$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa File: a0ab8981-9b66-3f41-baf6-bf4026116466.roa (raw, json) Hash identifier: W2j7SmIUK99Ve+LuGSFNDkfiBBcSgn2xQET57bhVefc= Subject key identifier: 32:39:56:F4:11:C3:BA:2D:44:2C:D5:13:FA:2D:D8:A1:4E:EB:9F:52 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F43285849D9E6EA7F639C49F3EC01EED0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa Signing time: Wed 14 May 2025 14:09:30 +0000 ROA not before: Wed 14 May 2025 14:09:30 +0000 ROA not after: Tue 12 Aug 2025 14:09:30 +0000 asID: 16509 IP address blocks: 157.239.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:e6:ea:7f:63:9c:49:f3:ec:01:ee:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: May 14 14:09:30 2025 GMT Not After : Aug 12 14:09:30 2025 GMT Subject: CN=a84e671c-b2ec-4867-8b5c-78a455b7fb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:95:19:6b:3d:e0:b5:a8:37:5f:e7:d0:f5: f1:7c:33:cd:17:7c:47:32:76:3a:73:99:87:96:04: e2:a4:e6:b3:90:04:0c:a4:05:f0:69:e4:9b:62:8b: 31:70:51:37:38:b5:7e:1b:12:1a:8a:1d:a8:8a:f5: c7:17:37:cc:e9:8c:37:c6:88:00:c9:7b:21:7f:ba: a1:9d:94:04:e5:07:f5:f2:80:1b:dd:6b:0c:2e:23: cc:b7:cf:4e:3b:ad:90:49:cb:c2:02:a4:ad:cd:70: 76:fb:86:23:99:d2:f0:f1:c0:b8:32:65:54:ae:23: 5b:8f:be:e9:95:04:46:9a:ee:47:ce:d4:31:55:86: b6:1e:f6:d6:49:15:2e:87:ad:4f:ce:50:24:15:38: 74:b1:f9:70:b4:f2:c2:57:4d:5b:3b:fd:0f:ce:12: 74:5b:56:b6:a3:a1:9e:bf:2e:2c:b6:de:d4:2d:5e: 6d:48:c2:a5:67:b4:d6:69:25:7d:4c:0a:29:88:20: 5f:44:6b:94:66:5d:ce:42:d6:46:cb:46:ff:7f:d0: f4:47:09:85:4d:3b:b1:e4:61:81:60:5e:57:fc:09: 08:46:01:5d:c7:18:ad:02:73:09:a8:74:94:1c:e4: 65:3c:df:d5:64:4d:70:f3:f4:cb:4f:c7:0e:a5:23: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:56:F4:11:C3:BA:2D:44:2C:D5:13:FA:2D:D8:A1:4E:EB:9F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:04:09:e8:0c:43:29:1d:95:3b:3e:47:d5:c1:46:87:b2:a9: ab:25:ba:d7:16:6b:99:6a:0f:90:1f:95:89:0c:5f:7c:7d:2d: 0b:7c:42:ef:0e:5e:34:fb:5a:70:96:ff:d2:2d:c9:9a:69:52: 8c:01:1b:75:77:35:2f:ec:ac:61:0e:30:5c:28:67:b5:8f:80: b9:b1:09:b9:d1:b4:36:47:74:82:b6:a0:ac:7d:cb:df:be:46: 02:57:2d:c6:e9:25:92:9d:21:a6:35:62:29:2a:da:f3:2b:c0: ed:77:a7:f0:f2:40:14:34:6c:19:32:7f:b0:ff:31:f2:3e:da: e9:73:e1:c2:09:7e:4b:b3:af:70:8f:c4:60:00:dd:fb:9f:81: b8:2d:e6:38:e6:9a:b6:6e:59:90:93:df:a1:d4:8d:56:09:0d: b7:4c:5a:c8:e1:f3:e0:0c:2a:77:6a:2f:69:8a:73:7f:84:1d: 12:9a:48:96:72:89:93:00:30:81:66:9a:20:b3:aa:08:32:e4: 5a:d3:e3:a9:55:08:1e:c9:88:a9:9c:fd:fe:96:f7:0b:d9:40: 3e:cd:eb:8f:dc:6a:bb:9d:ee:09:50:fe:95:ae:34:96:34:40: e2:1f:77:94:a5:89:17:46:69:98:66:ca:d2:d3:ec:2c:d6:aa: 8b:7a:78:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZ5up/Y5xJ8+wB7tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDUxNDE0MDkzMFoXDTI1MDgxMjE0MDkzMFowLzEtMCsGA1UEAxMk YTg0ZTY3MWMtYjJlYy00ODY3LThiNWMtNzhhNDU1YjdmYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23WVGWs94LWoN1/n0PXxfDPNF3xHMnY6c5mH lgTipOazkAQMpAXwaeSbYosxcFE3OLV+GxIaih2oivXHFzfM6Yw3xogAyXshf7qh nZQE5Qf18oAb3WsMLiPMt89OO62QScvCAqStzXB2+4YjmdLw8cC4MmVUriNbj77p lQRGmu5HztQxVYa2HvbWSRUuh61PzlAkFTh0sflwtPLCV01bO/0PzhJ0W1a2o6Ge vy4stt7ULV5tSMKlZ7TWaSV9TAopiCBfRGuUZl3OQtZGy0b/f9D0RwmFTTux5GGB YF5X/AkIRgFdxxitAnMJqHSUHORlPN/VZE1w8/TLT8cOpSNPMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI5VvQRw7otRCzVE/ot2KFO659SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvYTBhYjg5ODEtOWI2Ni0z ZjQxLWJhZjYtYmY0MDI2MTE2NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4ECegMQykdlTs+R9XBRoeyqaslutcWa5lqD5AflYkMX3x9LQt8Qu8O XjT7WnCW/9ItyZppUowBG3V3NS/srGEOMFwoZ7WPgLmxCbnRtDZHdIK2oKx9y9++ RgJXLcbpJZKdIaY1Yikq2vMrwO13p/DyQBQ0bBkyf7D/MfI+2ulz4cIJfkuzr3CP xGAA3fufgbgt5jjmmrZuWZCT36HUjVYJDbdMWsjh8+AMKndqL2mKc3+EHRKaSJZy iZMAMIFmmiCzqggy5FrT46lVCB7JiKmc/f6W9wvZQD7N64/carud7glQ/pWuNJY0 QOIfd5SliRdGaZhmytLT7CzWqot6eAk= -----END CERTIFICATE-----Generated at Tue Jul 1 17:08:59 2025 by rpki-client