$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa File: 09c7645e-f4c3-3106-8958-9a9fc6429bef.roa (raw, json) Hash identifier: VY/OxFs7g0E9VvS/Rmp0dQn0sbYidqAY8vWrLq8/tgc= Subject key identifier: 14:37:F7:A0:04:7C:D1:BC:17:08:BB:1C:9D:46:B6:3A:45:55:39:06 Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F43285849E91FAA61BB0BAA995AB0E080 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 8075 IP address blocks: 216.152.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:aa:61:bb:0b:aa:99:5a:b0:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=b9c601a0-f375-435c-910f-142a592e79e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:cf:7d:45:c2:cc:04:60:67:88:6f:61:fa: 5d:b9:a6:15:4d:91:31:3b:7f:6f:cf:b1:ad:06:57: 01:b2:6d:be:82:b6:bc:1b:61:b8:26:e3:f6:bc:eb: 0f:d4:67:3c:d4:cf:08:1f:15:f8:74:1b:01:43:32: cf:fa:ec:8c:c6:e8:60:95:59:a1:fd:dd:23:43:4b: 8f:28:38:cf:a7:df:68:d7:5b:fd:ad:51:c6:f5:24: 6c:f6:80:f1:f4:b3:b0:b3:57:2b:09:c3:35:c1:aa: 45:35:0c:77:e1:92:88:a4:2d:cf:4a:15:b4:22:f6: 8a:a0:3a:4c:de:ba:ab:fb:81:92:04:1f:f7:4d:11: e3:c3:1b:fc:f9:da:3b:f0:f0:64:61:7d:f4:4b:f5: 19:0c:0c:9a:3d:e2:1f:b1:bc:54:f4:4b:12:45:ae: 54:6b:9f:67:f0:a3:1e:ac:b6:26:43:7e:71:30:58: 77:71:8e:9c:54:2d:bc:a3:f6:f8:fa:b2:7b:63:c0: 17:be:65:e7:3e:ca:83:28:5a:32:25:92:8a:73:0a: 2e:0c:d2:2c:09:92:66:21:dc:09:ae:00:56:7e:74: fe:20:15:ab:d6:04:8e:05:60:cc:36:ee:ce:67:fb: 3e:98:68:da:54:2c:14:3b:21:50:f6:b0:48:ae:ec: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:F7:A0:04:7C:D1:BC:17:08:BB:1C:9D:46:B6:3A:45:55:39:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:03:5a:a8:d5:b7:c5:27:b9:48:ac:3a:9a:0d:d7:d8:18:98: 93:ab:a9:d1:17:1e:c4:67:a5:16:7f:73:4f:a8:1c:c8:a7:49: 6a:b9:b6:e2:98:69:3a:b1:f7:9d:3a:9c:0c:b0:79:70:1f:88: 90:fb:8b:5f:01:37:c0:43:ff:c1:e8:22:82:77:28:c5:d5:79: 0a:12:74:49:88:f4:33:60:78:bd:88:50:9d:f8:16:47:de:dc: 06:15:30:8b:10:db:e2:bd:c1:e7:ef:f8:e1:bc:19:84:88:ab: 6b:f7:90:10:a5:67:69:c8:42:16:e3:1e:dd:9f:94:b6:c3:fa: 5c:8f:f8:ba:73:a9:ce:85:57:11:e3:cb:80:94:6b:0f:ba:b3: ce:d4:43:6a:23:99:10:7f:22:89:73:37:18:69:c4:72:d9:32: 63:28:79:8b:45:17:7e:f5:25:54:62:72:de:cf:ba:1c:38:03: 48:13:a0:4b:d3:37:b9:7e:5c:6b:6e:d3:bc:66:29:91:89:08: c6:f4:4b:50:fd:ad:7c:c7:f9:7e:63:6c:92:cc:74:c8:f5:18: 0b:c9:8b:85:94:64:2b:4e:69:7a:50:d7:86:e7:f6:1c:fe:99: de:14:ef:03:13:06:c2:c4:0e:d0:9e:15:9d:0b:b0:ea:9e:69: 3a:c3:59:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6phuwuqmVqw4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YjljNjAxYTAtZjM3NS00MzVjLTkxMGYtMTQyYTU5MmU3OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11jPfUXCzARgZ4hvYfpduaYVTZExO39vz7Gt BlcBsm2+gra8G2G4JuP2vOsP1Gc81M8IHxX4dBsBQzLP+uyMxuhglVmh/d0jQ0uP KDjPp99o11v9rVHG9SRs9oDx9LOws1crCcM1wapFNQx34ZKIpC3PShW0IvaKoDpM 3rqr+4GSBB/3TRHjwxv8+do78PBkYX30S/UZDAyaPeIfsbxU9EsSRa5Ua59n8KMe rLYmQ35xMFh3cY6cVC28o/b4+rJ7Y8AXvmXnPsqDKFoyJZKKcwouDNIsCZJmIdwJ rgBWfnT+IBWr1gSOBWDMNu7OZ/s+mGjaVCwUOyFQ9rBIruwIxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ396AEfNG8Fwi7HJ1GtjpFVTkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvMDljNzY0NWUtZjRjMy0z MTA2LTg5NTgtOWE5ZmM2NDI5YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYDWqjVt8UnuUisOpoN19gYmJOrqdEXHsRnpRZ/c0+oHMinSWq5tuKY aTqx9506nAyweXAfiJD7i18BN8BD/8HoIoJ3KMXVeQoSdEmI9DNgeL2IUJ34Fkfe 3AYVMIsQ2+K9wefv+OG8GYSIq2v3kBClZ2nIQhbjHt2flLbD+lyP+Lpzqc6FVxHj y4CUaw+6s87UQ2ojmRB/IolzNxhpxHLZMmMoeYtFF371JVRict7Puhw4A0gToEvT N7l+XGtu07xmKZGJCMb0S1D9rXzH+X5jbJLMdMj1GAvJi4WUZCtOaXpQ14bn9hz+ md4U7wMTBsLEDtCeFZ0LsOqeaTrDWfU= -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:06 2025 by rpki-client