$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa File: d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa (raw, json) Hash identifier: HWd25XqiFcyBnWxdJyeQDTBQNL7X4WIPhfP+CpXMKeo= Subject key identifier: F1:E7:A4:FA:56:86:B8:4A:09:42:CA:06:90:1C:36:01:74:9C:5E:44 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F43285849E6FED286F33CE3303ED4FB80 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa Signing time: Mon 19 May 2025 06:43:11 +0000 ROA not before: Mon 19 May 2025 06:43:11 +0000 ROA not after: Sun 17 Aug 2025 06:43:11 +0000 asID: 14618 IP address blocks: 157.239.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:fe:d2:86:f3:3c:e3:30:3e:d4:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: May 19 06:43:11 2025 GMT Not After : Aug 17 06:43:11 2025 GMT Subject: CN=1edb3570-b18a-40ee-8e6d-da9b7b0552ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:08:10:e5:88:21:ac:23:18:2e:67:5e:80: 2a:25:5b:be:72:a5:f0:8c:26:3b:11:41:8d:54:21: f2:f9:c0:a2:f4:cb:01:29:a5:aa:37:34:50:c0:53: a8:60:54:c8:1d:98:24:7a:ca:8a:85:1a:d5:c5:2c: ef:f3:a6:1f:e5:e9:da:be:75:ff:da:51:d9:35:7f: b3:e1:5d:31:a9:91:bc:14:48:55:b3:d6:76:23:4d: e3:90:c5:1f:5d:3e:ff:65:14:30:42:7f:79:9d:71: 2e:d1:83:a6:fe:d2:03:1f:6c:a4:49:03:01:cb:d7: a4:18:aa:87:f8:4a:8b:fd:45:e7:11:6f:87:38:02: 29:b2:9d:cf:01:d9:0d:b1:ac:2c:0b:3a:cd:fe:34: 8a:9d:1f:b4:a2:e5:eb:cb:54:2c:38:c7:4d:39:0b: a3:26:9b:ab:35:d6:e1:6f:ca:c7:22:37:a3:fe:16: 99:4e:23:56:b0:29:20:1f:70:fa:84:e7:5f:a4:aa: ea:0e:a8:c3:63:b5:9d:88:15:e9:74:f6:23:67:8b: 6b:b5:74:9c:ad:fe:f8:70:4d:a0:01:d6:de:d9:da: 5e:ae:88:d6:ee:8b:0e:82:06:4b:67:da:93:25:78: 52:3c:fe:c3:79:b2:14:26:81:fb:9d:21:61:86:1e: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E7:A4:FA:56:86:B8:4A:09:42:CA:06:90:1C:36:01:74:9C:5E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2f:ed:0a:d9:33:68:20:c9:b6:a5:50:e7:dd:77:38:92:bc: 6e:ae:90:73:55:94:86:26:f0:53:cb:92:75:99:da:80:0d:cf: 70:db:8a:07:fc:16:74:8d:a7:a5:18:dd:4d:15:ca:04:ac:e6: 63:a8:80:c1:76:28:4c:0a:30:c1:0a:8a:a4:68:6f:c9:08:76: 4b:25:3d:f8:c2:dd:c5:5d:71:60:69:57:d0:ef:b8:f9:3c:24: b9:a3:43:a0:32:23:34:ee:02:89:aa:33:03:25:8a:4b:aa:ba: b5:47:9e:43:d7:9a:1a:f9:85:17:1f:e7:27:1e:82:c5:12:8c: 9e:c1:4d:0c:d7:f6:66:c1:46:90:24:eb:19:21:73:66:7e:62: 15:fa:9a:c7:44:86:37:c0:80:6c:c1:9a:4a:d4:e5:ee:5b:dc: 24:c7:9d:61:ad:ea:42:77:1f:18:e8:17:57:56:5f:6a:df:b9: 18:70:87:f4:f8:87:5c:be:b6:0c:60:2a:5d:35:2b:e7:37:98: 46:6e:bf:1c:ad:e6:b5:fa:95:b6:3a:f2:9d:b8:83:d3:ce:98: 8b:f2:a8:82:fb:6f:80:49:4d:b0:dd:a9:90:e3:c3:26:41:65: b1:1d:68:0b:8f:89:14:99:fc:3d:0a:d7:a1:11:75:05:b6:2f: 7c:67:fd:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnm/tKG8zzjMD7U+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDUxOTA2NDMxMVoXDTI1MDgxNzA2NDMxMVowLzEtMCsGA1UEAxMk MWVkYjM1NzAtYjE4YS00MGVlLThlNmQtZGE5YjdiMDU1MmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm94IEOWIIawjGC5nXoAqJVu+cqXwjCY7EUGN VCHy+cCi9MsBKaWqNzRQwFOoYFTIHZgkesqKhRrVxSzv86Yf5enavnX/2lHZNX+z 4V0xqZG8FEhVs9Z2I03jkMUfXT7/ZRQwQn95nXEu0YOm/tIDH2ykSQMBy9ekGKqH +EqL/UXnEW+HOAIpsp3PAdkNsawsCzrN/jSKnR+0ouXry1QsOMdNOQujJpurNdbh b8rHIjej/haZTiNWsCkgH3D6hOdfpKrqDqjDY7WdiBXpdPYjZ4trtXScrf74cE2g Adbe2dperojW7osOggZLZ9qTJXhSPP7DebIUJoH7nSFhhh7eBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHnpPpWhrhKCULKBpAcNgF0nF5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZDJjOGFiZjEtZTM2My0z ZjlmLTg4MDgtYmY2ODdiYzU5ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkv7QrZM2ggybalUOfddziSvG6ukHNVlIYm8FPLknWZ2oANz3Dbigf8 FnSNp6UY3U0VygSs5mOogMF2KEwKMMEKiqRob8kIdkslPfjC3cVdcWBpV9DvuPk8 JLmjQ6AyIzTuAomqMwMlikuqurVHnkPXmhr5hRcf5ycegsUSjJ7BTQzX9mbBRpAk 6xkhc2Z+YhX6msdEhjfAgGzBmkrU5e5b3CTHnWGt6kJ3HxjoF1dWX2rfuRhwh/T4 h1y+tgxgKl01K+c3mEZuvxyt5rX6lbY68p24g9POmIvyqIL7b4BJTbDdqZDjwyZB ZbEdaAuPiRSZ/D0K16ERdQW2L3xn/Zw= -----END CERTIFICATE-----Generated at Tue Jul 1 00:49:08 2025 by rpki-client