$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f7da70d1-1992-3547-a890-9973a230ea48.roa File: f7da70d1-1992-3547-a890-9973a230ea48.roa (raw, json) Hash identifier: iiTl2XgVxxPxIVqi9o7AkVFodj+xYYVp2rfM5AlSD4U= Subject key identifier: C8:51:EC:B1:56:3D:C5:7B:30:F8:77:0C:46:80:3E:96:C5:01:10:52 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849FE0FFE8A42D349328C1FD4E0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f7da70d1-1992-3547-a890-9973a230ea48.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 9009 IP address blocks: 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fe:8a:42:d3:49:32:8c:1f:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=705ea100-99b1-449e-9519-4dfbb8b94a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:1a:87:a8:1d:2c:d0:1d:6e:c4:c2:37:dd: c1:02:f6:55:db:6d:82:17:5a:18:dc:78:7f:b8:12: 36:a6:25:aa:9d:51:f0:50:f4:e3:fd:b1:5d:ff:d8: 5f:b1:cf:99:3f:20:e3:24:1f:bd:c7:b1:84:c1:bd: 3c:ea:5f:3d:3a:d3:b0:ee:14:2d:ed:c4:c4:f5:5b: aa:e8:e5:b8:3b:d8:88:be:24:fc:f5:26:44:ad:23: be:33:a6:e6:dd:aa:1f:ea:5b:4d:68:cd:2e:ba:41: 05:56:52:c2:52:f4:fd:3c:38:f5:28:5a:fe:e6:ae: c0:0e:46:9c:4d:5e:6a:a8:b1:89:38:2d:79:15:d9: a6:6b:a1:9b:ca:b8:01:4c:a9:80:a3:35:f2:cd:f1: 98:3d:c8:15:a7:0f:ce:f6:78:89:f6:a4:e2:72:6b: 23:61:70:7f:5e:35:3e:ad:12:39:cd:39:fd:f5:d4: e8:3a:04:cd:2e:f3:f9:2b:d3:6b:90:e3:a7:f8:ec: 71:75:51:a0:07:26:1f:db:9b:c4:f6:7b:62:8a:f3: 73:80:7f:50:83:4f:dd:e4:85:e5:29:8c:d6:39:b9: a1:7f:dd:6b:1e:d9:12:e4:cc:b1:95:ef:45:e0:be: 69:60:8f:58:fe:6f:bd:2e:25:55:4b:10:9e:95:3c: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:EC:B1:56:3D:C5:7B:30:F8:77:0C:46:80:3E:96:C5:01:10:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f7da70d1-1992-3547-a890-9973a230ea48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:91:fe:b6:43:13:b9:d9:5a:9e:c1:4e:58:84:be:4e:97:1e: 3f:27:a6:67:b4:8a:c0:46:a5:d2:d9:94:94:1e:dd:dc:ae:83: 51:81:81:81:b5:25:76:1e:57:04:4b:3e:0b:ec:c3:d2:67:d6: ea:29:d9:20:8d:34:17:31:21:64:65:ef:3c:c3:ea:a7:1b:4d: fa:c5:fa:ed:b4:b5:b9:35:28:25:31:1d:cc:5b:c1:11:c5:3b: 26:27:5f:ca:f9:5e:2a:89:18:24:ef:90:ed:9c:ba:64:6f:e1: 7b:6d:dd:3e:bf:60:2a:00:4f:c2:03:ec:ca:3d:bb:0b:ef:57: ee:e0:a8:bb:c2:f1:36:64:6f:59:06:ad:a3:4f:7d:93:e4:fd: 62:54:95:0d:eb:37:a2:5e:b9:e4:4f:b8:62:0e:67:e7:97:21: 9c:c7:9d:be:56:29:b8:83:61:4c:14:6d:2d:90:aa:e8:17:f5: 8b:e4:a9:ef:d2:d9:5a:23:45:d5:14:9b:10:39:f6:5c:db:7a: 17:52:b9:32:cb:70:99:60:99:71:40:0f:48:ee:e7:7d:7d:8b: 89:e3:49:e3:c7:bc:90:91:6c:32:f5:59:9d:96:97:f9:2b:30: b5:bc:6f:c3:e6:31:54:80:81:b2:f3:1a:e3:dd:8c:d4:46:d8: d3:2e:24:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/6KQtNJMowf1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NzA1ZWExMDAtOTliMS00NDllLTk1MTktNGRmYmI4Yjk0YTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Mah6gdLNAdbsTCN93BAvZV222CF1oY3Hh/ uBI2piWqnVHwUPTj/bFd/9hfsc+ZPyDjJB+9x7GEwb086l89OtOw7hQt7cTE9Vuq 6OW4O9iIviT89SZErSO+M6bm3aof6ltNaM0uukEFVlLCUvT9PDj1KFr+5q7ADkac TV5qqLGJOC15Fdmma6GbyrgBTKmAozXyzfGYPcgVpw/O9niJ9qTicmsjYXB/XjU+ rRI5zTn99dToOgTNLvP5K9NrkOOn+OxxdVGgByYf25vE9ntiivNzgH9Qg0/d5IXl KYzWObmhf91rHtkS5Myxle9F4L5pYI9Y/m+9LiVVSxCelTyOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhR7LFWPcV7MPh3DEaAPpbFARBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjdkYTcwZDEtMTk5Mi0z NTQ3LWE4OTAtOTk3M2EyMzBlYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKR/rZDE7nZWp7BTliEvk6XHj8npme0isBGpdLZlJQe3dyug1GBgYG1 JXYeVwRLPgvsw9Jn1uop2SCNNBcxIWRl7zzD6qcbTfrF+u20tbk1KCUxHcxbwRHF OyYnX8r5XiqJGCTvkO2cumRv4Xtt3T6/YCoAT8ID7Mo9uwvvV+7gqLvC8TZkb1kG raNPfZPk/WJUlQ3rN6JeueRPuGIOZ+eXIZzHnb5WKbiDYUwUbS2QqugX9Yvkqe/S 2VojRdUUmxA59lzbehdSuTLLcJlgmXFAD0ju5319i4njSePHvJCRbDL1WZ2Wl/kr MLW8b8PmMVSAgbLzGuPdjNRG2NMuJNA= -----END CERTIFICATE-----Generated at Tue Jun 3 10:11:42 2025 by rpki-client