$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa File: 120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa (raw, json) Hash identifier: r8pQYhKUWFoIioBrUG2gIbdrmrMygOUZ8kZrKCBlPkw= Subject key identifier: C3:72:F5:E0:1A:62:F5:54:A5:EE:F3:25:EC:46:D6:69:23:69:27:61 Certificate issuer: /CN=da61168f-5649-4fda-acc2-e65f377d2592 Certificate serial: 010D0C9F4328584A3E45974EAC3D1B1FB13F2A04 Authority key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 155.46.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:97:4e:ac:3d:1b:1f:b1:3f:2a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61168f-5649-4fda-acc2-e65f377d2592 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=2ef41026-c51a-4417-8628-c9e1acade569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:21:20:89:25:6e:6d:39:d2:72:2c:7d:7a: 6a:38:fe:d4:aa:bf:b4:de:01:bc:1f:39:59:b8:50: 70:4e:d2:60:76:2d:31:20:a4:b1:d8:9e:2f:21:f1: e9:1a:3e:b7:a4:e9:0e:50:67:e1:cd:39:6c:6c:81: 6e:32:f0:a6:66:30:bd:af:10:fe:c9:33:d5:18:d2: 10:b3:60:0d:fd:d9:0c:ce:6f:89:ad:f5:12:80:dc: 0c:df:db:10:39:2b:05:5f:55:68:b1:be:78:71:e3: a0:8a:a9:55:65:25:84:f3:91:ff:e8:f4:5f:36:8d: 29:44:4c:6e:c3:00:95:95:3a:b8:24:7e:c4:7a:94: af:1c:b4:fc:78:10:a6:64:f3:7e:0f:a6:93:ff:8b: b3:94:73:fd:6d:62:c5:da:b2:08:9c:d8:06:83:9f: da:75:f5:06:1f:e7:fe:72:28:a8:51:e1:ba:27:2a: b2:a4:21:bf:7d:ec:8e:5a:14:52:53:12:20:32:e6: 3c:5e:14:5d:60:57:00:34:6f:08:5c:2d:63:d4:8a: 78:df:56:00:11:f4:c1:07:76:d2:6b:9c:1e:c9:bb: 80:4d:e1:b5:2b:60:01:d4:db:b8:cb:b5:6a:53:cf: fd:4c:00:f4:18:a0:5e:07:78:e3:76:19:da:f0:c4: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:72:F5:E0:1A:62:F5:54:A5:EE:F3:25:EC:46:D6:69:23:69:27:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/120a7d60-f2a5-3c9a-9bdb-2e8e697256d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.crl X509v3 Authority Key Identifier: keyid:E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer sbgp-ipAddrBlock: critical IPv4: 155.46.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c4:f7:36:9c:d9:46:90:3d:54:24:49:50:85:94:96:54:c4: 57:a8:9f:7a:52:e3:5e:af:bc:b7:f0:e5:a4:c7:c4:b1:64:5a: a2:78:ad:d2:cc:58:6b:e3:0e:7e:82:e6:b0:7e:6d:7a:e1:15: 0a:a2:a6:19:87:b1:e2:0a:a0:df:e2:f4:12:ba:91:28:d3:34: 36:be:9a:5c:e7:7b:3c:1e:77:49:7c:7b:2e:10:6e:f2:01:40: 7d:14:33:cf:3b:41:2f:df:30:5b:c8:38:c1:67:16:27:83:37: 48:71:95:d4:b7:0c:84:6b:35:4f:9b:c1:71:81:87:70:2c:79: 51:4a:00:4a:2d:ed:10:ea:4d:61:7d:30:24:be:01:9a:a5:e8: 6f:35:16:3e:43:54:19:ab:0e:c4:8f:fe:ce:ca:e6:6a:6c:9a: 64:ca:00:b2:54:a8:03:44:ba:7f:69:c1:11:8b:34:7a:2b:6c: d8:8c:98:91:f0:8f:cb:8d:ec:d0:08:a8:62:a5:36:c6:72:f6: 4b:22:86:01:b6:e8:0d:32:cc:fb:23:2c:52:3a:79:a8:48:9e: 4b:57:26:d5:2d:f0:f7:e8:5a:58:ad:e2:da:90:19:6b:ac:e4: 60:4c:5c:4c:bc:3c:e3:a8:91:6b:35:28:92:8f:11:a6:50:51: 67:b2:b2:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZdOrD0bH7E/KgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2Qy NTkyMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MmVmNDEwMjYtYzUxYS00NDE3LTg2MjgtYzllMWFjYWRlNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4YhIIklbm050nIsfXpqOP7Uqr+03gG8HzlZ uFBwTtJgdi0xIKSx2J4vIfHpGj63pOkOUGfhzTlsbIFuMvCmZjC9rxD+yTPVGNIQ s2AN/dkMzm+JrfUSgNwM39sQOSsFX1Vosb54ceOgiqlVZSWE85H/6PRfNo0pRExu wwCVlTq4JH7EepSvHLT8eBCmZPN+D6aT/4uzlHP9bWLF2rIInNgGg5/adfUGH+f+ ciioUeG6JyqypCG/feyOWhRSUxIgMuY8XhRdYFcANG8IXC1j1Ip431YAEfTBB3bS a5weybuATeG1K2AB1Nu4y7VqU8/9TAD0GKBeB3jjdhna8MSRtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNy9eAaYvVUpe7zJexG1mkjaSdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYx MTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvMTIwYTdkNjAtZjJhNS0z YzlhLTliZGItMmU4ZTY5NzI1NmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGE2MTE2OGYtNTY0OS00ZmRhLWFj YzItZTY1ZjM3N2QyNTkyL2RhNjExNjhmLTU2NDktNGZkYS1hY2MyLWU2NWYzNzdk MjU5Mi5jcmwwHwYDVR0jBBgwFoAU4GOzDFMmOtVqA1p0jJMUFc8ADFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVm Mzc3ZDI1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmy7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLE9zac2UaQPVQkSVCFlJZUxFeon3pS416vvLfw5aTHxLFkWqJ4rdLM WGvjDn6C5rB+bXrhFQqiphmHseIKoN/i9BK6kSjTNDa+mlznezwed0l8ey4QbvIB QH0UM887QS/fMFvIOMFnFieDN0hxldS3DIRrNU+bwXGBh3AseVFKAEot7RDqTWF9 MCS+AZql6G81Fj5DVBmrDsSP/s7K5mpsmmTKALJUqANEun9pwRGLNHorbNiMmJHw j8uN7NAIqGKlNsZy9ksihgG26A0yzPsjLFI6eahInktXJtUt8PfoWlit4tqQGWus 5GBMXEy8POOokWs1KJKPEaZQUWeyspQ= -----END CERTIFICATE-----Generated at Sun Jun 29 06:03:00 2025 by rpki-client