$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa File: e4e25509-90e2-3048-8aef-d1f4b44a806e.roa (raw, json) Hash identifier: MrxjUYDHKeaw7NVEf+rsvLNYTDILzrA+WJrRQev6qQA= Subject key identifier: 9F:09:0B:35:14:05:1D:10:0E:0F:41:1F:A4:C4:5D:CD:73:25:83:B6 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F43285849B149EABC74E2662506B55DC0 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 22987 IP address blocks: 152.86.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ea:bc:74:e2:66:25:06:b5:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2f2324a2-6a02-42fc-8c55-a22b11e42907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:94:b4:e7:68:ff:89:9d:d9:98:b8:37:2b:91: 6a:72:e6:56:c9:82:7e:e3:52:58:6a:5e:19:db:e7: 69:48:bf:10:d7:e7:24:2b:ea:80:cb:0c:e4:e0:86: 90:3e:76:14:62:e0:52:8d:b0:89:ab:92:e1:5c:78: c4:1b:a8:10:dd:93:f7:d8:f2:20:c5:b4:56:08:74: 3b:f0:ab:10:59:35:ae:18:a6:a4:2f:5c:46:7b:e8: 54:d0:4d:7b:53:59:23:b7:ef:62:a0:db:a6:b9:50: e0:7c:d8:a4:32:df:a2:8f:28:1c:54:45:b6:89:c2: e6:da:65:4b:dd:90:5d:28:af:07:46:02:bd:7f:ad: ec:06:7c:9a:e5:f8:b9:9c:91:ef:95:c1:30:48:d2: c7:d8:23:be:36:2b:c9:3f:5a:da:32:5d:69:8d:d8: 5c:47:b3:7b:48:8c:05:73:2e:55:8c:ad:29:97:ff: e8:31:73:70:52:b0:e8:03:ae:45:df:8a:15:71:3f: cc:65:9a:6f:9d:9a:18:d2:c0:ab:ab:8c:ca:b8:a2: e9:53:80:98:6d:76:55:b7:e2:60:90:6f:f3:d5:46: 8a:57:3c:d8:f8:37:13:1c:1b:de:d9:b4:50:0e:6f: 83:ef:69:43:31:14:dd:16:1e:a3:b8:49:d2:d5:2d: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:09:0B:35:14:05:1D:10:0E:0F:41:1F:A4:C4:5D:CD:73:25:83:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 152.86.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:92:43:f9:7f:de:ca:6b:1e:1e:89:76:73:f8:1a:a7:58:1b: 29:f3:cc:5b:74:fd:b0:60:96:b0:1f:e8:59:7c:f5:02:5f:3a: 83:b6:bf:30:02:09:a8:46:71:d2:09:87:d0:5c:0f:08:53:6f: 30:b3:1a:85:ae:50:db:6c:c8:30:90:d5:80:56:d1:1e:d4:84: 15:ad:af:59:85:76:7d:a7:27:00:95:05:cb:96:c5:f2:df:33: fd:0b:f8:17:03:aa:83:4c:1b:59:14:6e:c1:79:c6:71:1f:73: f6:af:ed:b0:6b:69:15:45:01:05:98:a5:cb:d8:48:3e:08:78: 68:52:83:31:16:3d:f0:8a:6d:a0:3f:9a:4c:f0:11:88:7e:b3: ed:6c:2d:f0:aa:2e:d6:71:48:82:67:14:49:e7:b1:52:df:79: c2:5f:5b:d3:c5:25:d5:95:17:df:f8:08:5b:97:a9:8e:0c:2e: b7:19:61:a9:14:11:a5:98:09:1f:4e:31:7e:92:b7:f4:d1:69: 92:fe:03:13:26:ac:49:19:98:b8:0c:6c:5a:40:b9:c8:e6:86: e9:94:b2:59:39:64:d2:7f:2b:a9:f7:8a:bc:3d:ca:7b:93:bc: 9d:38:00:8e:eb:2b:87:da:e6:9e:1b:a0:c9:e8:0f:7c:92:f8: 22:11:cc:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSeq8dOJmJQa1XcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmYyMzI0YTItNmEwMi00MmZjLThjNTUtYTIyYjExZTQyOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55S052j/iZ3ZmLg3K5FqcuZWyYJ+41JYal4Z 2+dpSL8Q1+ckK+qAywzk4IaQPnYUYuBSjbCJq5LhXHjEG6gQ3ZP32PIgxbRWCHQ7 8KsQWTWuGKakL1xGe+hU0E17U1kjt+9ioNumuVDgfNikMt+ijygcVEW2icLm2mVL 3ZBdKK8HRgK9f63sBnya5fi5nJHvlcEwSNLH2CO+NivJP1raMl1pjdhcR7N7SIwF cy5VjK0pl//oMXNwUrDoA65F34oVcT/MZZpvnZoY0sCrq4zKuKLpU4CYbXZVt+Jg kG/z1UaKVzzY+DcTHBve2bRQDm+D72lDMRTdFh6juEnS1S21ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8JCzUUBR0QDg9BH6TEXc1zJYO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZTRlMjU1MDktOTBlMi0z MDQ4LThhZWYtZDFmNGI0NGE4MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmFZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuSQ/l/3sprHh6JdnP4GqdYGynzzFt0/bBglrAf6Fl89QJfOoO2vzAC CahGcdIJh9BcDwhTbzCzGoWuUNtsyDCQ1YBW0R7UhBWtr1mFdn2nJwCVBcuWxfLf M/0L+BcDqoNMG1kUbsF5xnEfc/av7bBraRVFAQWYpcvYSD4IeGhSgzEWPfCKbaA/ mkzwEYh+s+1sLfCqLtZxSIJnFEnnsVLfecJfW9PFJdWVF9/4CFuXqY4MLrcZYakU EaWYCR9OMX6St/TRaZL+AxMmrEkZmLgMbFpAucjmhumUslk5ZNJ/K6n3irw9ynuT vJ04AI7rK4fa5p4boMnoD3yS+CIRzJM= -----END CERTIFICATE-----Generated at Thu May 8 18:59:42 2025 by rpki-client