$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa File: 4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa (raw, json) Hash identifier: g93qQYnJC17uKXIfQH0aOacpo+FDtwG/5qoTUq5U1+s= Subject key identifier: 1B:76:8B:2C:48:C4:DC:33:84:63:7D:33:EA:95:74:B3:C4:9D:BB:21 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584A45402E3526160592878AD2C0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 16570 IP address blocks: 164.153.167.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:2e:35:26:16:05:92:87:8a:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=42e3bf14-9319-4fed-aa9d-9bd75878e115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:37:23:a8:ef:49:b2:82:1b:20:70:1f:86:be: fb:97:33:53:ec:29:26:21:d3:e9:17:78:8c:b7:32: 3b:6a:c7:8c:58:94:b1:43:87:7a:a7:c9:bc:1e:7f: f5:98:6d:55:1f:b9:28:44:b7:59:87:d8:e7:ad:6c: 14:2d:17:00:77:f4:9a:30:b3:03:33:6d:20:72:84: d5:c6:96:bc:4f:73:0b:45:76:7e:64:c4:46:57:0e: ac:f4:5f:09:5c:83:ea:dc:de:a0:33:f1:b1:63:5b: 31:cd:57:9f:53:22:1e:65:52:8c:e8:91:61:1a:03: a5:41:eb:6f:16:cc:34:b8:6f:63:38:4d:ab:72:ee: 4c:88:8c:ee:6c:6f:3b:7d:22:02:b8:1e:e8:22:c6: 3c:05:37:67:bc:5e:d9:c0:2c:5f:19:83:e4:0d:03: 12:9c:03:bd:4c:f8:c0:b9:fc:8e:be:a5:ea:1d:f8: 97:4c:6d:27:92:57:74:50:37:2a:c6:17:c1:d5:f5: 82:dd:50:37:7e:96:5a:fe:ee:dc:1d:5c:fb:7e:af: 50:ff:bf:93:5b:14:1c:78:69:2e:5f:20:49:e6:25: 97:0b:a6:b6:66:2f:d7:31:83:a5:1e:89:37:e7:35: 5a:5f:66:29:89:e9:9e:48:c3:c7:04:d4:ad:c0:e5: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:8B:2C:48:C4:DC:33:84:63:7D:33:EA:95:74:B3:C4:9D:BB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a1:db:4e:06:0f:fa:c2:34:b4:4e:bb:42:10:52:9b:ba:ad: db:a2:77:6f:6c:1c:ac:f2:56:47:70:5b:c0:d9:3d:25:55:ad: c3:93:dd:0d:1f:a1:f9:dd:43:2e:76:7b:74:f3:b4:98:7b:f9: d4:83:30:68:18:d0:88:3e:c6:fd:66:92:4c:b0:6b:f9:95:1f: 65:22:ae:2b:08:64:dd:e0:bd:b6:e2:06:23:af:2e:62:8d:52: 14:05:c0:b7:72:9c:44:33:6a:c6:7f:f0:2e:68:09:ba:d4:d0: 2c:79:22:b0:04:0e:82:7c:71:b2:e1:d6:38:7d:9b:dd:b8:b1: 98:f2:30:95:91:e1:5a:59:3a:44:5a:56:69:78:8f:ce:a8:58: 40:bf:00:76:aa:b4:b0:1c:ea:2f:da:43:7f:21:64:e6:fa:ba: b7:8c:f5:49:d7:48:ee:7d:0f:2d:a3:0d:69:ed:36:64:d2:c1: 3d:b2:63:e6:3b:22:9b:61:6f:63:fe:1d:c5:dc:51:54:de:fe: 38:05:50:4c:da:c7:0e:bb:59:f3:91:d8:e7:4f:f7:24:6b:3e: 35:09:0b:78:27:ae:07:97:e8:6a:7d:24:a7:c1:0d:7b:56:e9: 0c:9a:ba:9e:3f:29:ab:8a:3d:b4:cf:71:09:63:32:aa:ec:06: 80:d0:92:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQC41JhYFkoeK0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk NDJlM2JmMTQtOTMxOS00ZmVkLWFhOWQtOWJkNzU4NzhlMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jcjqO9JsoIbIHAfhr77lzNT7CkmIdPpF3iM tzI7aseMWJSxQ4d6p8m8Hn/1mG1VH7koRLdZh9jnrWwULRcAd/SaMLMDM20gcoTV xpa8T3MLRXZ+ZMRGVw6s9F8JXIPq3N6gM/GxY1sxzVefUyIeZVKM6JFhGgOlQetv Fsw0uG9jOE2rcu5MiIzubG87fSICuB7oIsY8BTdnvF7ZwCxfGYPkDQMSnAO9TPjA ufyOvqXqHfiXTG0nkld0UDcqxhfB1fWC3VA3fpZa/u7cHVz7fq9Q/7+TWxQceGku XyBJ5iWXC6a2Zi/XMYOlHok35zVaX2YpiemeSMPHBNStwOUxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt2iyxIxNwzhGN9M+qVdLPEnbshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvNGI1MjFiMWMtOWJmOC0z Mjk2LTk0NDItMGUzNmYxZjVjYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKh204GD/rCNLROu0IQUpu6rduid29sHKzyVkdwW8DZPSVVrcOT3Q0f ofndQy52e3TztJh7+dSDMGgY0Ig+xv1mkkywa/mVH2UirisIZN3gvbbiBiOvLmKN UhQFwLdynEQzasZ/8C5oCbrU0Cx5IrAEDoJ8cbLh1jh9m924sZjyMJWR4VpZOkRa Vml4j86oWEC/AHaqtLAc6i/aQ38hZOb6ureM9UnXSO59Dy2jDWntNmTSwT2yY+Y7 Ipthb2P+HcXcUVTe/jgFUEzaxw67WfOR2OdP9yRrPjUJC3gnrgeX6Gp9JKfBDXtW 6Qyaup4/KauKPbTPcQljMqrsBoDQkik= -----END CERTIFICATE-----Generated at Sun Jun 29 12:33:04 2025 by rpki-client