$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa File: bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa (raw, json) Hash identifier: XvQNnDJBsWSJPIRysz1eDBqn5fT+N/p9bld8oJIr9HU= Subject key identifier: BF:87:F1:4D:7A:18:4E:DA:59:2D:C6:0B:DD:4F:5F:41:69:88:21:0E Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F4328584A936B54EFD6E50ED934C31900 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa Signing time: Sun 20 Jul 2025 01:00:50 +0000 ROA not before: Sun 20 Jul 2025 01:00:50 +0000 ROA not after: Sat 18 Oct 2025 01:00:50 +0000 asID: 398446 IP address blocks: 143.246.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:6b:54:ef:d6:e5:0e:d9:34:c3:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Jul 20 01:00:50 2025 GMT Not After : Oct 18 01:00:50 2025 GMT Subject: CN=f9ec2b33-3883-4618-b718-f72a17c5e274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:73:e9:eb:76:c0:f7:0d:bf:28:16:01:08: 5a:01:9d:7e:94:b2:f2:99:83:c6:8e:6f:81:ad:48: 1b:b1:65:ef:d0:ae:e5:87:32:ff:4b:de:da:23:99: 87:7b:b0:17:56:2f:6a:b3:21:eb:1c:43:01:ef:c3: c0:a0:1d:b5:98:6e:36:0d:c1:26:e4:95:d0:28:8d: f2:18:d2:62:a3:bc:52:ba:5d:0d:fd:70:e7:e3:68: 9e:44:40:6b:e9:27:59:4b:85:44:87:ef:29:7d:65: aa:b3:74:fc:74:bd:2c:7e:ab:d6:94:d3:a8:8b:18: 1f:d5:27:6a:65:e4:87:d2:5a:25:d9:05:a2:cb:9e: 5e:e1:d2:73:70:eb:8f:6a:f2:6b:15:ab:dd:e7:36: c8:4b:44:72:98:76:79:b0:ba:fd:0d:25:08:64:78: aa:ea:81:f1:d1:f6:01:49:01:2a:ea:59:1d:d9:da: a4:a4:16:b4:a8:10:09:67:db:8b:5f:50:43:34:64: bd:00:b1:e5:9a:5f:71:ef:11:91:52:cc:a1:f7:bf: 97:1f:2f:b4:fa:95:36:5d:da:6d:e3:b7:07:51:1c: 5c:05:05:02:7c:66:5a:9a:85:9d:e2:4c:8e:bd:7e: a3:24:b5:0f:7a:40:cf:28:3d:99:14:cd:31:3c:b8: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:F1:4D:7A:18:4E:DA:59:2D:C6:0B:DD:4F:5F:41:69:88:21:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 143.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2f:6a:d4:1b:3e:9a:2c:ff:ce:bb:8b:12:92:67:f4:6d:9a: 16:ca:f6:63:58:f8:3e:ad:28:ac:56:b2:45:c4:12:72:a5:5d: 0d:00:55:a0:04:6a:63:2a:eb:01:15:46:7b:18:06:4d:6f:c6: 5c:c6:58:90:a2:3b:05:2b:5c:67:4b:c4:4d:1b:eb:8e:25:d8: 62:4d:5b:a5:d3:34:2f:11:ca:62:d8:43:94:03:82:4d:97:79: 74:19:c6:ba:6f:e7:dd:8b:c4:70:93:62:75:b5:f1:e3:01:08: a8:2b:a9:c3:88:37:ed:0d:1d:19:7c:79:f7:34:9b:3c:fa:68: 94:c7:69:76:df:0d:8c:d5:9e:dd:7e:af:9f:4d:51:1c:de:ad: ad:9e:59:76:3e:c2:a0:11:a3:01:c2:a2:3e:0e:fe:79:91:57: dc:d0:e2:aa:e8:23:be:8e:59:00:08:e6:d9:42:4a:84:76:68: 51:6b:e7:7c:a0:f1:40:3a:f4:fe:0f:4b:83:f2:0a:b8:7a:0b: 5b:57:0a:f5:42:e3:72:a0:03:52:f8:ed:81:06:48:0c:dc:af: 13:13:02:7c:bf:db:f6:8e:e0:51:5e:78:62:4e:9a:19:1c:b9: d9:7d:bc:8f:52:1d:02:82:bc:a4:9b:27:11:c9:c7:0b:28:3f: 81:4c:f1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa1Tv1uUO2TTDGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk ZjllYzJiMzMtMzg4My00NjE4LWI3MTgtZjcyYTE3YzVlMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxutz6et2wPcNvygWAQhaAZ1+lLLymYPGjm+B rUgbsWXv0K7lhzL/S97aI5mHe7AXVi9qsyHrHEMB78PAoB21mG42DcEm5JXQKI3y GNJio7xSul0N/XDn42ieREBr6SdZS4VEh+8pfWWqs3T8dL0sfqvWlNOoixgf1Sdq ZeSH0lol2QWiy55e4dJzcOuPavJrFavd5zbIS0RymHZ5sLr9DSUIZHiq6oHx0fYB SQEq6lkd2dqkpBa0qBAJZ9uLX1BDNGS9ALHlml9x7xGRUsyh97+XHy+0+pU2Xdpt 47cHURxcBQUCfGZamoWd4kyOvX6jJLUPekDPKD2ZFM0xPLiWRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+H8U16GE7aWS3GC91PX0FpiCEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvYmRkMWRlZTYtYTc0OC0z YmNkLWE4MTctMWI2MTdlMmNiMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYvatQbPpos/867ixKSZ/RtmhbK9mNY+D6tKKxWskXEEnKlXQ0AVaAE amMq6wEVRnsYBk1vxlzGWJCiOwUrXGdLxE0b644l2GJNW6XTNC8RymLYQ5QDgk2X eXQZxrpv592LxHCTYnW18eMBCKgrqcOIN+0NHRl8efc0mzz6aJTHaXbfDYzVnt1+ r59NURzera2eWXY+wqARowHCoj4O/nmRV9zQ4qroI76OWQAI5tlCSoR2aFFr53yg 8UA69P4PS4PyCrh6C1tXCvVC43KgA1L47YEGSAzcrxMTAny/2/aO4FFeeGJOmhkc udl9vI9SHQKCvKSbJxHJxwsoP4FM8cg= -----END CERTIFICATE-----Generated at Thu Aug 7 14:46:06 2025 by rpki-client