$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1e162d29-1681-394e-af11-2cac1a16632d.roa File: 1e162d29-1681-394e-af11-2cac1a16632d.roa (raw, json) Hash identifier: JgVTiOelyUl3sLsbjW1LWLe4CCJz4be44srCTB3sHc8= Subject key identifier: E1:E2:6A:5D:3D:4F:A2:EA:D6:3E:23:7F:98:EF:2C:C1:77:9C:3F:55 Certificate issuer: /CN=1023a4c7-42d2-43d3-969f-e275de93e1df Certificate serial: 010D0C9F4328584A963697E24D1996DB2A637020 Authority key identifier: 55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1e162d29-1681-394e-af11-2cac1a16632d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 151.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:97:e2:4d:19:96:db:2a:63:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1023a4c7-42d2-43d3-969f-e275de93e1df Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fcd3644d-5584-4d92-a898-98f0f3e04b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:01:ad:ff:7d:a5:55:39:63:8d:22:b5:f0: 6e:da:81:6f:ff:4d:34:ea:eb:f2:63:df:1b:a1:9e: 37:ad:78:f7:ae:9d:c4:ba:d9:51:9e:d7:91:ed:d6: b8:6f:89:50:ea:fe:96:b3:d4:50:5b:80:4a:7f:27: c1:a3:4d:80:e7:0a:11:00:aa:2c:4d:d0:b5:5b:ca: 7c:85:89:4f:56:64:58:0b:94:18:40:38:1b:07:17: 96:4a:71:cd:bd:7f:0f:ca:36:93:bf:a3:77:f6:19: ef:5a:6f:02:5a:5a:52:b8:10:6d:10:cf:c3:a3:cf: 32:f0:f2:bd:de:e3:68:4e:ca:5c:70:94:9d:66:45: ef:a8:43:ef:a1:34:9e:41:8c:67:5d:4d:28:35:4a: b2:91:0b:85:96:61:a7:d7:27:24:a8:e0:9a:9a:77: b3:af:e5:e9:13:56:ed:08:f5:ab:25:f4:c8:5a:3d: 5c:a0:16:2a:80:20:9e:e6:81:2d:ed:17:e5:2b:70: fb:ba:ee:9e:00:46:3f:df:a6:6e:7b:87:fb:a0:6a: 0f:1e:a5:ee:31:2f:36:41:89:39:ba:01:f4:b9:6a: e5:f0:20:a3:41:68:93:b5:c5:57:7b:01:10:82:95: 80:58:e2:27:89:f7:ed:f7:58:ea:0d:22:6e:38:31: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E2:6A:5D:3D:4F:A2:EA:D6:3E:23:7F:98:EF:2C:C1:77:9C:3F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1e162d29-1681-394e-af11-2cac1a16632d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.crl X509v3 Authority Key Identifier: keyid:55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer sbgp-ipAddrBlock: critical IPv4: 151.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fa:48:82:9f:1c:a5:43:6d:94:31:8b:4f:6d:a5:02:cc:76: 13:da:bb:c3:0d:d8:a9:39:3e:9d:fd:a8:c8:a9:e3:ff:e2:38: 14:bf:5d:ea:0d:c1:08:24:96:6f:f8:0c:eb:0e:b5:b4:b0:03: af:28:70:98:57:0e:ed:f5:ed:b1:80:80:b7:c2:e1:16:05:17: e8:29:dd:04:b8:5e:1d:7e:ac:0c:27:4a:ef:ff:14:33:2d:1d: 1e:24:e7:c9:61:7f:bc:29:d1:9e:b8:af:42:e6:f7:15:9b:95: ee:ae:6f:6f:69:5c:35:22:53:04:2d:28:14:75:09:d0:6d:d6: 4e:4c:c0:2b:a7:5c:28:af:08:e3:c6:d7:a2:5e:ac:be:7e:ff: 64:2a:dc:c2:70:78:f5:ce:5b:db:cd:29:f9:dc:21:c5:ea:40: f9:a2:a9:9a:8d:30:04:7d:e6:1a:7e:0e:8c:fa:40:42:51:1c: 02:12:25:03:37:f8:52:1f:12:ce:ca:66:63:c3:64:a7:68:9b: 7e:7e:75:89:00:02:9d:e8:bd:23:44:94:0a:6c:e6:36:98:9b: 24:98:56:b0:38:60:08:77:11:89:95:8e:4b:11:ce:74:42:8b: a9:26:a0:ed:64:a2:b8:87:68:e9:f2:cd:df:53:30:4e:12:c6: de:1d:17:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpfiTRmW2ypjcCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAyM2E0YzctNDJkMi00M2QzLTk2OWYtZTI3NWRlOTNl MWRmMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmNkMzY0NGQtNTU4NC00ZDkyLWE4OTgtOThmMGYzZTA0YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYkBrf99pVU5Y40itfBu2oFv/0006uvyY98b oZ43rXj3rp3EutlRnteR7da4b4lQ6v6Ws9RQW4BKfyfBo02A5woRAKosTdC1W8p8 hYlPVmRYC5QYQDgbBxeWSnHNvX8PyjaTv6N39hnvWm8CWlpSuBBtEM/Do88y8PK9 3uNoTspccJSdZkXvqEPvoTSeQYxnXU0oNUqykQuFlmGn1yckqOCamnezr+XpE1bt CPWrJfTIWj1coBYqgCCe5oEt7RflK3D7uu6eAEY/36Zue4f7oGoPHqXuMS82QYk5 ugH0uWrl8CCjQWiTtcVXewEQgpWAWOInifft91jqDSJuODE10wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHial09T6Lq1j4jf5jvLMF3nD9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMDIz YTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1ZGU5M2UxZGYvMWUxNjJkMjktMTY4MS0z OTRlLWFmMTEtMmNhYzFhMTY2MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTAyM2E0YzctNDJkMi00M2QzLTk2 OWYtZTI3NWRlOTNlMWRmLzEwMjNhNGM3LTQyZDItNDNkMy05NjlmLWUyNzVkZTkz ZTFkZi5jcmwwHwYDVR0jBBgwFoAUVbTRAIg2RF97dJ3absI0YTMKveAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMDIzYTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1 ZGU5M2UxZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKz6SIKfHKVDbZQxi09tpQLMdhPau8MN2Kk5Pp39qMip4//iOBS/XeoN wQgklm/4DOsOtbSwA68ocJhXDu317bGAgLfC4RYFF+gp3QS4Xh1+rAwnSu//FDMt HR4k58lhf7wp0Z64r0Lm9xWble6ub29pXDUiUwQtKBR1CdBt1k5MwCunXCivCOPG 16JerL5+/2Qq3MJwePXOW9vNKfncIcXqQPmiqZqNMAR95hp+Doz6QEJRHAISJQM3 +FIfEs7KZmPDZKdom35+dYkAAp3ovSNElAps5jaYmySYVrA4YAh3EYmVjksRznRC i6kmoO1koriHaOnyzd9TME4Sxt4dF9I= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:13 2025 by rpki-client