$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/baa444ec-2612-3e52-9e77-5b37b89d8343.roa File: baa444ec-2612-3e52-9e77-5b37b89d8343.roa (raw, json) Hash identifier: zhu9gZ3eWnoXg3mZaDfhtl65DlLb9652DuFROwHEnyY= Subject key identifier: F7:FA:0B:61:F1:E1:76:A7:09:CD:AE:3F:A7:B5:86:0D:00:96:29:A8 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584A7FE0921E026B05D248CCBD80 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/baa444ec-2612-3e52-9e77-5b37b89d8343.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 159.183.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:92:1e:02:6b:05:d2:48:cc:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=0fd0e454-0dd0-49b8-a5bf-4a1f29317a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:25:ab:8b:e3:bc:43:03:73:50:e8:ae:cb: 65:3d:52:db:57:68:f5:02:63:99:ae:70:95:51:cb: dd:91:15:6e:5f:fe:22:10:31:f5:fd:2b:79:2a:9c: 47:79:55:37:07:ae:89:c3:16:8e:73:8f:ee:e1:2d: f8:9b:2c:bb:9a:a7:f2:fe:48:13:1a:3a:f2:9a:9b: df:33:38:3c:00:9e:5f:e8:ed:ef:6b:6e:4a:7e:6d: f4:9f:f3:0f:b4:37:36:f3:7a:46:b9:47:6e:9d:0b: af:5b:e5:23:d5:81:db:f2:22:f2:a1:ec:e6:e5:dd: b1:65:fd:2f:51:11:f6:17:32:a8:1f:93:79:8b:f5: 24:ef:24:15:46:b1:8f:66:6d:56:a7:25:94:1b:51: e0:10:41:14:2c:33:12:9c:4c:91:01:8a:5b:e1:fb: f0:f6:d8:2a:c1:b6:15:e1:0e:1b:69:58:bd:02:2b: 96:61:c4:c4:8d:aa:7e:64:f6:0a:57:79:5b:77:64: 0a:94:cc:cc:7b:fa:01:60:a6:be:05:51:2e:54:8e: 8d:49:6d:3e:59:5b:be:2a:db:73:65:11:6f:5a:da: 88:29:cc:18:fd:3f:23:c1:40:fa:f9:4f:60:c4:20: e9:e8:08:3c:b8:bb:83:14:0d:e1:52:ad:21:d6:7e: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FA:0B:61:F1:E1:76:A7:09:CD:AE:3F:A7:B5:86:0D:00:96:29:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/baa444ec-2612-3e52-9e77-5b37b89d8343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bb:0d:8f:ad:5a:0e:9a:19:e9:c2:6f:dd:e6:63:dc:af:fd: 86:a7:9a:c6:d1:4e:ab:be:fa:48:15:bd:5e:49:bc:d0:1f:b7: c1:08:ac:25:d6:0a:0d:c2:2f:87:9b:ca:8c:46:83:de:68:ef: 42:03:14:25:71:ee:e1:e2:39:55:eb:f2:ef:7a:f4:db:c0:97: ae:a4:3d:23:60:5c:bb:f9:d2:5c:02:cc:ee:63:c3:e0:4e:5b: 90:0b:9e:90:e5:8a:3d:12:06:1a:df:f9:88:1f:8b:94:19:ed: f7:bf:2a:13:a1:a4:04:8d:c8:59:f6:03:f7:1a:da:f0:d6:9e: 97:89:0d:0f:bf:ff:49:f1:a8:6d:35:bc:d4:9c:de:7a:dc:89: 6b:b2:da:aa:06:e7:f1:13:e5:d1:7f:ac:1e:aa:04:dd:69:f4: e7:5d:04:56:99:fa:e4:e8:1d:cb:9d:ea:1e:88:1e:04:ff:fd: 2d:94:14:61:f4:3e:fe:11:4a:f0:c6:72:93:0d:47:d7:9d:72: 10:be:21:62:8c:74:7f:82:c8:1d:22:02:04:b1:a5:76:97:71: e0:e4:3d:96:a5:aa:b8:39:48:71:3a:4e:d5:39:21:a4:f5:f7: 20:b3:1e:6a:be:9e:f4:9c:bc:bd:f6:ff:09:eb:70:06:48:d9: e1:25:3f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JIeAmsF0kjMvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MGZkMGU0NTQtMGRkMC00OWI4LWE1YmYtNGExZjI5MzE3YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX0lq4vjvEMDc1DorstlPVLbV2j1AmOZrnCV UcvdkRVuX/4iEDH1/St5KpxHeVU3B66JwxaOc4/u4S34myy7mqfy/kgTGjrympvf Mzg8AJ5f6O3va25Kfm30n/MPtDc283pGuUdunQuvW+Uj1YHb8iLyoezm5d2xZf0v URH2FzKoH5N5i/Uk7yQVRrGPZm1WpyWUG1HgEEEULDMSnEyRAYpb4fvw9tgqwbYV 4Q4baVi9AiuWYcTEjap+ZPYKV3lbd2QKlMzMe/oBYKa+BVEuVI6NSW0+WVu+Kttz ZRFvWtqIKcwY/T8jwUD6+U9gxCDp6Ag8uLuDFA3hUq0h1n7lEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf6C2Hx4XanCc2uP6e1hg0AlimoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYmFhNDQ0ZWMtMjYxMi0z ZTUyLTllNzctNWIzN2I4OWQ4MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7c4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq7DY+tWg6aGenCb93mY9yv/YanmsbRTqu++kgVvV5JvNAft8EIrCXW Cg3CL4ebyoxGg95o70IDFCVx7uHiOVXr8u969NvAl66kPSNgXLv50lwCzO5jw+BO W5ALnpDlij0SBhrf+Ygfi5QZ7fe/KhOhpASNyFn2A/ca2vDWnpeJDQ+//0nxqG01 vNSc3nrciWuy2qoG5/ET5dF/rB6qBN1p9OddBFaZ+uToHcud6h6IHgT//S2UFGH0 Pv4RSvDGcpMNR9edchC+IWKMdH+CyB0iAgSxpXaXceDkPZalqrg5SHE6TtU5IaT1 9yCzHmq+nvScvL32/wnrcAZI2eElP1g= -----END CERTIFICATE-----Generated at Fri Jul 25 12:48:52 2025 by rpki-client