$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa File: 405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa (raw, json) Hash identifier: sjO7uzi0eAa60vo1aXm4OC8h1OiPQ6EyrRvxWMoZQI8= Subject key identifier: D0:C8:67:C8:B6:21:A8:C8:60:66:2B:8F:46:49:A0:E7:83:6A:E7:B9 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584A225ABB78DC1AFEBBE9AAE700 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 1273 IP address blocks: 146.135.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:bb:78:dc:1a:fe:bb:e9:aa:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=afd1298c-c535-41b6-8aad-6d10ef8c770c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b4:4d:ad:86:42:33:1d:76:b0:6f:f8:0e:5a: e3:08:bd:49:f1:74:82:38:98:2d:35:a5:b2:17:c7: 88:f0:db:c3:6a:2d:ac:b0:11:df:f4:a4:f5:01:14: cc:19:f3:ad:74:f4:7e:0e:12:e2:43:93:db:f8:0f: 97:2b:7c:19:75:15:8f:82:d3:8a:69:a3:a9:dc:79: e4:2a:cf:b6:56:45:c6:01:8a:3f:fd:90:b1:20:9c: e6:f6:19:bd:0e:7c:db:18:e1:9e:9b:19:3b:39:0f: 01:19:7a:81:da:33:cc:64:4d:b5:44:a1:aa:2a:31: c5:08:67:25:cb:85:57:fb:21:7a:4d:17:cb:8e:02: 7d:3f:b3:a0:4c:a3:b4:cc:37:05:d5:03:b7:8d:78: a1:d1:ab:36:a0:ee:9f:b8:9b:1f:d3:f7:2a:5d:fd: fd:42:2e:38:a1:9a:49:a8:49:03:1f:03:d8:19:c3: 84:c6:9b:a1:af:17:b6:84:bd:4a:42:e5:ef:aa:8e: 20:c2:1a:84:0a:1a:f7:79:65:a6:c3:14:b4:82:b4: b7:c7:31:aa:ed:c7:6d:75:62:0a:ea:5e:db:a3:c7: c6:7f:8e:57:16:32:42:0c:b9:c9:fd:bd:02:d4:b4: 50:85:ba:bd:42:f5:0d:4c:b3:43:68:e0:37:5f:77: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:67:C8:B6:21:A8:C8:60:66:2B:8F:46:49:A0:E7:83:6A:E7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 146.135.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:17:6d:9d:97:33:ad:4f:0a:6a:39:ec:04:29:c6:06:0e: 43:03:f2:25:85:42:92:ea:4a:48:fd:b6:b0:c1:2a:d9:0f:8d: 46:e9:69:ae:1d:83:17:91:15:9b:ca:c4:08:d0:f4:d3:b9:fc: 7c:f3:fa:ec:61:7f:4d:e9:05:fe:50:60:5a:26:04:15:dd:7f: 26:61:91:c2:c3:d2:d8:cb:2a:02:e2:55:0d:ba:ab:5d:63:29: 57:d4:f0:28:9c:f2:8b:53:b8:5c:57:e1:33:48:ed:9d:93:13: 51:1c:9c:7b:74:96:72:12:5d:4d:0a:a7:a1:75:b1:79:26:36: 47:67:2b:de:32:c3:39:76:89:b1:ec:d1:21:3b:d3:05:21:1f: 39:43:f0:3a:38:4d:2a:c7:d4:bd:b5:b9:f3:e6:dc:09:e6:bb: e1:de:1b:cc:3a:b3:c9:d4:7e:6e:0e:9c:db:0f:e0:4c:cb:81: 67:58:e8:6c:b2:6e:e7:2c:79:93:09:fd:dd:d1:e3:1b:d8:1b: 61:96:65:34:11:69:27:28:8a:01:55:68:10:43:56:fe:4f:f5: 78:ea:0c:bf:ea:f3:78:bc:1b:b1:f9:2e:0a:00:fd:64:9e:9d: ca:cb:bd:6e:25:7d:d7:a3:0d:ac:87:e0:bd:ec:7f:e0:b9:dd: 8e:b8:e8:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWrt43Br+u+mq5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YWZkMTI5OGMtYzUzNS00MWI2LThhYWQtNmQxMGVmOGM3NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLRNrYZCMx12sG/4DlrjCL1J8XSCOJgtNaWy F8eI8NvDai2ssBHf9KT1ARTMGfOtdPR+DhLiQ5Pb+A+XK3wZdRWPgtOKaaOp3Hnk Ks+2VkXGAYo//ZCxIJzm9hm9DnzbGOGemxk7OQ8BGXqB2jPMZE21RKGqKjHFCGcl y4VX+yF6TRfLjgJ9P7OgTKO0zDcF1QO3jXih0as2oO6fuJsf0/cqXf39Qi44oZpJ qEkDHwPYGcOExpuhrxe2hL1KQuXvqo4gwhqEChr3eWWmwxS0grS3xzGq7cdtdWIK 6l7bo8fGf45XFjJCDLnJ/b0C1LRQhbq9QvUNTLNDaOA3X3eXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDIZ8i2IajIYGYrj0ZJoOeDaue5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvNDA1YWQ1M2UtNDM5OC0z ZDljLWJiMTktNWVjZDI0MjVlNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkoeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT2F22dlzOtTwpqOewEKcYGDkMD8iWFQpLqSkj9trDBKtkPjUbpaa4d gxeRFZvKxAjQ9NO5/Hzz+uxhf03pBf5QYFomBBXdfyZhkcLD0tjLKgLiVQ26q11j KVfU8Cic8otTuFxX4TNI7Z2TE1EcnHt0lnISXU0Kp6F1sXkmNkdnK94ywzl2ibHs 0SE70wUhHzlD8Do4TSrH1L21ufPm3Anmu+HeG8w6s8nUfm4OnNsP4EzLgWdY6Gyy bucseZMJ/d3R4xvYG2GWZTQRaScoigFVaBBDVv5P9XjqDL/q83i8G7H5LgoA/WSe ncrLvW4lfdejDayH4L3sf+C53Y646N4= -----END CERTIFICATE-----Generated at Mon Jun 16 04:35:41 2025 by rpki-client