$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa File: dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa (raw, json) Hash identifier: DnqwDbjbHbowUbZrZzcFsQWLgmmJboLHVwvLZo8PwFU= Subject key identifier: 06:07:07:11:6A:D6:32:4D:5F:2B:BD:AD:D4:93:84:6A:DD:55:6A:3E Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584A7FE091E6B3E3760C67019D80 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 159.183.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:91:e6:b3:e3:76:0c:67:01:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=78296a6f-5064-4265-ab82-ad10486abd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:32:72:62:24:c9:ad:49:8c:26:14:a6:54: a2:77:2c:2d:3f:d0:43:0c:5b:fd:8d:f7:88:86:92: b9:21:56:e3:76:b7:27:64:f4:c6:ca:8f:82:f5:89: 43:2c:4f:2c:7e:c7:6e:16:93:fd:2a:75:3e:f7:fe: ae:b6:94:8c:48:46:d0:83:33:e5:5d:64:47:df:e8: 6f:3f:08:45:a9:c6:77:0b:e2:5f:63:c4:ad:68:6c: f5:85:e0:a6:ad:c5:e3:f0:55:6d:47:e7:4a:f5:82: c9:89:38:c8:e7:d3:27:7a:c5:50:9a:fe:fd:15:0b: 99:40:e7:ac:cb:95:3a:63:11:35:f0:da:be:f5:66: f4:ef:77:38:ff:cd:93:1e:a4:59:ce:5a:95:20:8a: 00:49:49:60:8f:32:b9:b2:48:bf:0f:0e:7a:81:bb: 26:b5:1c:d9:c4:14:f0:ef:37:82:10:0b:13:25:db: 42:2c:48:de:14:40:83:4b:25:7a:53:c7:d5:b8:97: 7c:ce:ef:b4:80:67:c8:f6:21:5c:c3:6c:30:bc:c8: ad:9b:22:bc:20:9f:28:a0:33:92:cc:0e:f2:e2:3f: 24:84:dc:c4:52:6a:48:d8:ad:31:72:0f:88:ee:f3: 87:94:2c:ba:e2:83:bc:53:17:25:ee:fb:90:8f:6c: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:07:11:6A:D6:32:4D:5F:2B:BD:AD:D4:93:84:6A:DD:55:6A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 159.183.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:81:95:6d:12:85:ab:0f:0e:85:8f:30:dd:fc:18:2c:e6:cf: 96:44:76:98:ba:72:08:bb:5f:0f:8c:4e:5d:83:4e:30:bb:7d: 43:89:f5:3f:c3:cb:29:f5:f6:71:49:97:6b:32:b9:5b:ca:d8: 25:fc:c3:31:ab:5b:45:6a:bb:37:f2:11:b6:53:13:09:c3:f6: 06:c8:b4:2b:e8:93:a8:87:93:3a:ab:c7:d1:5c:ee:64:14:0d: 0d:73:13:f8:a7:f7:ef:c2:10:7f:56:1b:ec:58:cf:37:16:0d: 80:08:d6:bf:f2:03:b6:6f:44:52:27:02:09:0c:98:30:e8:0e: 53:29:61:59:eb:21:5f:11:72:19:ba:09:8b:9e:5e:b2:1e:ae: 12:23:7f:50:e6:08:de:fd:4e:80:c1:8a:a2:50:dd:56:9e:0b: 60:8a:f4:a5:22:6e:56:08:7e:f6:f9:c7:f7:28:c1:74:31:e0: 6b:73:7e:29:23:a1:8d:ab:51:51:c4:7e:ab:6b:7a:e3:d1:6b: 1e:8f:25:35:4e:14:03:1e:6f:f1:b4:66:a8:a8:08:6c:c3:1b: 26:ca:9a:99:37:94:68:29:ca:9e:cc:5e:d4:55:ab:89:39:17: ca:ad:4f:76:c3:a7:7e:7a:81:3d:f9:86:74:7f:5b:6e:88:30: 2c:01:f2:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JHms+N2DGcBnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NzgyOTZhNmYtNTA2NC00MjY1LWFiODItYWQxMDQ4NmFiZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyAycmIkya1JjCYUplSidywtP9BDDFv9jfeI hpK5IVbjdrcnZPTGyo+C9YlDLE8sfsduFpP9KnU+9/6utpSMSEbQgzPlXWRH3+hv PwhFqcZ3C+JfY8StaGz1heCmrcXj8FVtR+dK9YLJiTjI59MnesVQmv79FQuZQOes y5U6YxE18Nq+9Wb073c4/82THqRZzlqVIIoASUlgjzK5ski/Dw56gbsmtRzZxBTw 7zeCEAsTJdtCLEjeFECDSyV6U8fVuJd8zu+0gGfI9iFcw2wwvMitmyK8IJ8ooDOS zA7y4j8khNzEUmpI2K0xcg+I7vOHlCy64oO8Uxcl7vuQj2wBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYHBxFq1jJNXyu9rdSThGrdVWo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvZGRlMmViZDEtMzdmNC0z YTQ4LTgxMWYtYzEzOWZmMTNhN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7c4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6BlW0ShasPDoWPMN38GCzmz5ZEdpi6cgi7Xw+MTl2DTjC7fUOJ9T/D yyn19nFJl2syuVvK2CX8wzGrW0VquzfyEbZTEwnD9gbItCvok6iHkzqrx9Fc7mQU DQ1zE/in9+/CEH9WG+xYzzcWDYAI1r/yA7ZvRFInAgkMmDDoDlMpYVnrIV8Rchm6 CYueXrIerhIjf1DmCN79ToDBiqJQ3VaeC2CK9KUiblYIfvb5x/cowXQx4Gtzfikj oY2rUVHEfqtreuPRax6PJTVOFAMeb/G0ZqioCGzDGybKmpk3lGgpyp7MXtRVq4k5 F8qtT3bDp356gT35hnR/W26IMCwB8lc= -----END CERTIFICATE-----Generated at Fri Jul 25 12:43:47 2025 by rpki-client