$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa File: 5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (raw, json) Hash identifier: 5yKuQMuR9mak6wCKsLZ7mloXh4itboqfZCjjY8fF5Y8= Subject key identifier: 59:A5:D0:4F:4C:FC:E3:DA:2F:85:A0:7F:23:3A:9D:8E:18:2C:D8:95 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584A23C0054C3A77C3526D76C670 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 21766 IP address blocks: 152.97.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:05:4c:3a:77:c3:52:6d:76:c6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=77c3cec5-bb43-4a6d-9341-76b81a191056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:30:79:dc:4c:3b:93:29:8e:b9:8d:02:8d: 16:27:02:4d:5d:eb:0c:06:0f:37:aa:09:84:b8:f6: 26:ac:77:b8:6e:27:61:e2:8c:c2:84:5a:58:9d:76: 19:ff:6b:ba:52:ea:59:52:a5:a6:e9:74:5d:73:e5: 13:f7:99:c8:e4:c9:cd:aa:92:22:a8:dd:cb:ff:b7: ae:fa:a5:78:41:2b:0e:45:bb:4c:eb:06:0c:8b:21: d8:cf:06:7b:2c:4a:2b:ad:b4:e4:f7:cc:c4:07:e0: 2c:6f:60:16:69:7b:3a:bf:8b:75:50:a4:54:99:20: 80:d4:9c:f9:c7:5b:1f:ce:44:af:04:26:27:de:0c: b8:d2:67:57:51:c7:3c:e9:75:5c:9c:0a:c5:27:7f: 8e:f7:e6:d1:cd:9c:75:5c:cf:05:c1:7e:d3:21:ab: 09:af:bc:2a:09:0d:bd:19:e7:50:1c:b3:28:0d:91: 62:7c:d3:72:a6:44:44:dd:dc:3e:ef:78:bb:05:e1: 94:df:26:b1:42:7b:ee:20:61:35:d1:81:44:ee:a1: 43:77:ad:85:4d:6c:71:ba:bb:f0:c1:7f:1f:6f:f1: 3c:62:21:33:ea:f2:10:0b:cc:24:22:ea:36:22:04: b5:a8:95:39:e1:dc:07:00:48:ef:d8:cc:77:af:5c: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A5:D0:4F:4C:FC:E3:DA:2F:85:A0:7F:23:3A:9D:8E:18:2C:D8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4f:49:f1:5c:20:e2:00:a6:10:5a:e3:8c:42:00:0b:11:3a: d0:4e:fe:55:cb:18:ae:76:d2:83:19:52:a3:83:90:0b:02:ef: 3e:72:59:33:1b:63:10:31:fa:a7:6f:16:2d:81:b7:98:f0:b4: a5:7f:fe:68:fc:86:bc:bd:4e:ae:56:1c:68:2e:8d:00:0a:05: 64:f7:c2:2a:df:4c:b1:2f:ad:f6:27:2f:2e:9b:f0:09:ca:5a: b5:88:6a:19:50:b9:c5:ca:af:d8:bc:ae:17:f3:77:3d:37:45: 92:41:9e:ce:bc:9f:71:0a:3e:61:eb:79:3d:7b:78:96:b2:d8: 88:3e:7c:47:1b:51:86:f5:c1:d4:02:d8:5e:42:99:1a:dc:b9: e3:e0:c9:65:48:c4:a8:42:dc:64:43:33:ea:8b:75:36:fa:a1: 22:a0:02:6a:67:ac:ce:47:c3:50:43:6d:65:cc:67:87:6b:e6: 4f:88:b7:ae:db:12:b7:4d:10:7b:bc:df:9c:96:fd:6f:c7:6e: 1a:c0:9a:42:16:06:5e:cd:3b:8c:e3:58:73:10:8d:d6:66:c0: 2b:c4:82:0a:ca:cc:f9:77:13:81:81:51:a2:7d:6f:b7:bd:23: 3f:ef:87:0f:07:33:1b:e0:35:c7:12:24:8d:91:4f:cc:39:6e: f1:eb:db:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAVMOnfDUm12xnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NzdjM2NlYzUtYmI0My00YTZkLTkzNDEtNzZiODFhMTkxMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthUwedxMO5MpjrmNAo0WJwJNXesMBg83qgmE uPYmrHe4bidh4ozChFpYnXYZ/2u6UupZUqWm6XRdc+UT95nI5MnNqpIiqN3L/7eu +qV4QSsORbtM6wYMiyHYzwZ7LEorrbTk98zEB+Asb2AWaXs6v4t1UKRUmSCA1Jz5 x1sfzkSvBCYn3gy40mdXUcc86XVcnArFJ3+O9+bRzZx1XM8FwX7TIasJr7wqCQ29 GedQHLMoDZFifNNypkRE3dw+73i7BeGU3yaxQnvuIGE10YFE7qFDd62FTWxxurvw wX8fb/E8YiEz6vIQC8wkIuo2IgS1qJU54dwHAEjv2Mx3r1zX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFml0E9M/OPaL4WgfyM6nY4YLNiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWFjZjU3YTktNmQ1ZC0z MmQ5LThlOWItOWEyMmNjZTFmZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmGFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9PSfFcIOIAphBa44xCAAsROtBO/lXLGK520oMZUqODkAsC7z5yWTMb YxAx+qdvFi2Bt5jwtKV//mj8hry9Tq5WHGgujQAKBWT3wirfTLEvrfYnLy6b8AnK WrWIahlQucXKr9i8rhfzdz03RZJBns68n3EKPmHreT17eJay2Ig+fEcbUYb1wdQC 2F5CmRrcuePgyWVIxKhC3GRDM+qLdTb6oSKgAmpnrM5Hw1BDbWXMZ4dr5k+It67b ErdNEHu835yW/W/HbhrAmkIWBl7NO4zjWHMQjdZmwCvEggrKzPl3E4GBUaJ9b7e9 Iz/vhw8HMxvgNccSJI2RT8w5bvHr28A= -----END CERTIFICATE-----Generated at Mon Jun 30 03:52:27 2025 by rpki-client