$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/526cb66a-9285-3724-8398-31801d71add0.roa File: 526cb66a-9285-3724-8398-31801d71add0.roa (raw, json) Hash identifier: 23VGxTrbjBL9gSfDICU5Jkbcy3nPGa5SB+Gh397hYH0= Subject key identifier: 0E:06:65:3A:21:5A:78:6E:91:FD:A5:35:4A:FE:9F:3F:8F:6F:15:C7 Certificate issuer: /CN=a66c9316-dcc4-4df1-a7eb-e47a07e90a6a Certificate serial: 010D0C9F4328584A20F54D0F8D8B563311F4E720 Authority key identifier: 3A:27:B9:0D:E5:50:B2:FA:F6:5C:E5:F6:38:AB:79:26:D3:5C:01:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/526cb66a-9285-3724-8398-31801d71add0.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 393292 IP address blocks: 204.154.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4d:0f:8d:8b:56:33:11:f4:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66c9316-dcc4-4df1-a7eb-e47a07e90a6a Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=3bee56af-0f75-494f-84c6-72555dd6689f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:c5:42:b7:50:e5:dc:87:22:50:1f:c9:6b: 13:4d:54:a6:80:b2:11:4d:50:19:83:f7:16:18:18: e1:6b:0a:03:8e:64:b8:b1:e6:7b:ff:56:29:88:89: f7:1d:0c:7d:18:16:aa:e6:7a:28:cc:de:2e:7c:22: 33:05:56:03:7f:e1:1d:fa:2a:b6:b8:8e:8e:e9:d4: b2:9a:c2:94:27:a1:86:7b:57:1e:2e:67:0b:b7:c1: d0:87:96:c9:a1:07:33:e9:36:17:fd:c2:56:a9:7c: c4:de:a6:d3:86:15:58:7c:b7:dd:ff:a5:a5:ad:e5: 4e:cd:11:e3:5f:5f:f7:b2:72:39:7a:1d:03:e7:0f: f4:f9:d2:9e:97:04:a3:0c:ec:54:ed:ac:2c:c0:21: d4:1a:f9:45:34:9f:62:de:20:8d:37:a8:21:71:3f: 95:ab:13:cf:77:dd:d4:42:6f:bc:3a:f4:e4:b8:2b: 5e:c2:c3:00:5b:8f:ce:e6:0f:99:3b:84:e7:de:99: 3e:0e:0e:8c:c1:e4:06:e6:6c:91:ff:8f:1e:65:c5: 42:0a:d2:7e:07:94:1e:5c:b5:1f:9a:02:ed:e4:34: e8:93:c7:32:8a:38:54:ba:b1:da:41:6b:2d:f3:bc: 58:0b:dd:15:75:5a:41:52:96:bc:96:ad:fa:d6:f3: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:65:3A:21:5A:78:6E:91:FD:A5:35:4A:FE:9F:3F:8F:6F:15:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/526cb66a-9285-3724-8398-31801d71add0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.crl X509v3 Authority Key Identifier: keyid:3A:27:B9:0D:E5:50:B2:FA:F6:5C:E5:F6:38:AB:79:26:D3:5C:01:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:28:f9:fa:34:f2:4f:1f:f4:58:0b:ec:85:ba:34:7f:6c:f4: c1:ef:26:f9:f3:64:a0:a2:4d:1d:ba:43:c5:33:37:8d:65:cc: 09:ae:e9:0c:7f:80:77:25:ce:da:01:1b:16:e3:0a:46:44:b3: 87:d8:65:52:31:2b:69:b8:35:ca:48:d2:44:8f:d5:bf:64:a5: 91:00:bc:5b:3b:f7:dd:23:32:38:ea:d1:17:db:20:9a:e9:47: f6:83:3c:5d:15:a9:e3:5d:29:9a:91:c4:0c:0d:69:8c:d4:d0: 71:f4:0b:22:9d:d9:df:0f:be:3a:03:d8:0a:0d:36:dc:17:64: 96:91:21:4a:1d:bf:98:3e:ca:12:55:39:1b:2a:82:ec:78:93: b7:62:9a:04:5d:17:dc:e3:2d:dc:e3:37:43:5f:25:41:09:3f: 93:95:33:fc:11:62:8d:b4:e5:cc:2b:59:69:fc:5a:96:27:ab: 84:72:00:03:83:31:a6:c4:6e:42:77:2b:15:79:1e:9f:0d:0c: c2:2e:71:3a:a8:a5:46:6d:a9:63:1c:10:6f:46:33:c8:89:18: 21:55:e0:04:95:2b:4a:63:88:97:11:54:d1:42:b5:20:11:3a: 88:09:9c:02:a0:87:87:00:21:9f:74:ca:94:06:e4:a0:46:9a: 16:1d:8e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9U0PjYtWMxH05yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YzkzMTYtZGNjNC00ZGYxLWE3ZWItZTQ3YTA3ZTkw YTZhMB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk M2JlZTU2YWYtMGY3NS00OTRmLTg0YzYtNzI1NTVkZDY2ODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWXFQrdQ5dyHIlAfyWsTTVSmgLIRTVAZg/cW GBjhawoDjmS4seZ7/1YpiIn3HQx9GBaq5noozN4ufCIzBVYDf+Ed+iq2uI6O6dSy msKUJ6GGe1ceLmcLt8HQh5bJoQcz6TYX/cJWqXzE3qbThhVYfLfd/6WlreVOzRHj X1/3snI5eh0D5w/0+dKelwSjDOxU7awswCHUGvlFNJ9i3iCNN6ghcT+VqxPPd93U Qm+8OvTkuCtewsMAW4/O5g+ZO4Tn3pk+Dg6MweQG5myR/48eZcVCCtJ+B5QeXLUf mgLt5DTok8cyijhUurHaQWst87xYC90VdVpBUpa8lq361vMnuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4GZTohWnhukf2lNUr+nz+PbxXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNjZj OTMxNi1kY2M0LTRkZjEtYTdlYi1lNDdhMDdlOTBhNmEvNTI2Y2I2NmEtOTI4NS0z NzI0LTgzOTgtMzE4MDFkNzFhZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTY2YzkzMTYtZGNjNC00ZGYxLWE3 ZWItZTQ3YTA3ZTkwYTZhL2E2NmM5MzE2LWRjYzQtNGRmMS1hN2ViLWU0N2EwN2U5 MGE2YS5jcmwwHwYDVR0jBBgwFoAUOie5DeVQsvr2XOX2OKt5JtNcAQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNjZjOTMxNi1kY2M0LTRkZjEtYTdlYi1lNDdh MDdlOTBhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQo+fo08k8f9FgL7IW6NH9s9MHvJvnzZKCiTR26Q8UzN41lzAmu6Qx/ gHclztoBGxbjCkZEs4fYZVIxK2m4NcpI0kSP1b9kpZEAvFs7990jMjjq0RfbIJrp R/aDPF0VqeNdKZqRxAwNaYzU0HH0CyKd2d8PvjoD2AoNNtwXZJaRIUodv5g+yhJV ORsqgux4k7dimgRdF9zjLdzjN0NfJUEJP5OVM/wRYo205cwrWWn8WpYnq4RyAAOD MabEbkJ3KxV5Hp8NDMIucTqopUZtqWMcEG9GM8iJGCFV4ASVK0pjiJcRVNFCtSAR OogJnAKgh4cAIZ90ypQG5KBGmhYdjro= -----END CERTIFICATE-----Generated at Mon Jun 30 11:57:20 2025 by rpki-client