$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa File: 59a8d12c-2901-3f55-9792-58f7dfe71557.roa (raw, json) Hash identifier: KG1sMeC7is2fp+Rtep8KKF/QlYTO44eWxB6MQ8IVJkQ= Subject key identifier: 21:E6:EC:B3:78:74:0D:22:09:0C:AD:8C:8E:2F:C7:35:C7:7D:5C:A9 Certificate issuer: /CN=6b0ae85a-8757-4947-940f-aa533d9ca479 Certificate serial: 010D0C9F4328584AA85BB3E0CB116F53B3ABF300 Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 155.72.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b3:e0:cb:11:6f:53:b3:ab:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=e61cf89f-7f7d-482c-89b5-a579866951f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:e3:6c:9f:18:59:b6:66:e9:c9:35:ea:ba: 36:d6:7b:e8:59:b0:1c:51:06:c1:26:8e:23:a3:8f: 22:48:63:e5:0a:62:58:06:f5:43:40:2c:08:3c:78: d7:b0:60:e2:9a:3f:02:98:40:7e:8d:5b:04:99:c9: 08:d4:f4:e2:20:28:42:dd:ae:bf:ee:a4:87:69:c3: 49:f2:5f:4d:16:9b:79:8d:bb:8d:48:80:2c:a8:a4: 09:97:c3:85:27:3b:7b:ec:52:96:75:14:29:6c:60: 23:02:73:60:ce:7e:aa:e4:83:6e:c2:99:4e:b3:cb: b1:0b:d3:90:63:39:d3:4e:c2:3c:f1:c4:d9:40:19: e9:2b:82:b4:ad:8d:bb:54:9e:9f:33:eb:56:23:b1: 72:b7:7f:fd:7f:89:8e:b2:12:ba:01:b2:2e:cd:00: bb:89:b2:c0:76:31:e6:dd:4b:73:4d:ca:2b:e6:73: f5:88:4a:c8:85:2b:7f:ce:02:84:e8:fd:f4:88:78: 96:7b:2b:be:4e:b2:a8:46:0b:40:c8:d9:be:4c:76: df:9e:db:7b:43:8a:bf:06:50:42:93:28:7a:39:d9: b3:79:22:79:72:a0:65:4c:51:19:b7:c3:b2:1c:5b: ba:f5:e5:76:21:08:5f:c7:c1:af:8a:80:8b:d5:4c: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:EC:B3:78:74:0D:22:09:0C:AD:8C:8E:2F:C7:35:C7:7D:5C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl X509v3 Authority Key Identifier: keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer sbgp-ipAddrBlock: critical IPv4: 155.72.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:da:9c:fb:87:85:9f:8f:9f:93:7d:ef:c6:f0:df:ae:0c:2d: 7a:e3:7c:e7:09:78:72:1e:29:2b:1d:fc:4d:6d:6b:b5:9a:5b: 22:c4:63:62:da:4c:12:d1:39:24:90:bb:34:d3:a8:64:9c:e9: 0e:93:e5:ae:59:3c:23:d5:03:19:2d:a4:66:58:30:da:4a:44: fe:e8:4b:72:c2:c4:35:c8:95:6f:a3:0f:77:85:a9:84:86:0a: f0:ed:4d:87:4b:81:33:87:97:5f:7a:1e:8c:3a:01:f8:42:3d: 43:d2:a3:98:9c:c6:af:2e:23:9c:a2:ea:b0:cc:52:a6:30:21: 40:1b:ed:54:0f:cd:b0:f6:57:6d:65:09:80:c3:b8:b7:90:7c: 9e:9a:cc:ad:da:59:44:be:9a:30:27:d7:61:c0:25:73:77:23: 67:99:e1:7c:5a:db:13:db:2f:21:46:7d:2a:bf:cc:2f:fc:a9: bb:5c:c8:37:eb:01:7d:86:c1:a1:89:86:af:bd:e4:7a:0f:ec: 55:0d:36:ee:1a:de:66:c5:8f:16:7b:19:c1:9d:67:93:57:2b: 79:14:29:65:1c:2b:40:f7:f3:92:f5:01:77:78:b1:e7:b3:3d: 4c:72:e7:63:11:c6:3e:9d:8e:b9:10:d1:13:23:91:64:06:13: ee:fb:f8:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7PgyxFvU7Or8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIwYWU4NWEtODc1Ny00OTQ3LTk0MGYtYWE1MzNkOWNh NDc5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZTYxY2Y4OWYtN2Y3ZC00ODJjLTg5YjUtYTU3OTg2Njk1MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfXjbJ8YWbZm6ck16ro21nvoWbAcUQbBJo4j o48iSGPlCmJYBvVDQCwIPHjXsGDimj8CmEB+jVsEmckI1PTiIChC3a6/7qSHacNJ 8l9NFpt5jbuNSIAsqKQJl8OFJzt77FKWdRQpbGAjAnNgzn6q5INuwplOs8uxC9OQ YznTTsI88cTZQBnpK4K0rY27VJ6fM+tWI7Fyt3/9f4mOshK6AbIuzQC7ibLAdjHm 3UtzTcor5nP1iErIhSt/zgKE6P30iHiWeyu+TrKoRgtAyNm+THbfntt7Q4q/BlBC kyh6OdmzeSJ5cqBlTFEZt8OyHFu69eV2IQhfx8GvioCL1UwS5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHm7LN4dA0iCQytjI4vxzXHfVypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82YjBh ZTg1YS04NzU3LTQ5NDctOTQwZi1hYTUzM2Q5Y2E0NzkvNTlhOGQxMmMtMjkwMS0z ZjU1LTk3OTItNThmN2RmZTcxNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmIwYWU4NWEtODc1Ny00OTQ3LTk0 MGYtYWE1MzNkOWNhNDc5LzZiMGFlODVhLTg3NTctNDk0Ny05NDBmLWFhNTMzZDlj YTQ3OS5jcmwwHwYDVR0jBBgwFoAUIs2P6IlaPXWVYfjC0NRq8bvYjWgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82YjBhZTg1YS04NzU3LTQ5NDctOTQwZi1hYTUz M2Q5Y2E0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDm0jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjanPuHhZ+Pn5N978bw364MLXrjfOcJeHIeKSsd/E1ta7WaWyLEY2La TBLROSSQuzTTqGSc6Q6T5a5ZPCPVAxktpGZYMNpKRP7oS3LCxDXIlW+jD3eFqYSG CvDtTYdLgTOHl196How6AfhCPUPSo5icxq8uI5yi6rDMUqYwIUAb7VQPzbD2V21l CYDDuLeQfJ6azK3aWUS+mjAn12HAJXN3I2eZ4Xxa2xPbLyFGfSq/zC/8qbtcyDfr AX2GwaGJhq+95HoP7FUNNu4a3mbFjxZ7GcGdZ5NXK3kUKWUcK0D385L1AXd4seez PUxy52MRxj6djrkQ0RMjkWQGE+77+Og= -----END CERTIFICATE-----Generated at Sat Aug 2 05:35:02 2025 by rpki-client