$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa File: a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa (raw, json) Hash identifier: li+avJ3Gdig+tdfDO6D+T6ePrwVrqLtXFceZ1aH2LCM= Subject key identifier: D9:59:5F:6E:9E:28:A7:81:50:1A:74:7B:E4:AD:9C:8F:01:E6:72:CD Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584A3050322DC744C6083D111D80 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 1448 IP address blocks: 156.146.128.0/17 maxlen: 17 158.41.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:32:2d:c7:44:c6:08:3d:11:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=6d31d151-a302-40a2-9ad0-e6c0667d281a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:9b:bf:41:a0:ec:f2:a7:16:79:9c:f6:68: bd:26:65:8a:66:14:f0:8a:e1:9b:24:60:cf:b4:0b: b2:85:43:fb:e7:1b:93:2c:3d:e6:0d:1e:6e:21:23: 59:a5:f5:98:b2:72:71:61:8d:7a:c3:20:98:85:58: 33:af:19:30:cc:ab:1d:c5:96:3c:d1:b9:e2:74:0c: 8a:7b:d9:0d:ed:50:0d:eb:5b:87:58:06:17:e6:92: 1a:37:14:e6:ed:f8:17:cf:df:a4:78:31:31:43:c2: 6f:b6:cc:f0:d6:42:f8:30:be:70:e2:1a:3f:b4:12: 27:cb:22:f6:f9:38:5e:3b:21:89:5e:31:5e:94:9a: 66:e2:1c:bd:1a:25:8a:7b:b7:d8:29:75:9e:42:6c: b1:02:77:77:72:4e:17:29:08:31:10:d6:c1:47:6d: 52:46:6a:76:16:20:cb:d6:d5:93:99:ee:8d:12:1a: 1e:91:59:d7:a6:c5:09:72:06:ed:bb:50:8e:cb:95: cc:99:94:da:85:0a:e7:53:14:30:1e:f5:a5:7e:72: dd:e1:cd:8f:cc:26:69:c5:c9:2c:d2:e3:69:bb:76: 5f:c8:d0:f3:ac:ce:6e:6a:d6:3e:46:af:3f:82:cc: 1b:e1:0c:13:9b:45:26:30:4a:c3:d5:91:58:b3:35: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:5F:6E:9E:28:A7:81:50:1A:74:7B:E4:AD:9C:8F:01:E6:72:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:88:43:23:f4:7e:6f:00:68:92:41:3a:40:1a:63:a2:8c:35: 10:aa:91:5a:2e:e2:2f:18:56:0a:72:63:93:73:46:de:39:a4: ec:c4:65:a5:35:7b:dd:a2:88:64:32:7d:ca:8b:d3:a6:82:cf: cd:8d:81:00:66:35:36:90:83:8d:f8:a9:76:d7:a9:13:0c:63: 5d:4c:ba:0b:44:8f:ba:d7:23:ca:ae:ba:96:57:ed:69:2e:32: 7f:76:2f:8b:c9:e9:09:53:9c:8a:e2:73:fa:7a:62:7c:b1:28: 55:f6:17:bb:52:c2:eb:37:5f:90:fb:a6:fa:97:d6:90:61:67: ee:ab:82:93:33:01:1e:03:e3:2f:4a:d3:f6:50:44:bd:4b:3e: a8:f2:e3:6e:8a:c7:47:20:43:d7:5a:08:f5:50:bb:56:f2:cb: fd:26:e8:53:90:4d:6f:47:bb:ec:79:35:12:2f:04:28:49:34: de:64:ea:50:8f:4e:82:b8:15:8d:da:21:1a:28:b1:ab:21:46: 90:10:1e:d6:f5:c8:e5:f6:27:2c:63:b2:72:26:d9:f8:16:6b: e2:ad:3a:df:4d:17:d6:07:98:da:91:16:81:50:5c:68:3e:3d: 9f:51:23:ed:ca:d8:e4:c2:6f:70:a0:aa:8f:a7:e4:62:77:36: d1:35:13:50 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEowUDItx0TGCD0RHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmQzMWQxNTEtYTMwMi00MGEyLTlhZDAtZTZjMDY2N2QyODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzebv0Gg7PKnFnmc9mi9JmWKZhTwiuGbJGDP tAuyhUP75xuTLD3mDR5uISNZpfWYsnJxYY16wyCYhVgzrxkwzKsdxZY80bnidAyK e9kN7VAN61uHWAYX5pIaNxTm7fgXz9+keDExQ8Jvtszw1kL4ML5w4ho/tBInyyL2 +TheOyGJXjFelJpm4hy9GiWKe7fYKXWeQmyxAnd3ck4XKQgxENbBR21SRmp2FiDL 1tWTme6NEhoekVnXpsUJcgbtu1COy5XMmZTahQrnUxQwHvWlfnLd4c2PzCZpxcks 0uNpu3ZfyNDzrM5uatY+Rq8/gswb4QwTm0UmMErD1ZFYszWNyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNlZX26eKKeBUBp0e+StnI8B5nLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTFlMjE5ZjEtNGU2Zi0z YjI1LThlNzAtMDBkOTQ5ZmEzOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG6IQyP0fm8AaJJBOkAaY6KMNRCqkVou4i8YVgpyY5NzRt45 pOzEZaU1e92iiGQyfcqL06aCz82NgQBmNTaQg434qXbXqRMMY11MugtEj7rXI8qu upZX7WkuMn92L4vJ6QlTnIric/p6YnyxKFX2F7tSwus3X5D7pvqX1pBhZ+6rgpMz AR4D4y9K0/ZQRL1LPqjy426Kx0cgQ9daCPVQu1byy/0m6FOQTW9Hu+x5NRIvBChJ NN5k6lCPToK4FY3aIRoosashRpAQHtb1yOX2JyxjsnIm2fgWa+KtOt9NF9YHmNqR FoFQXGg+PZ9RI+3K2OTCb3Cgqo+n5GJ3NtE1E1A= -----END CERTIFICATE-----Generated at Sun Jun 15 17:40:25 2025 by rpki-client