$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa File: 5530f811-421c-3e6a-94f4-ec500c171493.roa (raw, json) Hash identifier: 1BC01bDFHNJjk3gokXfqStnbgfbhF6F4pyNrm6biHyg= Subject key identifier: 0D:28:8A:33:0B:4B:0C:8C:94:9D:82:F6:B8:54:69:05:3A:99:15:BD Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584A14657E0DEEA37EF9A353AB00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 396982 IP address blocks: 152.38.154.0/24 maxlen: 24 152.38.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7e:0d:ee:a3:7e:f9:a3:53:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=4b411ba5-9a69-49ae-ae87-5ec95eff1f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:09:59:da:ac:aa:23:77:f9:e6:31:16:4c: 77:96:3b:6c:5e:9f:20:88:f7:1d:6d:ec:9c:75:60: c8:b6:e2:b6:60:d4:17:0a:a1:69:57:8d:26:16:94: f1:11:ba:f5:27:e0:3d:1b:27:48:d9:73:d4:c3:c4: 92:b9:dc:19:09:89:31:d5:ed:ba:0e:35:af:5b:cc: 68:2f:b7:95:50:bb:b0:3d:40:d7:b0:9e:c4:98:3a: a2:fa:a5:1c:e7:95:28:37:c1:1a:53:cb:1e:77:2b: 58:d2:b1:70:53:66:31:1b:5c:84:92:14:26:23:ad: 09:b6:34:38:cd:b1:5f:1b:a0:17:43:9d:97:a0:c6: ef:87:3f:81:a8:e5:27:21:c2:b8:bc:30:b8:9f:c1: af:60:dd:1a:7c:d3:2c:d8:88:0c:7f:0d:9c:6b:5d: 30:aa:89:7f:be:1a:f0:d7:19:19:75:7e:0a:5f:c3: bf:4e:52:4c:b2:78:1d:c3:26:36:67:6e:2d:ce:70: c9:88:74:c5:9d:bd:7d:41:0d:09:2f:ef:7b:88:dd: 2f:08:af:da:55:09:32:a7:54:77:21:53:c5:48:d6: e4:3c:3e:8a:3e:35:62:0b:79:2f:6d:93:69:4c:5e: 1e:84:74:06:72:75:d9:47:c9:ed:6b:22:df:3a:fc: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:8A:33:0B:4B:0C:8C:94:9D:82:F6:B8:54:69:05:3A:99:15:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0f:88:90:a1:61:7a:c8:c3:35:a2:1f:9b:1a:83:f5:17:f6: 0d:ad:27:81:21:00:07:87:5b:c1:f0:67:3d:31:38:10:cb:46: f5:db:e4:1d:c9:21:83:91:b2:62:88:23:e8:e4:c7:60:16:4e: d0:2d:49:9b:9d:62:1e:30:d4:5e:c1:11:32:1c:ab:16:99:45: 69:36:6f:4c:be:32:3c:ed:54:65:fc:69:c3:b5:7e:dc:7c:84: 16:a0:15:61:48:d3:e6:79:44:d7:1d:f2:24:84:79:85:32:33: df:88:2a:8c:30:b5:6b:95:27:84:63:01:44:b2:ea:ad:c8:7d: e0:c8:f6:28:22:c9:b8:6f:39:91:3f:5b:6f:be:64:d1:02:ed: 1b:e8:f9:a6:79:d5:0b:84:8d:40:d6:cb:72:4e:e9:f6:ab:73: 9e:db:b0:fa:67:e2:90:de:5f:0f:ab:3c:cb:dd:39:d7:54:35: 88:3a:87:5b:65:1f:59:55:20:44:18:24:a3:eb:d5:7c:ac:e6: 05:70:00:b2:d6:e7:53:6f:a8:06:fe:75:e7:65:1b:14:84:a1: 19:6d:ec:fe:b9:e9:ca:f6:8f:b7:d3:56:21:62:cd:c9:58:e2: f7:b1:fb:77:49:d5:a3:0a:02:f9:75:66:f0:af:47:cd:be:b5: 17:15:07:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX4N7qN++aNTqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NGI0MTFiYTUtOWE2OS00OWFlLWFlODctNWVjOTVlZmYxZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGIJWdqsqiN3+eYxFkx3ljtsXp8giPcdbeyc dWDItuK2YNQXCqFpV40mFpTxEbr1J+A9GydI2XPUw8SSudwZCYkx1e26DjWvW8xo L7eVULuwPUDXsJ7EmDqi+qUc55UoN8EaU8sedytY0rFwU2YxG1yEkhQmI60JtjQ4 zbFfG6AXQ52XoMbvhz+BqOUnIcK4vDC4n8GvYN0afNMs2IgMfw2ca10wqol/vhrw 1xkZdX4KX8O/TlJMsngdwyY2Z24tznDJiHTFnb19QQ0JL+97iN0vCK/aVQkyp1R3 IVPFSNbkPD6KPjViC3kvbZNpTF4ehHQGcnXZR8ntayLfOvwsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0oijMLSwyMlJ2C9rhUaQU6mRW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTUzMGY4MTEtNDIxYy0z ZTZhLTk0ZjQtZWM1MDBjMTcxNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMPiJChYXrIwzWiH5sag/UX9g2tJ4EhAAeHW8HwZz0xOBDLRvXb5B3J IYORsmKII+jkx2AWTtAtSZudYh4w1F7BETIcqxaZRWk2b0y+MjztVGX8acO1ftx8 hBagFWFI0+Z5RNcd8iSEeYUyM9+IKowwtWuVJ4RjAUSy6q3IfeDI9igiybhvOZE/ W2++ZNEC7Rvo+aZ51QuEjUDWy3JO6farc57bsPpn4pDeXw+rPMvdOddUNYg6h1tl H1lVIEQYJKPr1Xys5gVwALLW51NvqAb+dedlGxSEoRlt7P656cr2j7fTViFizclY 4vex+3dJ1aMKAvl1ZvCvR82+tRcVB/4= -----END CERTIFICATE-----Generated at Sun Jun 15 06:41:00 2025 by rpki-client