$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa File: 36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa (raw, json) Hash identifier: hjUcQGEh3RxMSSC3oNnVUG9bUfCb/4Yi8QcRO9jQNao= Subject key identifier: B2:00:D0:EA:BE:E2:38:40:8B:0E:86:76:E6:C1:CF:C1:3D:7D:7E:7A Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584A023FC6110B6B7CCE02691AE0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa Signing time: Thu 29 May 2025 01:00:50 +0000 ROA not before: Thu 29 May 2025 01:00:50 +0000 ROA not after: Wed 27 Aug 2025 01:00:50 +0000 asID: 812 IP address blocks: 164.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:3f:c6:11:0b:6b:7c:ce:02:69:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: May 29 01:00:50 2025 GMT Not After : Aug 27 01:00:50 2025 GMT Subject: CN=730a2a72-622c-43c1-b0a4-4c7d6287f246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:3d:bc:41:97:74:9f:43:d6:9e:f1:ce:de: db:c8:05:3c:73:b7:1f:c8:a8:95:9b:e2:01:94:32: 3b:75:62:27:76:01:b8:63:27:27:b4:14:18:bd:57: c4:5a:31:75:02:74:0d:86:09:29:84:58:f1:72:b9: a5:db:43:bd:8f:22:f3:7e:f2:c8:05:68:dd:0b:9f: 72:84:fb:6b:c7:2c:26:85:b7:1e:ca:4b:5d:b3:11: a0:a4:f3:92:fa:da:c9:fc:fe:f3:2a:33:92:be:d3: b1:3b:42:bf:df:01:73:53:b0:8b:f2:1d:47:4b:dc: 40:fe:37:73:6d:40:8b:f8:09:61:ce:f3:d6:9a:7a: 15:44:bb:b8:f7:e1:1f:fb:5d:d0:0a:19:9b:90:33: 4f:eb:66:7f:0d:bc:61:65:96:7a:43:71:91:4c:40: 63:6b:08:87:5d:de:34:cc:42:ee:69:29:0e:2d:57: 47:60:65:eb:26:23:45:41:bd:33:8d:7d:cf:56:a8: 7d:e8:dc:f4:be:97:f4:61:54:6f:10:ea:6d:bb:3f: ee:3e:f4:bc:96:73:43:87:87:97:b7:ac:58:53:ec: ff:c1:5b:9d:76:5e:95:d7:e8:a6:4d:38:bb:8a:e9: d7:c6:b8:b9:a0:59:0a:c7:fe:d5:b1:1b:68:61:d2: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:00:D0:EA:BE:E2:38:40:8B:0E:86:76:E6:C1:CF:C1:3D:7D:7E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/36468e28-ca42-3916-8890-d2fa3ac2e6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:21:40:1f:21:53:e9:4b:6c:f7:fa:77:9f:1b:4e:51:50:7e: 78:8f:82:6c:b0:76:37:2e:84:0a:cd:d3:92:21:b9:1c:d0:2a: 7e:32:77:bd:8e:d1:e2:0e:03:ce:b6:ab:a1:5d:f9:96:e8:9e: f7:e5:b8:63:bc:99:21:19:ea:5f:e4:ac:62:7d:c4:f1:dd:01: b6:c4:f9:00:89:fe:26:6f:8e:92:8c:d3:c0:5c:a5:b4:72:8f: a0:4f:d1:17:4d:30:3f:69:b9:c7:e9:d8:6e:4a:63:c4:39:88: 12:e1:22:ee:95:59:98:31:0b:f0:18:a5:e6:1d:44:81:77:92: 10:9c:a7:bd:88:c3:b7:95:c1:c1:d9:35:78:6a:be:55:3f:89: 0c:cf:6a:f6:83:1a:7c:25:74:2a:31:f7:65:d8:32:0c:45:ca: 3d:c2:30:b2:99:af:d2:4f:89:74:76:14:41:93:0b:46:0e:66: ff:db:de:81:18:75:2b:fa:6a:59:76:03:33:d1:66:ed:f6:d7: 1c:ef:16:75:82:af:f4:fa:1d:06:b3:d2:47:32:1d:6b:48:54: 6c:35:d7:89:58:c5:a5:db:d6:0d:22:bf:2a:74:f3:c4:85:f5: 9f:53:02:01:41:57:02:22:d0:af:c6:34:3d:ad:3d:44:b2:0a: 00:92:17:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCP8YRC2t8zgJpGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk NzMwYTJhNzItNjIyYy00M2MxLWIwYTQtNGM3ZDYyODdmMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7c9vEGXdJ9D1p7xzt7byAU8c7cfyKiVm+IB lDI7dWIndgG4YycntBQYvVfEWjF1AnQNhgkphFjxcrml20O9jyLzfvLIBWjdC59y hPtrxywmhbceyktdsxGgpPOS+trJ/P7zKjOSvtOxO0K/3wFzU7CL8h1HS9xA/jdz bUCL+AlhzvPWmnoVRLu49+Ef+13QChmbkDNP62Z/DbxhZZZ6Q3GRTEBjawiHXd40 zELuaSkOLVdHYGXrJiNFQb0zjX3PVqh96Nz0vpf0YVRvEOptuz/uPvS8lnNDh4eX t6xYU+z/wVuddl6V1+imTTi7iunXxri5oFkKx/7VsRtoYdL+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIA0Oq+4jhAiw6GdubBz8E9fX56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvMzY0NjhlMjgtY2E0Mi0z OTE2LTg4OTAtZDJmYTNhYzJlNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQhQB8hU+lLbPf6d58bTlFQfniPgmywdjcuhArN05IhuRzQKn4yd72O 0eIOA862q6Fd+ZbonvfluGO8mSEZ6l/krGJ9xPHdAbbE+QCJ/iZvjpKM08BcpbRy j6BP0RdNMD9pucfp2G5KY8Q5iBLhIu6VWZgxC/AYpeYdRIF3khCcp72Iw7eVwcHZ NXhqvlU/iQzPavaDGnwldCox92XYMgxFyj3CMLKZr9JPiXR2FEGTC0YOZv/b3oEY dSv6all2AzPRZu321xzvFnWCr/T6HQaz0kcyHWtIVGw114lYxaXb1g0ivyp088SF 9Z9TAgFBVwIi0K/GND2tPUSyCgCSF/4= -----END CERTIFICATE-----Generated at Fri Jun 6 13:42:28 2025 by rpki-client