$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa File: 5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa (raw, json) Hash identifier: Dcs7AeOA7InDMO+f5x8DwBzNFmC2LamqT2qwRnUlR9g= Subject key identifier: FF:2A:97:14:A8:F2:1C:EE:84:70:BF:A1:BC:C0:06:BB:55:D6:04:40 Certificate issuer: /CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Certificate serial: 010D0C9F4328584AAB264D031352B4AFAEFF79C0 Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 2552 IP address blocks: 128.252.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4d:03:13:52:b4:af:ae:ff:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=938d170f-d82f-416a-855f-58884ccadbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:ad:f9:12:ca:3b:10:25:5e:f1:b3:ca:ce: b9:0f:4f:ea:6f:b5:96:d5:24:bf:4f:71:f8:8c:81: ef:c4:13:ba:a4:cf:5f:eb:0c:d6:fb:b8:69:38:4f: e7:4c:61:14:8e:87:15:57:0a:54:94:33:8c:5b:97: 90:e3:7a:30:a3:f3:d9:38:89:50:6c:c2:e8:b9:8e: b7:d7:aa:fb:0d:4b:1c:8b:d5:ca:90:17:6e:22:7b: f5:22:35:a5:bb:75:7a:b1:f7:4c:dc:33:85:d3:cf: aa:7a:6a:3e:ba:88:f3:9c:f6:9f:1d:72:46:7b:25: 80:1a:dc:77:2a:7c:b4:e4:a8:76:3e:85:24:a0:2c: f3:06:59:27:7b:b6:48:55:2d:dd:4a:2a:63:be:51: b6:fc:a3:d4:c3:46:5b:0a:52:cb:a2:1e:5a:65:83: 5f:d6:81:60:28:09:00:91:b2:ed:0c:97:d3:5c:aa: ac:b8:de:8a:e2:aa:52:e4:db:0c:b5:63:e0:88:bd: 3e:e4:ba:77:03:ea:0f:fb:78:14:41:3d:15:9f:5f: 34:7c:0a:25:e3:13:08:80:57:88:c4:85:d1:13:80: 14:b9:d8:c3:5e:30:bf:b1:6b:35:03:2a:f2:a9:0b: 94:31:42:b0:11:8d:5e:ab:0b:bd:3e:5a:53:83:26: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:97:14:A8:F2:1C:EE:84:70:BF:A1:BC:C0:06:BB:55:D6:04:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl X509v3 Authority Key Identifier: keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer sbgp-ipAddrBlock: critical IPv4: 128.252.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:08:6b:f1:c3:bd:70:b4:c4:ca:32:a6:c6:38:2c:b1:77:82: df:f0:1a:37:a5:8d:ad:7b:e2:4b:13:7a:f6:a9:51:93:69:01: 62:d3:28:b6:47:b8:89:95:23:8c:24:36:a0:b3:f5:05:ac:a6: 3a:93:30:ea:a3:70:a6:24:c3:6d:cb:32:f8:55:a5:ef:8c:67: 8b:aa:b5:1e:74:96:c5:a8:53:32:af:ed:2c:ec:4f:62:64:67: 8b:0d:aa:52:4a:df:dc:21:f3:80:fd:d9:f1:c3:47:e5:5a:f9: f3:47:6a:94:15:ee:8e:7e:13:bc:6a:21:90:c7:dd:74:5a:f4: 31:66:ac:8f:50:1d:f4:43:a3:73:2a:de:d2:b8:cd:b4:29:48: 72:ad:22:9d:0e:b8:dc:b5:0b:45:95:5e:4c:e2:44:00:25:e5: 13:2a:8d:58:0f:f2:30:5b:b9:ae:b5:b2:c4:bb:c1:b5:0b:0d: 09:ea:41:bc:7d:38:b8:06:95:4e:de:f5:51:eb:87:56:1a:bc: 6b:6d:0f:17:9a:35:f9:6b:4f:c7:50:ac:9d:e4:e9:dc:2a:96: 96:4d:83:cf:f5:6b:17:f5:3c:b5:65:fa:5f:6e:94:22:87:6f: 37:cd:49:77:ed:01:7a:ae:b3:11:a3:71:76:1c:9b:44:cd:1b: ad:53:58:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJk0DE1K0r67/ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2 YTY0MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OTM4ZDE3MGYtZDgyZi00MTZhLTg1NWYtNTg4ODRjY2FkYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H6t+RLKOxAlXvGzys65D0/qb7WW1SS/T3H4 jIHvxBO6pM9f6wzW+7hpOE/nTGEUjocVVwpUlDOMW5eQ43owo/PZOIlQbMLouY63 16r7DUsci9XKkBduInv1IjWlu3V6sfdM3DOF08+qemo+uojznPafHXJGeyWAGtx3 Kny05Kh2PoUkoCzzBlkne7ZIVS3dSipjvlG2/KPUw0ZbClLLoh5aZYNf1oFgKAkA kbLtDJfTXKqsuN6K4qpS5NsMtWPgiL0+5Lp3A+oP+3gUQT0Vn180fAol4xMIgFeI xIXRE4AUudjDXjC/sWs1AyryqQuUMUKwEY1eqwu9PlpTgyb6MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8qlxSo8hzuhHC/obzABrtV1gRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJh MGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvNWExZWM4ZjgtZDUwNy0z NTI1LWFkNjYtOGRhYzJhYzdlYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZiYTBmZDItYjUyNi00OTg1LTkz MTQtYmY2NDg1MDU2YTY0L2E2YmEwZmQyLWI1MjYtNDk4NS05MzE0LWJmNjQ4NTA1 NmE2NC5jcmwwHwYDVR0jBBgwFoAUzCOVeI0Cs7E5PNhJCdAxa08cphIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0 ODUwNTZhNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYIa/HDvXC0xMoypsY4LLF3gt/wGjelja174ksTevapUZNpAWLTKLZH uImVI4wkNqCz9QWspjqTMOqjcKYkw23LMvhVpe+MZ4uqtR50lsWoUzKv7SzsT2Jk Z4sNqlJK39wh84D92fHDR+Va+fNHapQV7o5+E7xqIZDH3XRa9DFmrI9QHfRDo3Mq 3tK4zbQpSHKtIp0OuNy1C0WVXkziRAAl5RMqjVgP8jBbua61ssS7wbULDQnqQbx9 OLgGlU7e9VHrh1YavGttDxeaNflrT8dQrJ3k6dwqlpZNg8/1axf1PLVl+l9ulCKH bzfNSXftAXqusxGjcXYcm0TNG61TWGo= -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:29 2025 by rpki-client