$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa File: f3bf331d-19cf-3d03-986c-190a6e650b75.roa (raw, json) Hash identifier: OBbAiFX6C/8d0bRivCHJ860l2wYdkwh7KWEVrsUTpQA= Subject key identifier: 25:9A:09:CD:B8:0A:3A:E9:71:E1:63:44:52:74:A7:0C:52:B5:0B:84 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584A3E45A82123BA042F1E608BC0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 164.153.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a8:21:23:ba:04:2f:1e:60:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=8a394c6e-8de9-481a-bd22-d59ff5c70a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:5c:91:14:67:fa:b8:3c:e5:0d:fd:dc:7c: 3f:c5:01:ed:a7:66:8b:bb:25:2b:50:60:27:a0:57: 62:27:d4:e7:32:16:6b:b7:04:23:ad:47:15:6a:80: 43:5c:59:7c:cc:3e:bd:16:c8:3f:b4:34:38:0c:71: ab:62:a6:50:5a:4a:b4:6d:cb:21:e5:c6:af:84:05: 67:a2:91:5e:12:a4:7b:bd:2c:07:90:87:de:88:69: 0c:83:61:55:92:df:14:2f:91:39:57:fe:b4:a8:47: db:f3:62:fb:d5:32:e8:70:3d:37:72:47:d7:c2:08: 1a:de:47:53:72:be:24:6c:ba:dc:3b:d4:3c:9f:12: 07:6e:c9:7a:dc:8a:c4:77:ed:57:bb:91:a6:07:49: c4:97:7b:00:30:f1:3c:21:49:42:f3:99:c0:e7:65: 05:d2:32:db:94:f0:a1:9c:0e:a5:cc:b1:1f:35:85: eb:55:2c:c5:2c:f8:44:5c:7b:f2:29:50:be:c1:9e: 59:b4:05:3d:49:43:73:19:75:97:90:82:59:13:ab: 5d:a0:50:9d:86:9f:7b:43:fe:3f:2a:83:aa:b7:fd: dc:2b:e0:26:2b:3f:36:c3:3a:ad:88:b1:b4:e5:e9: 4c:25:83:f4:3a:d4:0a:1d:a6:21:cb:c1:6c:ce:8e: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9A:09:CD:B8:0A:3A:E9:71:E1:63:44:52:74:A7:0C:52:B5:0B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f3:b7:69:eb:c0:c3:2c:19:ac:3b:78:d2:b4:bc:98:69:d4: c3:54:12:3b:24:24:f0:96:12:0d:ec:05:45:5f:38:89:1c:57: 25:34:d0:b0:30:b9:b5:29:69:e0:17:8c:e0:76:39:d5:9e:8f: 57:5b:1f:1e:58:72:aa:8e:1e:20:e9:4e:ea:3b:ed:9b:4c:f3: 98:d6:9e:f7:5a:f9:4e:6d:0f:f2:92:3c:a3:2c:6a:ca:eb:ac: de:a8:9a:2e:34:b4:ff:25:2f:92:49:20:1b:d1:a7:d1:8e:e0: 63:1b:c6:d6:4b:2d:1a:95:a4:63:a1:09:dd:17:87:22:5f:8a: 69:65:7a:a2:8a:06:41:51:88:6e:fd:54:1f:a7:3a:6d:6f:e1: 01:0c:76:6c:34:0d:3c:0c:20:fc:dc:cc:ac:8a:83:e9:34:0d: 04:c8:c0:7e:39:b0:9e:a7:cb:fd:7b:2d:86:58:c1:08:aa:ea: 44:c2:56:2c:7d:59:7b:bb:65:a5:89:5d:e6:02:fd:7b:aa:a1: 7a:cd:12:40:69:b8:af:5e:ee:11:f7:0d:6b:7d:fc:18:54:b3: 1d:ac:3a:c5:ec:e2:52:4e:87:85:1e:ba:a2:d1:26:ce:22:d8: 1a:44:a1:5b:9c:d4:aa:a2:8b:27:3f:7d:58:a0:b3:96:0c:6c: f7:d4:e7:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaghI7oELx5gi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk OGEzOTRjNmUtOGRlOS00ODFhLWJkMjItZDU5ZmY1YzcwYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMxckRRn+rg85Q393Hw/xQHtp2aLuyUrUGAn oFdiJ9TnMhZrtwQjrUcVaoBDXFl8zD69Fsg/tDQ4DHGrYqZQWkq0bcsh5cavhAVn opFeEqR7vSwHkIfeiGkMg2FVkt8UL5E5V/60qEfb82L71TLocD03ckfXwgga3kdT cr4kbLrcO9Q8nxIHbsl63IrEd+1Xu5GmB0nEl3sAMPE8IUlC85nA52UF0jLblPCh nA6lzLEfNYXrVSzFLPhEXHvyKVC+wZ5ZtAU9SUNzGXWXkIJZE6tdoFCdhp97Q/4/ KoOqt/3cK+AmKz82wzqtiLG05elMJYP0OtQKHaYhy8Fszo4RTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWaCc24CjrpceFjRFJ0pwxStQuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvZjNiZjMzMWQtMTljZi0z ZDAzLTk4NmMtMTkwYTZlNjUwYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLzt2nrwMMsGaw7eNK0vJhp1MNUEjskJPCWEg3sBUVfOIkcVyU00LAw ubUpaeAXjOB2OdWej1dbHx5YcqqOHiDpTuo77ZtM85jWnvda+U5tD/KSPKMsasrr rN6omi40tP8lL5JJIBvRp9GO4GMbxtZLLRqVpGOhCd0XhyJfimlleqKKBkFRiG79 VB+nOm1v4QEMdmw0DTwMIPzczKyKg+k0DQTIwH45sJ6ny/17LYZYwQiq6kTCVix9 WXu7ZaWJXeYC/XuqoXrNEkBpuK9e7hH3DWt9/BhUsx2sOsXs4lJOh4UeuqLRJs4i 2BpEoVuc1Kqiiyc/fVigs5YMbPfU5y8= -----END CERTIFICATE-----Generated at Sun Jun 29 01:33:48 2025 by rpki-client