$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa File: b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa (raw, json) Hash identifier: clEsh+ZwMqKB0FR7unP2+y8RPWc/nDSYRoPAOdpxDrE= Subject key identifier: 74:BB:A8:42:14:29:62:9F:80:4C:E9:69:63:50:3C:34:6E:84:32:08 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584A3E45A1C0E0DF4F38CE5206C0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 32710 IP address blocks: 164.153.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a1:c0:e0:df:4f:38:ce:52:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=63c34c82-180a-4c95-8f72-cd486eb31323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:61:f2:6b:e7:85:71:e5:c1:7a:46:07:e6: cf:71:5b:6a:25:ae:14:0d:09:50:c0:88:99:2f:db: c7:12:46:8d:72:21:c8:e2:1e:cf:c0:4b:a0:15:f1: 16:d2:81:a0:d7:cd:88:85:b0:dc:d9:f8:18:00:d5: 94:6a:0c:5b:d8:45:e2:48:8c:da:f2:23:5c:32:d9: 90:6f:00:b6:46:07:5d:bc:97:30:05:0d:ee:df:74: fc:33:b3:e2:8e:15:0f:92:7a:4a:44:2c:27:22:18: 23:de:a0:bd:1b:c4:1f:92:4a:ee:f9:da:25:f4:c5: 60:01:3c:f2:f4:09:18:80:20:49:37:72:5a:fa:7b: 24:7a:3e:4c:c8:e0:3a:c5:02:9e:8b:78:97:85:7a: 50:3e:a6:be:a6:08:14:83:45:0f:4c:68:e2:c8:99: de:01:c8:2d:f8:80:27:c0:4a:a3:85:da:f8:98:22: dd:04:32:b3:ed:81:f5:35:79:5b:3e:5e:cb:30:74: 18:bc:84:32:18:fc:96:d7:7e:0c:d5:d1:48:70:79: 8c:da:fe:d4:92:72:37:94:09:5f:7f:24:35:31:21: 5c:5a:6f:10:a2:59:78:61:22:8a:0e:97:5d:fb:7f: 3e:a2:87:55:42:e2:84:b6:d8:2f:2c:dd:4a:71:e0: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BB:A8:42:14:29:62:9F:80:4C:E9:69:63:50:3C:34:6E:84:32:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:66:7a:05:c0:5e:f1:f5:5f:e4:64:43:0d:90:ef:7e:10:91: b7:04:99:5f:4f:fd:d0:cb:ad:15:a1:e0:e4:5b:5f:e3:cf:76: 8c:38:09:5a:97:1a:c4:03:28:fe:ab:4a:47:a4:e7:43:84:d4: 57:b2:aa:fc:f8:10:b7:38:87:ad:f9:5a:ae:b3:14:9a:75:5e: ad:9d:4c:7a:35:f8:c4:06:10:5d:58:5c:81:61:be:03:e1:62: 0e:e4:ab:b8:6d:60:0b:1f:36:3c:d1:7b:13:ef:d1:3c:bd:ff: bb:1f:54:e4:7d:af:e2:d5:7f:9b:22:16:23:b0:8e:f9:c9:4e: 26:4e:82:06:45:69:90:8c:9e:9d:3d:d3:3a:63:c1:7e:4d:b4: 02:1d:5b:8b:79:77:18:79:d4:28:ae:1a:5a:12:d7:2d:37:98: d0:6a:ff:6b:67:c8:4f:5b:17:a7:52:83:39:e6:6d:33:5b:a6: eb:cb:89:8a:78:c3:4c:f6:fc:1a:b5:3e:32:1c:2a:88:16:03: 00:ed:b5:c5:1b:e7:52:f7:f0:dc:5a:94:d8:99:6d:4d:81:f3: e7:0a:99:7f:03:6c:cb:1e:0b:71:02:1c:33:c4:2e:e2:7e:53: e1:a1:1a:45:70:06:59:fd:23:2f:98:94:fb:ff:cb:04:67:89: c6:f7:89:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaHA4N9POM5SBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk NjNjMzRjODItMTgwYS00Yzk1LThmNzItY2Q0ODZlYjMxMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphh8mvnhXHlwXpGB+bPcVtqJa4UDQlQwIiZ L9vHEkaNciHI4h7PwEugFfEW0oGg182IhbDc2fgYANWUagxb2EXiSIza8iNcMtmQ bwC2RgddvJcwBQ3u33T8M7PijhUPknpKRCwnIhgj3qC9G8Qfkkru+dol9MVgATzy 9AkYgCBJN3Ja+nskej5MyOA6xQKei3iXhXpQPqa+pggUg0UPTGjiyJneAcgt+IAn wEqjhdr4mCLdBDKz7YH1NXlbPl7LMHQYvIQyGPyW134M1dFIcHmM2v7UknI3lAlf fyQ1MSFcWm8Qoll4YSKKDpdd+38+oodVQuKEttgvLN1KceBRbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS7qEIUKWKfgEzpaWNQPDRuhDIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYjFhMjQxOGEtYmUwZS0z NmY1LWFjYjctZTczNzFlYTg4Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxmegXAXvH1X+RkQw2Q734QkbcEmV9P/dDLrRWh4ORbX+PPdow4CVqX GsQDKP6rSkek50OE1Feyqvz4ELc4h635Wq6zFJp1Xq2dTHo1+MQGEF1YXIFhvgPh Yg7kq7htYAsfNjzRexPv0Ty9/7sfVOR9r+LVf5siFiOwjvnJTiZOggZFaZCMnp09 0zpjwX5NtAIdW4t5dxh51CiuGloS1y03mNBq/2tnyE9bF6dSgznmbTNbpuvLiYp4 w0z2/Bq1PjIcKogWAwDttcUb51L38NxalNiZbU2B8+cKmX8DbMseC3ECHDPELuJ+ U+GhGkVwBln9Iy+YlPv/ywRnicb3ibE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:30:17 2025 by rpki-client