$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa File: 5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (raw, json) Hash identifier: //LtPPNkN1BAtPGIdcGWCqb/jUUgCwhUaj9nO5Tx+10= Subject key identifier: 7A:B8:7E:76:2B:D9:0C:DD:6F:06:EE:F6:50:0B:A6:C7:ED:37:83:11 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F43285849DC8FB92A74EE389B05738300 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 21766 IP address blocks: 152.97.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b9:2a:74:ee:38:9b:05:73:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=b5993a97-10b3-456c-9ce4-8487a56fdc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:07:2e:df:de:29:f8:cf:87:a0:71:26:0f: 07:c1:a1:f4:e5:5f:b9:55:36:82:2b:ed:08:4a:f1: 0b:48:2d:9c:f7:91:33:0b:12:88:e5:37:47:97:3e: 0f:20:6b:5e:36:a4:d7:7f:73:1f:47:2f:21:b5:66: f1:b5:2a:90:18:dc:93:f3:9a:0f:2c:33:b4:b2:df: 9d:02:77:11:16:dc:8c:11:d3:13:e8:08:48:0b:b3: 9f:03:13:2b:39:98:6e:c3:4b:31:cc:2f:e8:14:40: 4e:d4:c2:e7:4a:d4:9e:14:49:bd:f4:b8:8c:12:5f: 42:b8:81:07:05:bd:8b:93:af:7c:fa:6a:51:9d:dd: f8:da:01:af:a1:ea:b5:38:fb:76:e9:3f:ce:8f:65: fc:21:6d:35:eb:f3:5f:7e:30:9a:71:27:3e:20:4c: 20:07:1c:23:78:b5:91:70:dd:67:24:ef:1c:81:7b: 96:3c:f5:0f:65:ea:f9:cc:e6:49:3c:e5:55:26:77: b3:2a:45:07:4c:3f:f7:37:7f:16:0e:8c:3f:d0:9d: c3:ee:b6:79:6e:48:66:70:2b:7d:33:79:9c:e1:b5: 32:6b:9b:22:03:14:43:22:72:b3:40:9a:f0:49:a8: 91:f5:53:9f:d9:e9:64:f5:8e:44:64:09:a0:2d:13: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:7E:76:2B:D9:0C:DD:6F:06:EE:F6:50:0B:A6:C7:ED:37:83:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5b:67:26:58:5d:c1:94:dd:98:0a:ce:21:a4:b6:a4:66:b3: 84:0c:4d:60:7f:9d:2c:85:95:51:3d:29:a3:11:a9:ab:b6:7e: 45:b6:36:c5:cb:07:cf:b8:60:54:23:6a:03:33:36:fd:4f:a2: 88:e8:22:95:4f:e5:de:4c:90:b5:5c:f8:23:8d:43:f9:38:9c: 46:c7:c9:52:04:bf:97:83:cc:26:77:99:b3:8a:39:16:77:3f: 4e:41:e6:67:e8:8d:3c:c2:4d:e9:a0:5e:c1:f5:4d:ff:fa:c6: be:14:73:da:af:38:be:ec:3c:2e:40:e0:0a:82:1c:e6:56:38: a8:74:97:d3:a8:49:e4:1b:62:9a:4b:21:94:9e:23:ca:6e:c6: 66:97:b5:0c:9e:e4:65:4a:a2:5c:e1:f3:af:10:68:41:fd:68: ef:e0:4d:83:dd:54:1c:f3:b5:06:75:61:80:f2:84:b1:03:6a: 3f:d0:c9:39:37:8b:c2:0c:80:04:f1:08:50:1d:a5:ce:d2:13: 94:7b:ef:3c:ad:44:99:7d:4b:eb:60:0b:d4:7e:87:fc:1a:b3: 24:6d:b3:94:b9:21:1f:7f:82:e0:77:fd:51:8b:95:ac:57:25: 6b:dc:da:1e:12:32:e7:8c:25:9c:d1:26:ac:6f:69:2e:a1:63: 09:40:64:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7kqdO44mwVzgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YjU5OTNhOTctMTBiMy00NTZjLTljZTQtODQ4N2E1NmZkYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT4HLt/eKfjPh6BxJg8HwaH05V+5VTaCK+0I SvELSC2c95EzCxKI5TdHlz4PIGteNqTXf3MfRy8htWbxtSqQGNyT85oPLDO0st+d AncRFtyMEdMT6AhIC7OfAxMrOZhuw0sxzC/oFEBO1MLnStSeFEm99LiMEl9CuIEH Bb2Lk698+mpRnd342gGvoeq1OPt26T/Oj2X8IW016/NffjCacSc+IEwgBxwjeLWR cN1nJO8cgXuWPPUPZer5zOZJPOVVJnezKkUHTD/3N38WDow/0J3D7rZ5bkhmcCt9 M3mc4bUya5siAxRDInKzQJrwSaiR9VOf2elk9Y5EZAmgLRN08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq4fnYr2Qzdbwbu9lALpsftN4MRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWI1MWE3MTAtZDkwMy0z YTlmLTk4YTItMWYyOWRhMDZlYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmGGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxbZyZYXcGU3ZgKziGktqRms4QMTWB/nSyFlVE9KaMRqau2fkW2NsXL B8+4YFQjagMzNv1PoojoIpVP5d5MkLVc+CONQ/k4nEbHyVIEv5eDzCZ3mbOKORZ3 P05B5mfojTzCTemgXsH1Tf/6xr4Uc9qvOL7sPC5A4AqCHOZWOKh0l9OoSeQbYppL IZSeI8puxmaXtQye5GVKolzh868QaEH9aO/gTYPdVBzztQZ1YYDyhLEDaj/QyTk3 i8IMgATxCFAdpc7SE5R77zytRJl9S+tgC9R+h/wasyRts5S5IR9/guB3/VGLlaxX JWvc2h4SMueMJZzRJqxvaS6hYwlAZKc= -----END CERTIFICATE-----Generated at Mon Jun 30 03:40:29 2025 by rpki-client