$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: 7J+NG1+DXIGNte1Y8lM/8T0t6ZaI7WiAQnsG/htIDS0= Subject key identifier: 74:5B:5E:5A:6A:0F:12:08:5C:C5:F4:6C:5D:A3:64:FF:C6:48:3C:B4 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584A6F207C6BD8FBB520AA4FD780 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7c:6b:d8:fb:b5:20:aa:4f:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=31b49c96-71c1-4e82-a6f2-befc7110a3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:21:f1:7c:aa:a9:bb:54:95:ce:ae:10:da:39: c7:9b:71:5b:54:64:bf:66:8b:a1:d3:4d:2c:e0:61: 3a:56:00:e6:bf:04:3b:61:2a:44:ba:7a:68:ac:e7: 75:f2:c1:d2:5e:45:16:61:a6:54:24:ef:44:86:c0: fa:e9:a6:b6:ae:85:b4:f5:50:33:56:0c:ed:3d:35: b3:5c:f3:51:ac:62:db:9c:d5:55:4b:15:6b:7a:6b: 7a:29:05:1f:1b:05:d6:24:10:2f:b6:a0:7a:64:a1: 1d:58:02:fd:e3:07:42:a2:b5:5b:a1:3a:60:dd:9c: 1e:5a:d9:bb:27:de:e7:5e:49:9e:72:a2:70:c5:54: 41:79:97:c0:03:cc:e8:03:fa:04:8f:d8:9e:f2:6c: bd:3a:b2:7e:c8:12:d1:8e:63:7a:55:01:a1:53:3b: 4e:91:07:33:2d:ce:d1:e0:c2:22:3d:cb:8f:bb:60: 57:77:75:6e:69:6f:77:6e:d2:e8:31:7b:19:36:55: 21:b0:c4:7c:75:50:4e:3a:84:c8:11:83:ef:35:0f: 4b:cd:d3:d0:c7:df:ab:95:4e:36:42:71:07:5b:3b: d7:3d:b4:b2:6d:41:b6:ba:46:0c:71:8d:20:28:43: 32:f1:e0:5f:02:6d:92:2a:ab:76:59:1e:55:53:7c: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5B:5E:5A:6A:0F:12:08:5C:C5:F4:6C:5D:A3:64:FF:C6:48:3C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:39:80:b6:94:42:5f:f9:56:2a:aa:c1:09:d9:8c:e7:35:83: 3f:e9:2d:ac:ee:76:88:f2:85:7c:50:d2:c9:af:7b:01:29:1f: e3:5c:dc:70:4c:59:a5:fc:18:c4:d8:e5:97:1d:4f:58:7c:ee: f0:41:89:a6:00:e9:c2:21:2e:64:7f:a9:2b:0c:12:76:22:49: e5:87:55:b4:95:f5:2f:6f:e9:c5:68:1b:3c:91:1e:56:e3:7c: 55:3b:3c:06:c2:81:71:e7:e0:0e:e1:93:c0:49:87:1f:d2:78: d3:2d:f6:b6:32:27:1f:6c:26:cb:b0:3f:51:7f:36:da:ab:4c: 23:df:16:ec:2b:c7:6d:fd:73:23:15:96:cf:ba:73:48:2c:fd: 12:50:e3:e1:7a:f6:9f:ba:23:38:1b:ad:ac:f2:bb:4e:fe:28: 7e:7d:9f:ca:4c:74:55:a6:93:ad:c0:4f:de:74:e6:62:2d:1e: 3f:20:2c:7e:fb:0a:82:ed:37:2b:b9:84:1d:af:32:69:3d:53: d8:f8:71:57:9b:c4:e0:08:41:6f:17:dd:8d:bc:9e:cd:2a:be: b8:4c:bc:bd:c7:37:a9:42:1e:07:81:9a:97:57:b8:0e:3f:45: c9:f1:ec:20:6b:49:8b:15:d1:08:60:b9:28:15:95:4f:85:e4: ee:d7:cb:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHxr2Pu1IKpP14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk MzFiNDljOTYtNzFjMS00ZTgyLWE2ZjItYmVmYzcxMTBhM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CHxfKqpu1SVzq4Q2jnHm3FbVGS/Zouh000s 4GE6VgDmvwQ7YSpEunporOd18sHSXkUWYaZUJO9EhsD66aa2roW09VAzVgztPTWz XPNRrGLbnNVVSxVremt6KQUfGwXWJBAvtqB6ZKEdWAL94wdCorVboTpg3ZweWtm7 J97nXkmecqJwxVRBeZfAA8zoA/oEj9ie8my9OrJ+yBLRjmN6VQGhUztOkQczLc7R 4MIiPcuPu2BXd3VuaW93btLoMXsZNlUhsMR8dVBOOoTIEYPvNQ9LzdPQx9+rlU42 QnEHWzvXPbSybUG2ukYMcY0gKEMy8eBfAm2SKqt2WR5VU3wWXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRbXlpqDxIIXMX0bF2jZP/GSDy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE5gLaUQl/5ViqqwQnZjOc1gz/pLazudojyhXxQ0smvewEpH+Nc3HBM WaX8GMTY5ZcdT1h87vBBiaYA6cIhLmR/qSsMEnYiSeWHVbSV9S9v6cVoGzyRHlbj fFU7PAbCgXHn4A7hk8BJhx/SeNMt9rYyJx9sJsuwP1F/NtqrTCPfFuwrx239cyMV ls+6c0gs/RJQ4+F69p+6Izgbrazyu07+KH59n8pMdFWmk63AT9505mItHj8gLH77 CoLtNyu5hB2vMmk9U9j4cVebxOAIQW8X3Y28ns0qvrhMvL3HN6lCHgeBmpdXuA4/ Rcnx7CBrSYsV0QhguSgVlU+F5O7Xy80= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:53 2025 by rpki-client