$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa File: eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa (raw, json) Hash identifier: 8lbTsTKRW5NQjp2IVnV/RjZaBrAVhALH3r6xyxt6uI4= Subject key identifier: C5:5D:19:F7:90:FC:21:C2:C6:3B:7E:BC:D1:F6:B5:3A:B3:C4:14:90 Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F43285849F2E53545D9DE4AD96A8C33F0 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 53507 IP address blocks: 162.0.156.0/22 maxlen: 24 173.243.16.0/20 maxlen: 24 199.96.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:35:45:d9:de:4a:d9:6a:8c:33:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=df065404-d04a-4964-a59d-96d00455ed4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:48:73:3d:cf:4b:4f:45:18:94:31:f5:4a: 1f:a5:9e:72:66:54:0e:90:90:df:8b:fb:76:47:11: c8:1c:9c:3a:63:18:9d:49:da:15:cc:83:d2:8b:19: 45:f4:18:51:e6:2f:b1:65:d5:a7:88:6f:81:60:d2: 8a:22:1d:38:5d:10:12:73:6a:05:90:b5:50:8a:d4: dd:62:14:8b:34:3c:f0:bb:46:be:97:3a:95:eb:42: 5e:6a:cf:cc:a6:f2:92:da:d6:da:04:06:6a:0a:7b: 1f:51:72:40:06:62:0d:bd:93:21:d8:82:c2:57:30: c4:9c:69:88:52:6e:35:22:21:9d:9e:45:d5:12:2a: 44:de:df:7c:93:1f:6b:dc:6d:b7:74:d4:ec:78:2e: 54:98:b6:0f:79:e5:f3:b2:d9:36:8e:5b:aa:82:d5: 39:a2:da:0e:f5:4a:62:c6:50:cd:8e:56:45:77:03: 36:89:20:d2:25:b2:81:63:30:ec:0d:67:16:85:3b: c2:af:2b:70:20:31:a0:07:34:fb:36:41:a6:10:9d: 36:c9:6e:ab:2e:3f:ee:2a:c4:bb:0f:38:34:ea:09: 9f:dc:45:33:44:1a:de:ff:eb:24:6b:e5:58:d8:1f: 5d:6d:de:73:30:30:96:b6:bc:64:88:6c:14:d1:d2: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:19:F7:90:FC:21:C2:C6:3B:7E:BC:D1:F6:B5:3A:B3:C4:14:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv4: 162.0.156.0/22 173.243.16.0/20 199.96.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:97:8c:4c:c2:83:66:a6:a2:fc:1e:1b:1f:14:e5:ba:62:a0: d4:9b:10:4b:30:0c:6e:00:84:39:10:0d:92:11:d0:42:bc:a4: 75:31:26:94:ab:c0:2d:0d:ea:85:ab:1c:76:93:28:8f:e0:ef: 24:97:10:84:ac:ea:24:df:d8:7b:b9:3d:3f:68:37:33:2d:1a: 31:e0:9f:41:a2:4b:11:5d:aa:ff:9b:2c:b4:2e:ec:2f:94:1b: 94:07:45:9f:91:62:73:61:3e:bb:9c:dd:b6:d2:62:50:78:24: b3:5d:2f:29:e0:e0:49:78:fc:5c:19:24:ab:92:0f:41:62:ad: 9f:c7:f7:32:a4:be:05:ad:3e:31:f9:3d:12:2d:83:7a:9e:b6: 26:bf:89:ae:00:86:8c:86:a6:a6:9c:0a:89:29:fb:c8:93:f5: 9f:e7:61:4e:d4:6a:65:9a:de:dc:f0:36:e3:84:f8:29:58:23: 09:79:c0:f1:77:88:ac:6f:ac:fd:21:a7:13:d7:63:2b:63:ac: 53:ac:7a:84:93:ae:f3:d0:8d:46:1d:39:2a:5d:cd:f9:2d:95: dc:2b:d5:bd:b4:8a:67:d3:6f:e6:6c:41:0e:ed:19:da:1f:77: c3:81:c6:34:3e:fb:00:ef:6f:8e:0c:90:1e:bb:7a:00:a8:2e: d7:77:23:89 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEny5TVF2d5K2WqMM/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGYwNjU0MDQtZDA0YS00OTY0LWE1OWQtOTZkMDA0NTVlZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiThIcz3PS09FGJQx9UofpZ5yZlQOkJDfi/t2 RxHIHJw6YxidSdoVzIPSixlF9BhR5i+xZdWniG+BYNKKIh04XRASc2oFkLVQitTd YhSLNDzwu0a+lzqV60Jeas/MpvKS2tbaBAZqCnsfUXJABmINvZMh2ILCVzDEnGmI Um41IiGdnkXVEipE3t98kx9r3G23dNTseC5UmLYPeeXzstk2jluqgtU5otoO9Upi xlDNjlZFdwM2iSDSJbKBYzDsDWcWhTvCrytwIDGgBzT7NkGmEJ02yW6rLj/uKsS7 Dzg06gmf3EUzRBre/+ska+VY2B9dbd5zMDCWtrxkiGwU0dJlkwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMVdGfeQ/CHCxjt+vNH2tTqzxBSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvZWI0NDUwNTgtMmM0My0z ZDUwLTlkNTUtN2M1YTY5ODVlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCogCcAwQE rfMQAwQCx2A0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADCXjEzCg2amovweGx8U5bpioNSbEEswDG4AhDkQ DZIR0EK8pHUxJpSrwC0N6oWrHHaTKI/g7ySXEISs6iTf2Hu5PT9oNzMtGjHgn0Gi SxFdqv+bLLQu7C+UG5QHRZ+RYnNhPruc3bbSYlB4JLNdLyng4El4/FwZJKuSD0Fi rZ/H9zKkvgWtPjH5PRItg3qetia/ia4AhoyGpqacCokp+8iT9Z/nYU7UamWa3tzw NuOE+ClYIwl5wPF3iKxvrP0hpxPXYytjrFOseoSTrvPQjUYdOSpdzfktldwr1b20 imfTb+ZsQQ7tGdofd8OBxjQ++wDvb44MkB67egCoLtd3I4k= -----END CERTIFICATE-----Generated at Mon Jun 16 13:30:52 2025 by rpki-client