$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa File: 867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa (raw, json) Hash identifier: CouIlBQQGgyrLZR6Bjl7hdFLQlY8o2E5hSCFKE6FiQM= Subject key identifier: C6:25:29:C6:D3:24:30:30:4C:F7:01:E1:F9:FF:B4:98:A8:92:EF:6C Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584A07D52BC296889EF0768034C0 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2b:c2:96:88:9e:f0:76:80:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=91bcfe1c-ddf6-432a-a877-f01056171d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:0e:b6:49:23:98:51:00:7d:12:25:fe:c0: ec:09:d4:99:f9:d2:f2:8a:e8:d7:79:48:da:21:fd: 2b:01:25:ca:1a:8f:f6:21:1a:16:65:e0:9d:68:e6: ac:1c:fc:ee:ac:6a:ec:7b:0c:07:ba:80:38:ec:ca: 7d:ec:c4:bc:03:c4:55:63:50:ab:7d:f9:e5:56:df: 6f:d1:11:ea:9c:21:d3:1b:ab:28:d2:de:41:2e:b7: cb:d1:b4:47:0c:88:dc:5e:be:27:64:7f:2b:61:14: ea:0a:02:35:f4:cb:df:28:69:a1:c8:10:c4:56:7d: df:d5:d4:d4:2e:a5:57:99:8e:e8:bd:07:51:6b:e9: 87:5f:6a:02:9d:69:ca:1b:bf:86:bb:84:89:cc:2a: 52:59:1e:e1:17:ff:5c:d7:27:37:14:2f:f9:f6:ec: 08:8a:a3:b2:04:6d:2f:8c:72:e9:da:70:53:92:e6: 5f:62:cd:af:2e:2f:59:af:5a:d9:09:e0:1f:12:46: c5:43:79:86:c5:4b:df:22:1a:9d:90:61:b4:f8:8e: 13:a1:15:c1:4c:37:ab:a9:16:b6:99:70:27:cf:0b: be:56:6d:54:96:73:99:e0:36:1e:5d:e7:97:1d:1d: 2a:5b:5b:cf:eb:db:ad:c7:66:13:f6:ab:f8:34:9d: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:29:C6:D3:24:30:30:4C:F7:01:E1:F9:FF:B4:98:A8:92:EF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/867ffd2c-0f1a-38f5-92d2-42f194e02b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e1:6d:a1:cd:cb:8b:dc:40:26:c5:f8:d2:ba:2e:27:7b:9f: 71:8f:c4:35:cf:60:8a:12:85:fb:f8:98:ba:3e:59:5c:63:83: 0a:0c:c2:85:8e:0a:f1:1e:8d:84:3f:d3:7c:c8:3b:9a:93:f5: 60:04:0a:92:3c:88:1d:ba:7e:30:29:df:de:2f:68:d1:f9:fc: f2:18:f7:d5:fd:b8:ff:bf:92:c3:c6:e9:01:e1:72:cb:f8:45: 78:b3:d5:8e:05:d0:18:88:b8:92:ab:90:17:32:0a:cc:9b:25: d3:5a:44:6f:fc:17:4c:5e:65:35:9c:20:99:74:34:be:d6:cc: e7:07:fc:0f:05:b8:9f:ae:17:b4:fd:b2:c0:7a:c7:6e:b0:be: 55:71:0e:11:16:5c:a0:bb:fd:50:ef:dc:ac:c6:d6:b2:ff:97: b8:96:0d:28:63:0f:01:7e:a6:e7:b2:ce:de:5c:42:e6:85:e6: 25:f2:59:5e:b9:ed:82:a5:72:04:f7:7a:06:b2:73:1a:f7:05: 5c:94:05:2c:55:e1:fe:f1:88:e3:83:f5:bc:eb:d6:c9:32:3c: ae:70:72:15:aa:fe:78:34:cc:67:c1:f7:1b:bd:44:b6:74:44: 89:89:1d:91:c6:88:ab:b1:4e:43:17:ea:77:ab:b8:71:7e:5c: ba:c2:88:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SvCloie8HaANMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OTFiY2ZlMWMtZGRmNi00MzJhLWE4NzctZjAxMDU2MTcxZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG8OtkkjmFEAfRIl/sDsCdSZ+dLyiujXeUja If0rASXKGo/2IRoWZeCdaOasHPzurGrsewwHuoA47Mp97MS8A8RVY1CrffnlVt9v 0RHqnCHTG6so0t5BLrfL0bRHDIjcXr4nZH8rYRTqCgI19MvfKGmhyBDEVn3f1dTU LqVXmY7ovQdRa+mHX2oCnWnKG7+Gu4SJzCpSWR7hF/9c1yc3FC/59uwIiqOyBG0v jHLp2nBTkuZfYs2vLi9Zr1rZCeAfEkbFQ3mGxUvfIhqdkGG0+I4ToRXBTDerqRa2 mXAnzwu+Vm1UlnOZ4DYeXeeXHR0qW1vP69utx2YT9qv4NJ0L1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYlKcbTJDAwTPcB4fn/tJioku9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvODY3ZmZkMmMtMGYxYS0z OGY1LTkyZDItNDJmMTk0ZTAyYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGThbaHNy4vcQCbF+NK6Lid7n3GPxDXPYIoShfv4mLo+WVxjgwoMwoWO CvEejYQ/03zIO5qT9WAECpI8iB26fjAp394vaNH5/PIY99X9uP+/ksPG6QHhcsv4 RXiz1Y4F0BiIuJKrkBcyCsybJdNaRG/8F0xeZTWcIJl0NL7WzOcH/A8FuJ+uF7T9 ssB6x26wvlVxDhEWXKC7/VDv3KzG1rL/l7iWDShjDwF+pueyzt5cQuaF5iXyWV65 7YKlcgT3egaycxr3BVyUBSxV4f7xiOOD9bzr1skyPK5wchWq/ng0zGfB9xu9RLZ0 RImJHZHGiKuxTkMX6neruHF+XLrCiLU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:09:45 2025 by rpki-client