$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa File: 18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa (raw, json) Hash identifier: TSsKQ0+OqG25/U+7crhPlRstL9qpSvKqQsyVX131Y/s= Subject key identifier: BA:35:3D:96:B9:98:A3:FC:EB:9C:BA:E6:42:29:D2:16:54:19:6A:6D Certificate issuer: /CN=03a7a8d3-26fa-4915-bacf-2848f9754758 Certificate serial: 010D0C9F4328584A6290940B4B540D6212C62C28 Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 400326 IP address blocks: 158.51.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:94:0b:4b:54:0d:62:12:c6:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=3215d945-08bb-48d3-b28a-366263dbd267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:8b:08:5c:85:2a:bc:c6:45:6c:bc:71:15: 3c:62:38:df:f4:fb:f8:42:75:95:f1:5b:c5:ae:42: 94:90:eb:48:fd:61:aa:a3:25:37:22:93:f4:fa:f7: 0b:2d:20:7d:85:c0:02:d8:c6:52:c7:8b:27:f8:1f: 51:b7:02:74:98:2f:a4:70:71:f7:4c:95:93:5f:33: ab:73:03:7a:23:a4:52:26:f0:5d:a7:fb:a2:92:43: c8:dd:b5:c7:fa:27:86:8c:9f:96:04:a0:6b:6a:b9: 00:82:6c:9f:b5:4a:1f:b7:8a:a9:16:47:2f:20:fc: 5b:55:6d:60:ae:74:49:ab:2d:a7:00:9c:e7:75:cf: b3:ac:48:a2:07:36:c7:e2:1c:1d:b7:0a:a2:bf:9d: ad:a7:4b:8b:67:42:2e:71:38:1c:ad:bc:14:ea:53: 15:06:76:fb:73:8d:9c:55:3c:c2:5b:b6:d7:f1:83: e8:fb:7e:87:c4:9c:49:d7:2f:08:6e:09:f2:47:2f: ee:a1:86:ba:5c:00:05:e3:a4:17:0e:9b:c2:1a:4f: c9:77:11:cf:6f:54:4a:c9:47:9b:35:d0:e0:2a:6b: 55:e6:d9:00:e2:0c:18:1a:5f:af:5b:5b:25:a2:f2: 62:1a:63:fb:e6:92:e6:7b:09:7b:28:00:08:8c:9d: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:35:3D:96:B9:98:A3:FC:EB:9C:BA:E6:42:29:D2:16:54:19:6A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/18bc0264-3a9e-3df0-acdc-617dd3a1444b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl X509v3 Authority Key Identifier: keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer sbgp-ipAddrBlock: critical IPv4: 158.51.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:53:e4:bc:f3:25:e5:c5:41:9e:3e:b9:d8:63:58:2f:c8:97: 3c:73:e8:53:d1:ae:e8:47:50:ad:ef:1e:80:5b:57:31:6b:7c: 98:f9:16:b0:2f:a6:6c:e5:59:2b:5c:8c:0c:ca:ee:ad:3b:00: 88:71:3b:7d:d0:59:bc:07:ca:55:26:70:19:1b:50:e5:66:ef: 5e:d8:0b:73:9f:b4:c5:bf:cc:45:37:71:a9:ef:ae:46:3c:0b: 2a:f6:1f:a6:c6:8b:95:df:c4:03:39:83:48:dd:5f:12:ca:ed: b1:77:d3:a3:ac:a8:b0:7b:4c:98:52:c5:52:a2:eb:0f:31:58: 56:65:78:7f:d2:62:34:73:42:bb:64:12:d9:85:e3:47:3c:c3: 9a:66:a1:fc:d2:63:96:4d:97:bc:31:77:50:69:12:c4:ab:a1: 03:14:82:26:1b:d5:cf:fa:9d:3a:2d:d0:b5:fd:b8:53:21:ec: 81:a9:0f:58:00:90:24:ad:99:1e:83:2c:9b:24:47:30:37:dd: 90:6d:d5:2c:44:b0:94:b7:09:e1:a0:0c:25:4a:c3:e1:e7:05: 5b:6b:f0:79:6f:a6:ae:25:c0:c5:5d:68:e7:99:73:30:c0:5d: 7e:91:b6:30:48:13:6f:c0:fd:18:32:58:3b:24:81:6d:0a:eb: 88:ca:50:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJQLS1QNYhLGLCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNhN2E4ZDMtMjZmYS00OTE1LWJhY2YtMjg0OGY5NzU0 NzU4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MzIxNWQ5NDUtMDhiYi00OGQzLWIyOGEtMzY2MjYzZGJkMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSqLCFyFKrzGRWy8cRU8Yjjf9Pv4QnWV8VvF rkKUkOtI/WGqoyU3IpP0+vcLLSB9hcAC2MZSx4sn+B9RtwJ0mC+kcHH3TJWTXzOr cwN6I6RSJvBdp/uikkPI3bXH+ieGjJ+WBKBrarkAgmyftUoft4qpFkcvIPxbVW1g rnRJqy2nAJzndc+zrEiiBzbH4hwdtwqiv52tp0uLZ0IucTgcrbwU6lMVBnb7c42c VTzCW7bX8YPo+36HxJxJ1y8IbgnyRy/uoYa6XAAF46QXDpvCGk/JdxHPb1RKyUeb NdDgKmtV5tkA4gwYGl+vW1slovJiGmP75pLmewl7KAAIjJ36DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo1PZa5mKP865y65kIp0hZUGWptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wM2E3 YThkMy0yNmZhLTQ5MTUtYmFjZi0yODQ4Zjk3NTQ3NTgvMThiYzAyNjQtM2E5ZS0z ZGYwLWFjZGMtNjE3ZGQzYTE0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDNhN2E4ZDMtMjZmYS00OTE1LWJh Y2YtMjg0OGY5NzU0NzU4LzAzYTdhOGQzLTI2ZmEtNDkxNS1iYWNmLTI4NDhmOTc1 NDc1OC5jcmwwHwYDVR0jBBgwFoAUU5mKEgEyZU39tSYr1fgovObve08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wM2E3YThkMy0yNmZhLTQ5MTUtYmFjZi0yODQ4 Zjk3NTQ3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNT5LzzJeXFQZ4+udhjWC/Ilzxz6FPRruhHUK3vHoBbVzFrfJj5FrAv pmzlWStcjAzK7q07AIhxO33QWbwHylUmcBkbUOVm717YC3OftMW/zEU3canvrkY8 Cyr2H6bGi5XfxAM5g0jdXxLK7bF306OsqLB7TJhSxVKi6w8xWFZleH/SYjRzQrtk EtmF40c8w5pmofzSY5ZNl7wxd1BpEsSroQMUgiYb1c/6nTot0LX9uFMh7IGpD1gA kCStmR6DLJskRzA33ZBt1SxEsJS3CeGgDCVKw+HnBVtr8Hlvpq4lwMVdaOeZczDA XX6RtjBIE2/A/RgyWDskgW0K64jKUKM= -----END CERTIFICATE-----Generated at Wed Jul 9 16:14:07 2025 by rpki-client