$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa File: 159ace5d-d880-38ca-9296-22d7f83d3cb6.roa (raw, json) Hash identifier: xQ9CPM8gpeuGsU/5NG57p4ZhCR0gXO01sNZIUJ4AWPA= Subject key identifier: 08:1B:A0:68:AE:7F:E6:FF:57:1B:B8:A7:82:31:7F:13:48:26:D8:AC Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F43285849ED4FC6E8F719279A9F1AB080 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 92 IP address blocks: 128.153.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c6:e8:f7:19:27:9a:9f:1a:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=7d5e527f-0f5b-4434-83b8-2c6bca76e65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:1b:56:d4:30:e0:1f:f0:95:43:8e:d1:87: fa:5e:15:98:84:08:2e:7d:bc:15:ca:6b:cf:dd:fb: cd:e6:ef:a8:fe:66:ca:c7:cb:f0:29:15:be:80:83: c6:54:27:f8:2c:bd:74:89:64:0a:e3:51:2f:65:32: ff:ee:5b:91:0a:db:23:59:41:09:40:06:7f:15:40: 5b:e6:87:f5:12:93:8e:49:5d:b2:93:bc:4b:d8:ef: 8f:c0:19:69:55:34:65:46:b3:ec:ea:e6:72:8d:d3: a7:50:b1:9f:b0:5c:46:a6:c9:95:a1:a3:91:ca:e2: d3:cc:21:fd:cf:12:cd:93:46:5a:eb:ac:68:27:49: 3a:8b:6a:05:8e:0e:1f:f6:57:80:07:83:00:b9:0c: f1:a5:da:2f:6f:ba:b1:e2:d7:84:6b:15:98:27:67: 12:4f:88:96:fa:46:4c:75:4a:74:59:90:47:ad:b6: b1:93:8e:af:43:82:b4:83:89:4b:b9:61:29:49:61: 8c:43:b5:7d:0d:c4:1b:6b:f4:7c:a0:02:ea:16:70: a5:e4:11:bd:42:65:d2:b9:84:91:2b:cb:b2:ec:95: e1:50:a3:76:f4:0d:a6:47:bf:62:e5:09:d4:d1:fa: ac:85:02:f3:6b:bc:16:cc:ff:63:31:fc:5f:e4:04: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1B:A0:68:AE:7F:E6:FF:57:1B:B8:A7:82:31:7F:13:48:26:D8:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:0a:ad:33:00:66:1f:e8:c3:85:b6:6e:06:2f:5f:b0:1b:7b: 4e:2c:9a:7f:f4:46:67:e4:97:c7:09:8d:8a:ac:41:7c:06:a1: 38:a2:48:d7:b1:64:56:05:51:8f:4a:a7:1b:92:58:6d:80:91: ad:2e:29:04:a5:eb:25:d0:62:9a:55:18:83:39:70:3c:83:78: 6a:50:55:c1:81:5e:fc:08:11:76:5c:fd:39:30:7f:72:66:e1: 53:8e:35:cb:dc:59:c3:8f:9b:75:9e:ca:d6:76:b1:b9:0a:37: 15:83:60:84:68:a7:79:25:d0:91:e4:89:52:64:b1:10:43:fd: b5:3f:43:60:c8:d4:99:e2:10:1f:c9:cc:bc:8d:69:e5:9d:89: a1:5b:20:cf:f8:7d:0b:bf:76:2a:e8:8c:89:5a:64:00:81:b0: 2d:91:85:e4:8c:4e:c5:10:6c:3c:e5:b2:f7:51:2d:8b:3e:82: 49:cc:d6:2c:49:e5:93:0f:78:fc:ef:b0:07:f2:ec:c8:04:e0: ed:7a:b1:81:04:04:60:2b:71:9d:c3:4e:16:60:f3:68:31:c2: 8d:00:1a:08:c1:ea:13:fb:83:ea:44:14:02:19:ea:0a:bc:fa: 04:ed:21:ed:32:f5:35:a6:0d:f4:8f:a5:d0:c4:a0:5e:b1:2e: fc:f5:5b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8bo9xknmp8asIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk N2Q1ZTUyN2YtMGY1Yi00NDM0LTgzYjgtMmM2YmNhNzZlNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzsbVtQw4B/wlUOO0Yf6XhWYhAgufbwVymvP 3fvN5u+o/mbKx8vwKRW+gIPGVCf4LL10iWQK41EvZTL/7luRCtsjWUEJQAZ/FUBb 5of1EpOOSV2yk7xL2O+PwBlpVTRlRrPs6uZyjdOnULGfsFxGpsmVoaORyuLTzCH9 zxLNk0Za66xoJ0k6i2oFjg4f9leAB4MAuQzxpdovb7qx4teEaxWYJ2cST4iW+kZM dUp0WZBHrbaxk46vQ4K0g4lLuWEpSWGMQ7V9DcQba/R8oALqFnCl5BG9QmXSuYSR K8uy7JXhUKN29A2mR79i5QnU0fqshQLza7wWzP9jMfxf5ATiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgboGiuf+b/Vxu4p4IxfxNIJtisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMTU5YWNlNWQtZDg4MC0z OGNhLTkyOTYtMjJkN2Y4M2QzY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0KrTMAZh/ow4W2bgYvX7Abe04smn/0Rmfkl8cJjYqsQXwGoTiiSNex ZFYFUY9KpxuSWG2Aka0uKQSl6yXQYppVGIM5cDyDeGpQVcGBXvwIEXZc/Tkwf3Jm 4VOONcvcWcOPm3WeytZ2sbkKNxWDYIRop3kl0JHkiVJksRBD/bU/Q2DI1JniEB/J zLyNaeWdiaFbIM/4fQu/dirojIlaZACBsC2RheSMTsUQbDzlsvdRLYs+gknM1ixJ 5ZMPePzvsAfy7MgE4O16sYEEBGArcZ3DThZg82gxwo0AGgjB6hP7g+pEFAIZ6gq8 +gTtIe0y9TWmDfSPpdDEoF6xLvz1W38= -----END CERTIFICATE-----Generated at Tue Jun 17 09:19:43 2025 by rpki-client