$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa File: 100036a5-3ecc-3953-ad52-6114836271e0.roa (raw, json) Hash identifier: 6iLQ/dARredfVd8d1F0Qe6eSzRJbyy6mQBMhTapghZk= Subject key identifier: B7:E4:5F:A8:3D:EB:3C:4E:4B:BB:88:8C:AF:DF:C4:49:48:91:CD:4F Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F4328584A66C077F60BAEDCD954533C00 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 15046 IP address blocks: 128.230.152.0/24 maxlen: 24 128.230.157.128/25 maxlen: 25 128.230.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:77:f6:0b:ae:dc:d9:54:53:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=1df05c46-268a-4199-8a70-e70070ae9a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:55:3c:2e:c1:e8:3c:25:af:17:4f:8f:83: d6:fd:df:ae:69:3a:a9:85:5f:65:d9:68:81:29:0f: 65:bf:e1:93:93:d3:e7:b7:8c:59:7d:7c:aa:a3:2f: d8:79:13:7b:fa:90:54:79:8c:b5:23:fd:14:e5:ae: 19:1d:44:cf:9d:20:1a:5b:e0:3d:fa:5d:8c:42:61: fb:eb:bf:4e:ea:02:12:95:2b:32:ac:76:a0:ee:db: 5d:6c:46:9a:6b:06:b5:98:0c:cc:87:72:b0:e2:61: 27:cd:c4:d2:28:03:1c:3c:a7:08:cc:0b:73:56:1a: 63:aa:be:74:67:dd:27:5e:f3:bc:a4:1e:1f:21:03: 7b:51:62:8c:63:93:87:e3:dc:bf:8e:43:98:51:95: d6:c6:41:f2:f4:ca:28:f7:87:2e:8c:91:35:03:60: 2d:dd:09:2a:18:c7:cd:11:82:6d:d7:2a:73:3c:d5: 1a:70:c7:4a:b0:a6:1d:3b:ab:39:cc:ca:38:12:c5: 02:62:61:96:21:62:08:e0:65:2e:bf:f5:8d:14:45: 29:ea:14:d7:15:09:59:95:75:03:84:cd:d3:d7:60: c1:c8:af:7b:a4:e3:78:8c:79:a3:15:00:71:e4:f3: 71:1a:7f:f0:78:ef:ab:bb:cf:8d:7d:d0:f5:4b:bc: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E4:5F:A8:3D:EB:3C:4E:4B:BB:88:8C:AF:DF:C4:49:48:91:CD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: 128.230.152.0/24 128.230.157.128/25 128.230.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7f:00:94:ce:13:48:96:50:2f:d2:39:12:5e:25:51:93:dd: fe:06:00:f4:0a:21:b6:a0:19:b5:ca:42:f8:25:f9:8f:04:c9: 66:e2:0e:8c:ca:0c:78:a7:d4:0a:01:7a:58:94:a8:2f:97:d3: 24:e7:fa:54:30:ef:48:85:ef:e9:e6:7f:1d:56:00:1a:30:32: 28:c3:1f:95:41:26:e1:b3:19:8d:b8:18:d8:b0:2d:e2:0e:15: 56:35:59:c9:81:e5:64:fc:6f:0a:39:81:df:96:80:4d:82:9d: d4:be:ca:0f:96:47:c4:55:e2:70:9c:4b:9a:a2:08:c8:30:c2: 61:6d:3a:c3:7a:d1:79:91:ce:65:c0:05:82:a1:39:a0:35:6b: a7:83:6d:e7:38:38:fc:a4:ae:d0:e8:8c:a2:47:20:fc:85:47: 3f:8b:c0:43:d0:c9:84:1e:19:fa:99:42:58:d3:55:3a:c8:76: 12:1a:34:e2:a8:c8:c4:ba:ab:cd:0f:b9:59:39:64:a5:8a:07: af:38:b4:1e:3f:52:79:97:f3:85:90:4b:ba:03:ad:77:26:f7: 5d:e9:0e:d3:e5:0a:f3:66:da:a2:8e:fe:03:d3:cb:7c:64:0c: 07:2c:02:6e:28:e9:f5:be:79:fa:4f:42:24:85:0c:41:3f:d7: b7:9c:53:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpmwHf2C67c2VRTPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MWRmMDVjNDYtMjY4YS00MTk5LThhNzAtZTcwMDcwYWU5YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX1VPC7B6DwlrxdPj4PW/d+uaTqphV9l2WiB KQ9lv+GTk9Pnt4xZfXyqoy/YeRN7+pBUeYy1I/0U5a4ZHUTPnSAaW+A9+l2MQmH7 679O6gISlSsyrHag7ttdbEaaawa1mAzMh3Kw4mEnzcTSKAMcPKcIzAtzVhpjqr50 Z90nXvO8pB4fIQN7UWKMY5OH49y/jkOYUZXWxkHy9Moo94cujJE1A2At3QkqGMfN EYJt1ypzPNUacMdKsKYdO6s5zMo4EsUCYmGWIWII4GUuv/WNFEUp6hTXFQlZlXUD hM3T12DByK97pON4jHmjFQBx5PNxGn/weO+ru8+NfdD1S7xj0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLfkX6g96zxOS7uIjK/fxElIkc1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMTAwMDM2YTUtM2VjYy0z OTUzLWFkNTItNjExNDgzNjI3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQAgOaYAwUH gOadgAMEAIDmvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhfwCUzhNIllAv0jkSXiVRk93+BgD0CiG2oBm1 ykL4JfmPBMlm4g6Mygx4p9QKAXpYlKgvl9Mk5/pUMO9Ihe/p5n8dVgAaMDIowx+V QSbhsxmNuBjYsC3iDhVWNVnJgeVk/G8KOYHfloBNgp3UvsoPlkfEVeJwnEuaogjI MMJhbTrDetF5kc5lwAWCoTmgNWung23nODj8pK7Q6IyiRyD8hUc/i8BD0MmEHhn6 mUJY01U6yHYSGjTiqMjEuqvND7lZOWSligevOLQeP1J5l/OFkEu6A613Jvdd6Q7T 5QrzZtqijv4D08t8ZAwHLAJuKOn1vnn6T0IkhQxBP9e3nFNl -----END CERTIFICATE-----Generated at Sat Jul 12 06:16:44 2025 by rpki-client