$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: j6XsZFGjRhOIHkthBa8eBVgvF1wSQE3voP2tcTH0RpM= Subject key identifier: 7A:72:D9:90:DA:B7:95:CA:D7:5D:56:49:80:FD:E0:24:EF:E4:B5:3D Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584A2BDA917FB322D20ADB7C9500 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Thu 12 Jun 2025 22:40:55 +0000 ROA not before: Thu 12 Jun 2025 22:40:55 +0000 ROA not after: Wed 10 Sep 2025 22:40:55 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:da:91:7f:b3:22:d2:0a:db:7c:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Jun 12 22:40:55 2025 GMT Not After : Sep 10 22:40:55 2025 GMT Subject: CN=ad40addd-0ef6-40ba-8147-a986003ec160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:5a:e1:63:66:d9:0a:aa:85:5e:bd:30:17: ba:97:49:f9:f3:46:d7:97:78:df:a0:19:ba:32:97: ba:ed:0c:d6:4f:97:48:61:55:9d:6c:da:5b:c5:b1: d1:f7:78:03:0c:fe:3d:0b:bc:d3:c5:e5:71:fb:bb: 74:45:34:25:0f:53:94:e6:6c:5e:90:ee:36:45:60: 57:40:76:cf:66:46:50:6d:74:84:f9:de:01:1d:f0: b0:d5:85:fd:79:06:e3:8b:eb:5c:f3:49:a2:3f:31: 57:e0:42:0f:88:01:e0:c5:6a:b4:4b:40:16:a9:92: 6c:fd:77:3b:23:be:03:e7:ed:4a:20:51:f2:3c:3f: ff:dd:61:da:b5:4c:9c:aa:fd:24:45:10:fb:6f:05: 7e:4f:13:e2:ea:07:46:9d:54:14:3d:a1:c8:7c:c9: 8f:e0:26:28:68:a4:08:32:6d:aa:ab:ae:4b:79:50: 85:3a:54:bb:1e:18:c3:17:b0:d0:40:3f:90:89:17: b2:62:a3:5e:8e:15:97:35:67:0b:c7:86:6d:60:96: d9:79:e6:17:37:2f:5e:d1:6e:c5:a4:11:92:93:1e: c9:31:64:84:cf:5c:55:5e:8c:e9:c0:5f:b8:83:a5: 72:74:b4:bb:b6:5c:5c:b5:46:a6:fe:80:f9:a1:eb: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:72:D9:90:DA:B7:95:CA:D7:5D:56:49:80:FD:E0:24:EF:E4:B5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:47:2d:e3:2c:a2:a1:11:70:cb:98:70:60:70:82:ca:68:e5: 45:38:d0:18:ad:d1:d3:36:4d:a5:ab:0c:a5:49:1c:2b:7d:58: 9a:bf:d6:76:28:98:ec:4d:27:3c:ae:c0:ee:7b:aa:c4:e6:0f: cf:05:0b:e8:db:9e:3c:d6:d9:2f:4c:f7:a6:01:57:9e:c3:a2: 64:6c:9e:92:cc:82:af:c4:98:12:c7:09:65:83:fe:9a:1e:55: 84:8a:8e:96:69:01:23:b4:ae:64:7b:3b:ac:07:36:9f:fa:e3: 19:10:2b:a3:c6:43:8a:86:4a:2a:8e:a6:a7:a2:97:f8:da:29: b0:c2:eb:7d:85:ba:d1:15:33:d4:7f:9e:c7:9a:e2:3b:a0:d7: f7:aa:a5:e0:82:14:c9:67:a3:83:f9:96:4c:01:af:6e:a5:69: 1d:4c:cd:11:a4:fd:a1:50:de:fc:0b:e6:83:24:ec:59:f8:0e: 0c:7e:0b:7f:06:2f:4a:b6:ff:82:5b:13:79:a1:52:d5:dc:7e: 10:a3:38:b0:b8:23:1c:55:e2:bd:af:e9:43:ea:07:dc:61:3b: 22:6a:60:d3:33:0a:29:d1:83:e3:2d:e0:33:41:ed:05:8a:98: e7:fa:90:e9:e5:a0:ab:26:06:1f:b7:54:88:97:14:6a:0c:15: 13:26:66:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEor2pF/syLSCtt8lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDYxMjIyNDA1NVoXDTI1MDkxMDIyNDA1NVowLzEtMCsGA1UEAxMk YWQ0MGFkZGQtMGVmNi00MGJhLTgxNDctYTk4NjAwM2VjMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZNa4WNm2QqqhV69MBe6l0n580bXl3jfoBm6 Mpe67QzWT5dIYVWdbNpbxbHR93gDDP49C7zTxeVx+7t0RTQlD1OU5mxekO42RWBX QHbPZkZQbXSE+d4BHfCw1YX9eQbji+tc80miPzFX4EIPiAHgxWq0S0AWqZJs/Xc7 I74D5+1KIFHyPD//3WHatUycqv0kRRD7bwV+TxPi6gdGnVQUPaHIfMmP4CYoaKQI Mm2qq65LeVCFOlS7HhjDF7DQQD+QiReyYqNejhWXNWcLx4ZtYJbZeeYXNy9e0W7F pBGSkx7JMWSEz1xVXozpwF+4g6VydLS7tlxctUam/oD5oet1cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpy2ZDat5XK111WSYD94CTv5LU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBHLeMsoqERcMuYcGBwgspo5UU40Bit0dM2TaWrDKVJHCt9WJq/1nYo mOxNJzyuwO57qsTmD88FC+jbnjzW2S9M96YBV57DomRsnpLMgq/EmBLHCWWD/poe VYSKjpZpASO0rmR7O6wHNp/64xkQK6PGQ4qGSiqOpqeil/jaKbDC632FutEVM9R/ nsea4jug1/eqpeCCFMlno4P5lkwBr26laR1MzRGk/aFQ3vwL5oMk7Fn4Dgx+C38G L0q2/4JbE3mhUtXcfhCjOLC4IxxV4r2v6UPqB9xhOyJqYNMzCinRg+Mt4DNB7QWK mOf6kOnloKsmBh+3VIiXFGoMFRMmZsE= -----END CERTIFICATE-----Generated at Mon Jun 30 11:33:40 2025 by rpki-client