$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c0bc5cda-07ef-3599-9395-650cc03eefb1.roa File: c0bc5cda-07ef-3599-9395-650cc03eefb1.roa (raw, json) Hash identifier: vW8pBoqSqFu0MDQnpJ220nuD0esYdBycUdty8UoAaE8= Subject key identifier: 8C:CA:B9:D1:6B:18:5C:84:4B:99:B8:8B:66:CC:A4:AA:C9:88:01:6C Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F4328584AA85BB17C33097A5598A4C4C0 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c0bc5cda-07ef-3599-9395-650cc03eefb1.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 26498 IP address blocks: 151.159.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b1:7c:33:09:7a:55:98:a4:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=55db8fe7-ff08-4b00-9b22-d458e049b474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:92:54:e7:54:23:80:f4:1e:c4:b3:3f:c4: da:85:a7:30:5c:57:8a:53:b5:78:38:33:7d:1a:42: 5d:ff:0d:e4:70:6a:a1:22:b6:56:2a:f1:15:b9:3c: fc:6c:29:a3:58:2f:01:d4:b0:f2:8b:e0:22:76:2d: 79:af:fc:34:bf:c3:ba:df:38:4b:df:65:a5:9a:b8: 6d:31:4b:17:ac:0a:78:0c:e9:fa:23:90:2d:2c:72: 1d:47:ce:d6:4f:f3:44:69:8f:a5:0a:07:a7:c2:c3: b1:fa:bb:b7:a1:ba:a5:6e:88:71:8e:af:bd:99:ed: 83:67:a0:2d:3c:51:6f:20:cc:44:1b:f5:8e:7b:ed: c9:a9:a8:69:a7:da:51:47:b3:18:ac:62:41:24:4d: d1:1f:bf:47:80:7f:b7:10:be:b5:35:f5:29:a4:9f: 27:c6:02:c8:dd:86:2f:eb:57:fb:48:87:b4:d4:75: f2:f4:8f:ef:7c:fc:e9:b4:f7:4d:cd:83:d3:57:6d: d9:5c:8d:df:04:e2:e1:4a:5b:d4:2c:5c:67:5e:e1: 1c:aa:02:9f:62:b0:c7:f6:cf:e0:e7:18:4c:0a:c7: f4:85:76:7c:07:04:44:52:58:35:b8:9d:f4:66:34: d9:ec:21:de:a7:e6:2a:7c:47:75:8a:1e:d3:8a:5a: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:B9:D1:6B:18:5C:84:4B:99:B8:8B:66:CC:A4:AA:C9:88:01:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c0bc5cda-07ef-3599-9395-650cc03eefb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:73:75:b8:ee:34:f1:96:28:8a:26:23:91:00:50:4c:42:17: 65:72:3c:34:fe:84:9f:3f:87:4b:46:0f:cf:75:bc:4b:d3:de: b9:5e:5f:05:4e:a8:cb:c6:66:f1:94:cf:a9:f6:1f:5a:14:cd: 42:c4:cc:3c:55:65:b0:a1:5d:c7:a4:ec:4b:2c:df:34:c6:0c: 74:e9:48:df:44:28:b7:a8:29:42:f4:fd:86:97:86:a6:10:40: 71:47:ed:84:07:f3:76:c3:df:5c:e4:f6:77:bf:5c:2d:cb:06: 5b:c7:07:79:59:90:b9:ff:45:3c:8b:72:c2:e7:99:64:6a:ae: f6:4c:9d:f7:b6:e8:82:0c:f4:74:3b:79:e3:b0:39:4e:09:75: 90:a1:44:52:e3:44:53:58:29:bb:e1:76:ea:4f:05:c0:44:93: 60:dd:72:77:5e:1b:ee:29:a0:db:c7:7c:27:82:1b:99:e8:55: 8a:c4:f9:4b:80:63:7e:bd:e2:27:c7:60:99:af:e7:a0:a5:3a: 56:a8:78:31:b9:23:59:a6:40:e4:81:10:9a:a8:d6:f3:a7:b8: 3f:c1:c5:ad:d9:08:e3:94:0b:08:4c:c5:a2:06:15:99:1a:1d: 15:c6:db:fc:bb:f8:e5:4f:af:e5:09:48:ba:f3:23:fb:16:9c: 96:a5:28:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7F8Mwl6VZikxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NTVkYjhmZTctZmYwOC00YjAwLTliMjItZDQ1OGUwNDliNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YGSVOdUI4D0HsSzP8TahacwXFeKU7V4ODN9 GkJd/w3kcGqhIrZWKvEVuTz8bCmjWC8B1LDyi+Aidi15r/w0v8O63zhL32Wlmrht MUsXrAp4DOn6I5AtLHIdR87WT/NEaY+lCgenwsOx+ru3obqlbohxjq+9me2DZ6At PFFvIMxEG/WOe+3Jqahpp9pRR7MYrGJBJE3RH79HgH+3EL61NfUppJ8nxgLI3YYv 61f7SIe01HXy9I/vfPzptPdNzYPTV23ZXI3fBOLhSlvULFxnXuEcqgKfYrDH9s/g 5xhMCsf0hXZ8BwREUlg1uJ30ZjTZ7CHep+YqfEd1ih7TilrTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzKudFrGFyES5m4i2bMpKrJiAFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvYzBiYzVjZGEtMDdlZi0z NTk5LTkzOTUtNjUwY2MwM2VlZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl5/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1zdbjuNPGWKIomI5EAUExCF2VyPDT+hJ8/h0tGD891vEvT3rleXwVO qMvGZvGUz6n2H1oUzULEzDxVZbChXcek7Ess3zTGDHTpSN9EKLeoKUL0/YaXhqYQ QHFH7YQH83bD31zk9ne/XC3LBlvHB3lZkLn/RTyLcsLnmWRqrvZMnfe26IIM9HQ7 eeOwOU4JdZChRFLjRFNYKbvhdupPBcBEk2DdcndeG+4poNvHfCeCG5noVYrE+UuA Y3694ifHYJmv56ClOlaoeDG5I1mmQOSBEJqo1vOnuD/Bxa3ZCOOUCwhMxaIGFZka HRXG2/y7+OVPr+UJSLrzI/sWnJalKAQ= -----END CERTIFICATE-----Generated at Fri Aug 1 18:15:47 2025 by rpki-client