$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa File: b9bb34a8-3fb4-3229-af76-b084da323030.roa (raw, json) Hash identifier: MGwDyT6eeCieqzoSL9dPNFwqVsoMH6inX4xNVl1srMQ= Subject key identifier: 7C:22:82:95:B9:E1:49:14:78:37:C0:65:85:F5:7E:DE:64:92:B7:C1 Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584A28DF0744726E413836D33C80 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa Signing time: Wed 11 Jun 2025 21:02:28 +0000 ROA not before: Wed 11 Jun 2025 21:02:28 +0000 ROA not after: Tue 09 Sep 2025 21:02:28 +0000 asID: 20 IP address blocks: 128.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:28:df:07:44:72:6e:41:38:36:d3:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Jun 11 21:02:28 2025 GMT Not After : Sep 9 21:02:28 2025 GMT Subject: CN=4ff4182b-98b7-4da9-8de7-9397c9973b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:95:d0:27:04:1c:4c:0e:9e:ba:07:60:27: 5b:bb:26:c0:93:13:e6:ff:e1:a6:cc:be:30:74:7c: 8a:b7:49:96:ff:e1:a7:2a:18:34:5e:96:bc:a2:74: d2:f5:c4:cf:1e:ec:e6:c7:cc:54:d5:46:30:9f:8c: 4f:97:38:53:b7:da:85:66:f1:a6:9e:b4:cc:aa:9f: 17:89:75:af:da:68:b8:78:0e:40:5a:0d:33:95:ea: c5:b1:89:ee:12:b7:46:50:a4:e6:b4:fc:a1:75:84: c3:07:05:f9:58:8a:95:f1:96:e2:4a:9c:5b:e4:80: fe:c3:32:6f:2f:e3:18:be:e4:9c:1a:fe:90:81:a5: cc:36:8c:cb:7d:8a:f1:b2:aa:3c:03:f7:fc:6e:9c: a2:f4:56:6a:c9:e6:aa:ce:b2:b4:07:bb:63:28:9b: 39:a6:b2:08:ba:8c:a6:72:fb:10:ab:da:bb:70:5c: 5a:e8:4c:2f:64:4a:3d:33:2b:b2:ae:ec:13:a5:21: 53:2f:0f:ee:81:21:54:58:6e:27:2a:a4:55:1d:72: 4e:d1:86:a2:84:de:4a:2c:64:ea:37:e7:7e:be:52: e9:cc:86:68:58:bd:78:e1:31:d4:10:bc:43:ac:21: d0:b8:b7:04:5b:88:8d:aa:be:4e:e4:7e:50:af:96: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:22:82:95:B9:E1:49:14:78:37:C0:65:85:F5:7E:DE:64:92:B7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 128.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:61:73:c8:3f:a2:c0:88:4f:a8:f8:46:e3:c4:02:7f:c7:3d: a6:50:71:03:ce:a8:44:75:ee:c4:89:eb:05:27:46:36:92:5f: 24:a5:21:89:5b:70:27:ef:4d:02:67:6e:83:99:4f:ab:e2:45: 4a:86:60:66:7d:97:7a:48:e4:af:46:ea:49:cb:51:cb:42:4d: af:a3:3b:34:9d:04:cf:a4:f8:25:07:46:2f:77:bf:f7:87:14: 82:e8:ac:16:88:6f:fa:b4:b1:98:45:3b:b3:b4:d6:72:d0:8a: 82:e7:94:e8:e3:d8:b4:61:a2:c8:f7:ec:01:45:25:64:d1:50: 4b:64:e0:47:1e:56:4c:3e:c7:f1:a4:83:83:f2:6d:d8:55:ef: b3:b5:d0:9c:3d:75:5f:a9:af:14:bc:2f:61:82:28:69:c0:16: 26:e6:b9:35:d0:f3:c8:78:d9:d0:35:e1:72:fb:52:c1:ec:f4: 15:3f:4c:a2:7b:ad:47:d6:cb:8e:d3:d4:df:42:ac:e4:f0:80: 53:23:75:41:4d:af:85:3a:21:f5:b5:34:67:8e:dc:76:4d:36: 6b:b0:18:d0:46:e5:0d:d5:d3:06:75:2f:7b:a5:c5:1d:47:95: b6:a4:82:6f:18:54:d9:4d:8b:c6:31:4c:12:dd:e0:9f:27:ae: 8b:61:e0:3e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoo3wdEcm5BODbTPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI1MDYxMTIxMDIyOFoXDTI1MDkwOTIxMDIyOFowLzEtMCsGA1UEAxMk NGZmNDE4MmItOThiNy00ZGE5LThkZTctOTM5N2M5OTczYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0CV0CcEHEwOnroHYCdbuybAkxPm/+GmzL4w dHyKt0mW/+GnKhg0Xpa8onTS9cTPHuzmx8xU1UYwn4xPlzhTt9qFZvGmnrTMqp8X iXWv2mi4eA5AWg0zlerFsYnuErdGUKTmtPyhdYTDBwX5WIqV8ZbiSpxb5ID+wzJv L+MYvuScGv6QgaXMNozLfYrxsqo8A/f8bpyi9FZqyeaqzrK0B7tjKJs5prIIuoym cvsQq9q7cFxa6EwvZEo9MyuyruwTpSFTLw/ugSFUWG4nKqRVHXJO0YaihN5KLGTq N+d+vlLpzIZoWL144THUELxDrCHQuLcEW4iNqr5O5H5Qr5aU9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHwigpW54UkUeDfAZYX1ft5kkrfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvYjliYjM0YTgtM2ZiNC0z MjI5LWFmNzYtYjA4NGRhMzIzMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgJcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMGFzyD+iwIhPqPhG48QCf8c9plBxA86oRHXuxInrBSdGNpJfJKUhiVtw J+9NAmdug5lPq+JFSoZgZn2Xekjkr0bqSctRy0JNr6M7NJ0Ez6T4JQdGL3e/94cU guisFohv+rSxmEU7s7TWctCKgueU6OPYtGGiyPfsAUUlZNFQS2TgRx5WTD7H8aSD g/Jt2FXvs7XQnD11X6mvFLwvYYIoacAWJua5NdDzyHjZ0DXhcvtSwez0FT9Monut R9bLjtPU30Ks5PCAUyN1QU2vhToh9bU0Z47cdk02a7AY0EblDdXTBnUve6XFHUeV tqSCbxhU2U2LxjFMEt3gnyeui2HgPg== -----END CERTIFICATE-----Generated at Wed Jun 18 07:15:50 2025 by rpki-client