$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa File: dd51c628-a0be-34a1-866d-ad0210fafe09.roa (raw, json) Hash identifier: YxG5gJ/1vAvGysdMxEvjSu2uXDoIloU2pbV4FPHzWJw= Subject key identifier: 1C:29:19:A8:59:4F:6E:D7:D4:0E:3F:CF:51:A8:96:15:3E:2A:38:21 Certificate issuer: /CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Certificate serial: 010D0C9F4328584A3480123AA1CE5E1BB685D700 Authority key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 30967 IP address blocks: 146.88.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:12:3a:a1:ce:5e:1b:b6:85:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=5d09839c-1366-4a72-8c5e-2efa254965bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:72:2a:46:72:bf:7b:71:23:70:ed:4f:c4: 46:63:45:c6:f4:5f:01:c3:8f:42:12:60:d4:ac:1e: 18:1c:f3:09:f3:ef:4f:2f:1a:58:52:76:4c:4e:2b: 01:a5:e9:f5:96:ed:63:6b:43:26:24:3b:74:b9:f8: 64:ca:ba:97:69:16:47:a9:9d:e3:d8:f0:a7:81:2e: 4e:7c:7d:cc:c7:55:05:d1:a3:f5:c2:99:75:d7:fa: 4a:81:96:bb:4d:e7:0f:0a:48:4c:e4:5e:0d:82:fd: b7:a5:43:44:c9:17:fb:cb:ff:7f:e8:5a:12:03:f9: 34:2b:5e:20:16:11:1c:01:4f:50:a3:3e:3e:44:e3: 91:12:7c:4d:b1:fc:c3:53:4e:c2:b7:f3:c4:06:3d: 2e:c2:3c:db:e4:04:c7:c3:bf:12:bd:59:80:ed:fb: 55:f2:68:90:75:3c:43:74:05:8d:92:9c:00:ef:58: ee:1a:50:ff:fc:5f:4c:41:84:c2:23:b8:c9:cf:f3: 78:36:36:e4:97:83:a6:10:9a:cf:39:68:03:3d:f1: 2a:81:26:f0:34:70:de:64:75:e9:14:14:df:b5:99: 72:fb:4e:f1:ce:8d:a2:da:23:ba:cd:ca:6e:b6:03: c7:59:4e:e2:3e:8b:91:a2:88:e7:4b:67:1e:0c:0c: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:29:19:A8:59:4F:6E:D7:D4:0E:3F:CF:51:A8:96:15:3E:2A:38:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl X509v3 Authority Key Identifier: keyid:83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer sbgp-ipAddrBlock: critical IPv4: 146.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:10:55:0b:12:ac:84:3a:83:6f:08:9f:f9:4a:d1:18:5d:8d: 0c:4f:19:21:a0:d2:ca:15:9c:4f:0d:e0:0e:2e:3c:c7:ac:ef: 54:63:69:99:e8:46:3e:d9:a5:83:c6:7f:60:e5:ec:1e:3d:ab: f2:d7:50:84:fe:a9:ea:0c:a3:b6:9b:8f:75:fe:07:fb:f8:f7: 8a:48:e4:f6:e2:7c:c4:90:9e:9f:08:e8:25:d4:e4:34:40:e0: 1b:66:15:68:2f:c7:a8:a6:38:96:8a:3e:98:4d:16:5f:1a:09: 96:2b:fa:5c:1a:f4:2f:e4:28:c8:37:da:76:9c:d3:dc:ba:10: 81:83:b7:a3:05:fa:3b:37:b0:bf:53:1d:d6:3c:29:57:a9:f0: 31:b8:4d:9d:71:93:22:48:b4:d1:cc:5f:f0:0a:fb:29:fd:f6: bb:4e:e0:3d:80:6f:9f:f6:6c:08:2e:1c:d8:29:39:f5:8a:56: 5b:19:c0:a6:c1:55:c7:16:0b:0f:f4:34:af:4d:92:c3:38:13: 1f:44:ef:e3:84:83:6d:dc:cb:94:95:7a:d0:fa:05:af:fc:f4: 21:fe:ac:29:fb:fc:2f:cf:0a:70:c5:8b:df:0c:03:7e:e5:fb: 6a:43:50:b1:2d:b9:16:7b:63:b1:2f:a3:1f:14:6e:9e:8f:07: ca:68:60:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBI6oc5eG7aF1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0YzAzN2QtZjA2ZC00YzAxLTlhZjUtZWYwYjJhZDNl ZGU4MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk NWQwOTgzOWMtMTM2Ni00YTcyLThjNWUtMmVmYTI1NDk2NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic9yKkZyv3txI3DtT8RGY0XG9F8Bw49CEmDU rB4YHPMJ8+9PLxpYUnZMTisBpen1lu1ja0MmJDt0ufhkyrqXaRZHqZ3j2PCngS5O fH3Mx1UF0aP1wpl11/pKgZa7TecPCkhM5F4Ngv23pUNEyRf7y/9/6FoSA/k0K14g FhEcAU9Qoz4+ROOREnxNsfzDU07Ct/PEBj0uwjzb5ATHw78SvVmA7ftV8miQdTxD dAWNkpwA71juGlD//F9MQYTCI7jJz/N4Njbkl4OmEJrPOWgDPfEqgSbwNHDeZHXp FBTftZly+07xzo2i2iO6zcputgPHWU7iPouRoojnS2ceDAxQYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwpGahZT27X1A4/z1GolhU+KjghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRj MDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFkM2VkZTgvZGQ1MWM2MjgtYTBiZS0z NGExLTg2NmQtYWQwMjEwZmFmZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTA0YzAzN2QtZjA2ZC00YzAxLTlh ZjUtZWYwYjJhZDNlZGU4L2UwNGMwMzdkLWYwNmQtNGMwMS05YWY1LWVmMGIyYWQz ZWRlOC5jcmwwHwYDVR0jBBgwFoAUg1v50PJ9ZS2Whi/oVqq6HZ/FYIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBi MmFkM2VkZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkljQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUQVQsSrIQ6g28In/lK0RhdjQxPGSGg0soVnE8N4A4uPMes71RjaZno Rj7ZpYPGf2Dl7B49q/LXUIT+qeoMo7abj3X+B/v494pI5PbifMSQnp8I6CXU5DRA 4BtmFWgvx6imOJaKPphNFl8aCZYr+lwa9C/kKMg32nac09y6EIGDt6MF+js3sL9T HdY8KVep8DG4TZ1xkyJItNHMX/AK+yn99rtO4D2Ab5/2bAguHNgpOfWKVlsZwKbB VccWCw/0NK9NksM4Ex9E7+OEg23cy5SVetD6Ba/89CH+rCn7/C/PCnDFi98MA37l +2pDULEtuRZ7Y7Evox8Ubp6PB8poYNs= -----END CERTIFICATE-----Generated at Tue Jul 1 15:24:08 2025 by rpki-client