51:8f:05:18:a7:65:03:70:41:3d:3b:8a:80:cd:99:09: 51:eb:5f:0a:a8:77:bb:85:86:1f:48:b6:11:25:70:18:90:82: 8b:09:2f:39:d0:1b:b5:14:dc:e7:e4:00:45:a8:e0:ae:09:87: 81:bc:4b:43:c4:d8:90:31:f8:53:5a:9a:1d:72:9b:e9:b6:59: d7:1e:83:2c:81:2f:ed:14:82:fd:45:cb:ec:ac:94:2d:bb:b8: e8:38:d3:3e:58:7f:80:1b:a8:85:8b:6e:cd:6c:4d:03:83:b9: 73:7b:ed:58:f8:92:7a:39:d0:02:ac:0e:27:b2:b0:48:d8:d8: ca:77:46:5d:e0:7e:2f:e7:c3:7f:1c:a7:50:8d:cb:51:3d:91: 3c:66:fb:fe:de:84:4a:80:3c:ce:35:06:3a:0c:a6:06:0b:75: 57:59:77:c7:88:3d:b2:fe:7d:e6:82:79:30:a0:f9:a6:f6:8a: fe:80:b0:cf:b7:87:92:ae:28:db:20:1b:af:fb:5d:92:5d:eb: 3f:47:b7:27:fb:8d:ac:95:86:7b:a9:0d:51:76:4a:d9:ce:99: 70:ba:79:be:3d:ec:39:96:af:9d:a8:91:7a:f4:ad:47:02:41: bc:07:6e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15Ytf1JnJaRoOwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk YWNmZTI0OTAtYWZiYi00N2EwLWFlOTYtYTEzNGFmZjQ4YzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5je3IfCsxAWxbZcldzqTZfweyYpuaXCp40fS Mstjuujj3zazM+t2kR0OBuhu4uV14nIcjKrZdLt2YimQlEqqKB3ynvzgAh0F3VB/ a6esGZDEeV05BoRrgtWBJi7kS1Od0odTKPJtpPKbBB3nX9VP33rcIWG32FJSQ008 57PQREZUQl8MHRLlUqBeoZlnejehYfKghRWKzG5eEHB3idyVhvAST+s7g35o4k3v kc8uhJnoTSHI/Kw32AYv1qCJC0JkZKqNTFYdHZHScE/RKMcfyG1fSv8zNlOdB1Ia P2qA4ABHfV76QdBb3R5aFmKUciJa1if5AaTX3xQfwTd9vjKgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSZ3VcVToTbKcylhFD29vLA5JxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2JlNmFhYTItZTlmMS0z YmE2LWExMWItZTBmN2IzZjA2OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF27eaMjrMmjP/N0DSvNbRSqgdiUY8FGKdlA3BBPTuKgM2ZCVHrXwqo d7uFhh9IthElcBiQgosJLznQG7UU3OfkAEWo4K4Jh4G8S0PE2JAx+FNamh1ym+m2 WdcegyyBL+0Ugv1Fy+yslC27uOg40z5Yf4AbqIWLbs1sTQODuXN77Vj4kno50AKs DieysEjY2Mp3Rl3gfi/nw38cp1CNy1E9kTxm+/7ehEqAPM41BjoMpgYLdVdZd8eI PbL+feaCeTCg+ab2iv6AsM+3h5KuKNsgG6/7XZJd6z9Htyf7jayVhnupDVF2StnO mXC6eb497DmWr52okXr0rUcCQbwHbvQ= -----END CERTIFICATE-----Generated at Sun Jun 29 00:41:44 2025 by rpki-client