$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa File: 6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa (raw, json) Hash identifier: Qw9krpGGOWIu2JbxQFg8sY/ih1iMnwjKAGO6yTRCbh8= Subject key identifier: 23:7E:E8:EC:DE:C9:0C:BC:84:2A:EF:55:27:CB:71:59:5C:35:11:31 Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F43285849D16506FDAAD0B90C5DDA7C00 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 17216 IP address blocks: 192.151.136.0/21 maxlen: 24 198.24.12.0/22 maxlen: 24 199.47.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:06:fd:aa:d0:b9:0c:5d:da:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=03b130b5-4f8b-4c79-8517-5c77463ff481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:9c:64:b5:1f:67:3f:77:c2:8e:f4:ab:39: df:33:13:8d:2a:e3:39:77:d4:be:0f:f1:2e:fb:6d: bb:16:1c:fd:78:ca:7f:39:46:cb:3d:a1:2b:d4:85: 6b:de:e8:28:93:9a:2b:3b:c4:ea:60:81:4f:53:63: 94:0e:b2:a1:87:8e:41:ec:c1:22:57:50:7d:c3:4c: b7:a5:90:58:46:c7:66:67:24:b8:f2:08:01:d6:20: 9b:08:bc:e8:82:4d:02:c9:88:83:13:8b:46:b2:38: ab:c1:13:88:64:55:5f:83:3f:f7:0a:de:7d:25:90: 9c:6c:36:05:2d:63:d2:6b:23:86:74:fd:a2:5a:da: 4c:b9:ff:06:25:b2:0a:a7:e8:46:c0:1a:e2:bb:52: 61:c0:18:8b:fb:d3:67:ac:ea:59:64:bb:2a:16:10: 17:91:81:34:19:a4:3e:3a:77:68:3e:1b:90:7f:cc: eb:52:5c:df:cc:dd:ba:06:04:f3:07:f7:12:21:ff: 7c:32:e7:6f:ea:48:c6:2b:9b:ce:ac:2c:39:40:54: cb:9a:65:8b:3f:1b:c3:90:61:f9:42:c6:f0:66:01: d3:2a:03:df:8b:34:a5:af:37:f3:ff:61:b8:4e:31: 6f:9e:3d:7d:59:83:cd:f7:3b:1a:ba:ae:e7:a8:12: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:E8:EC:DE:C9:0C:BC:84:2A:EF:55:27:CB:71:59:5C:35:11:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 192.151.136.0/21 198.24.12.0/22 199.47.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ac:7f:3d:55:62:21:66:65:4e:9a:34:cc:c1:30:04:96:03: c2:bf:fb:31:af:20:f8:85:98:9e:4e:0e:7b:4c:17:82:8d:74: 97:a5:72:e3:bc:d1:ff:36:5d:0f:62:92:06:2a:97:54:1a:3e: d4:91:81:34:ba:26:e6:63:0a:0b:f7:c3:b9:ce:54:76:26:47: 74:d4:fd:d0:3f:ce:bb:aa:ca:67:97:16:bd:ba:f8:9b:eb:06: dd:cb:d3:b4:cd:8c:1e:ce:26:45:6a:53:4d:1f:34:9d:21:68: b4:1a:e4:c1:fb:7f:73:fa:47:26:c5:64:26:89:92:44:8e:05: af:97:b9:a0:e5:66:9c:e1:da:52:a3:72:33:52:ef:ef:86:42: 1d:00:2c:04:23:21:21:5e:33:86:8b:c4:e1:98:ae:2b:3a:67: 39:e7:33:e5:60:04:7f:11:fd:12:fa:ae:bb:02:21:f8:ae:93: 7f:a5:24:dd:ab:80:4a:e6:42:40:ed:7f:0f:c2:38:14:07:b5: b4:e3:62:b5:ba:c3:c1:4d:f1:3d:bc:ef:69:8a:4b:ac:7d:26: 30:62:d2:8b:e5:e2:63:6c:8f:dd:51:88:d2:e1:f5:49:84:34: c0:ef:ce:4c:ca:5b:49:dd:f6:4e:4c:c5:4d:e8:58:aa:7a:a3: 38:47:16:72 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnRZQb9qtC5DF3afAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MDNiMTMwYjUtNGY4Yi00Yzc5LTg1MTctNWM3NzQ2M2ZmNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKucZLUfZz93wo70qznfMxONKuM5d9S+D/Eu +227Fhz9eMp/OUbLPaEr1IVr3ugok5orO8TqYIFPU2OUDrKhh45B7MEiV1B9w0y3 pZBYRsdmZyS48ggB1iCbCLzogk0CyYiDE4tGsjirwROIZFVfgz/3Ct59JZCcbDYF LWPSayOGdP2iWtpMuf8GJbIKp+hGwBriu1JhwBiL+9NnrOpZZLsqFhAXkYE0GaQ+ OndoPhuQf8zrUlzfzN26BgTzB/cSIf98Mudv6kjGK5vOrCw5QFTLmmWLPxvDkGH5 QsbwZgHTKgPfizSlrzfz/2G4TjFvnj19WYPN9zsauq7nqBJxUwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCN+6OzeyQy8hCrvVSfLcVlcNRExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvNmEzZGZmOTktMmY2Mi0z MDRlLWFlMWYtYWEwM2VhYmU3ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDwJeIAwQC xhgMAwQDxy/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKKsfz1VYiFmZU6aNMzBMASWA8K/+zGvIPiFmJ5O DntMF4KNdJelcuO80f82XQ9ikgYql1QaPtSRgTS6JuZjCgv3w7nOVHYmR3TU/dA/ zruqymeXFr26+JvrBt3L07TNjB7OJkVqU00fNJ0haLQa5MH7f3P6RybFZCaJkkSO Ba+XuaDlZpzh2lKjcjNS7++GQh0ALAQjISFeM4aLxOGYris6ZznnM+VgBH8R/RL6 rrsCIfiuk3+lJN2rgErmQkDtfw/COBQHtbTjYrW6w8FN8T2872mKS6x9JjBi0ovl 4mNsj91RiNLh9UmENMDvzkzKW0nd9k5MxU3oWKp6ozhHFnI= -----END CERTIFICATE-----Generated at Sat Jun 7 07:38:37 2025 by rpki-client