$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/148e8362-f163-3455-8efd-ad039e603d1f.roa File: 148e8362-f163-3455-8efd-ad039e603d1f.roa (raw, json) Hash identifier: Bz8G2kbUPJp8OPzL+uA9vVhOyG5EKhbscwIqhFQR4eo= Subject key identifier: 9E:FB:41:3A:57:10:60:2F:FC:73:D4:32:E1:A9:3F:9D:5E:37:70:04 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F43285849CE9A6660AD9B4BBEB70AB780 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/148e8362-f163-3455-8efd-ad039e603d1f.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 10317 IP address blocks: 204.155.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:66:60:ad:9b:4b:be:b7:0a:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=aec8aae6-480b-48d3-b8e3-fd0925dd9efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4f:4c:80:1e:b6:4e:b8:fd:55:03:1b:23:a8: bb:1e:d7:bd:0a:b2:3a:8c:ed:25:89:2d:f7:74:85: 61:03:67:5a:6d:7a:22:21:f9:12:34:d5:c4:9d:ee: 7d:9a:4d:ee:69:90:c2:8c:c3:a0:68:d9:cf:b8:eb: c0:e5:79:07:7f:64:83:bc:a1:9d:2a:8d:73:73:06: d5:26:ff:6a:f8:b9:e4:ef:a6:e4:b5:c5:28:26:e8: 86:16:06:be:67:89:e1:54:1e:3d:e6:f1:ee:c8:45: 1d:79:f4:10:3a:ab:fe:6a:43:62:e3:a1:f5:15:8b: 54:fb:b7:64:ea:df:a0:a3:44:da:6b:fa:77:a1:74: 2e:ff:90:80:d6:0e:df:a5:50:de:f0:c7:4a:2e:87: 7c:2b:a2:15:c1:65:ba:c7:1d:b0:97:40:31:14:b5: 56:ea:d8:04:d7:c7:91:db:ae:47:ba:17:8e:ba:86: 02:3a:f8:37:ad:56:40:81:4e:85:40:1a:b2:75:26: 5b:74:9e:f6:15:9b:9e:24:ee:bc:b8:e9:c2:bf:4e: e8:80:90:1c:e0:aa:01:f6:be:c3:60:a0:52:c9:30: 08:a8:11:3b:f0:ce:9a:c1:9a:60:9b:6e:22:8d:67: 48:3a:42:be:96:0a:43:ca:59:28:15:21:44:40:ef: 71:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:41:3A:57:10:60:2F:FC:73:D4:32:E1:A9:3F:9D:5E:37:70:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/148e8362-f163-3455-8efd-ad039e603d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3a:a4:99:9f:79:97:d4:59:d8:f2:a9:82:48:30:31:8e:74: 07:3e:b5:12:6b:87:e3:0e:ad:a9:d0:2e:7a:43:cb:bd:8e:76: 63:24:b0:af:fb:f9:da:c2:01:ec:31:1a:0d:f0:9d:1a:be:93: 70:0d:ec:04:37:55:2f:57:d6:fc:7c:05:4a:13:b6:6e:91:47: 95:9e:dd:79:2f:a7:f9:9e:5f:c8:30:79:42:58:40:c4:5c:d3: 66:1a:aa:ce:4e:8a:9a:fa:ea:38:9f:24:93:46:22:e4:8d:57: 22:ce:cf:d8:13:f7:44:fa:2e:87:ab:01:f0:ec:50:79:ce:6d: c1:47:07:35:7f:5b:51:4a:5a:f8:8e:17:4e:b3:f9:8e:e6:9c: 3d:3e:ac:4a:2f:2d:31:1e:86:ea:89:90:c1:36:2f:ba:38:13: 86:23:48:b7:84:d5:9b:f1:e3:0a:af:77:87:b9:52:24:23:82: 3b:fe:d3:ff:51:3b:f3:3b:93:db:11:af:c8:6f:cc:db:91:5c: 08:49:02:de:50:af:a9:f9:4e:bf:78:e5:4c:8c:1b:96:d1:ed: 5b:2f:b6:3c:23:42:03:d5:d3:0f:45:8f:46:e4:a0:4a:a1:95: 20:12:c3:1b:1e:60:d3:fa:0b:15:88:71:a0:bf:6d:5d:25:61: 9f:95:0d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmZgrZtLvrcKt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YWVjOGFhZTYtNDgwYi00OGQzLWI4ZTMtZmQwOTI1ZGQ5ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi09MgB62Trj9VQMbI6i7Hte9CrI6jO0liS33 dIVhA2dabXoiIfkSNNXEne59mk3uaZDCjMOgaNnPuOvA5XkHf2SDvKGdKo1zcwbV Jv9q+Lnk76bktcUoJuiGFga+Z4nhVB495vHuyEUdefQQOqv+akNi46H1FYtU+7dk 6t+go0Taa/p3oXQu/5CA1g7fpVDe8MdKLod8K6IVwWW6xx2wl0AxFLVW6tgE18eR 265HuheOuoYCOvg3rVZAgU6FQBqydSZbdJ72FZueJO68uOnCv07ogJAc4KoB9r7D YKBSyTAIqBE78M6awZpgm24ijWdIOkK+lgpDylkoFSFEQO9xCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ77QTpXEGAv/HPUMuGpP51eN3AEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvMTQ4ZTgzNjItZjE2My0z NDU1LThlZmQtYWQwMzllNjAzZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJt9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU6pJmfeZfUWdjyqYJIMDGOdAc+tRJrh+MOranQLnpDy72OdmMksK/7 +drCAewxGg3wnRq+k3AN7AQ3VS9X1vx8BUoTtm6RR5We3Xkvp/meX8gweUJYQMRc 02Yaqs5Oipr66jifJJNGIuSNVyLOz9gT90T6LoerAfDsUHnObcFHBzV/W1FKWviO F06z+Y7mnD0+rEovLTEehuqJkME2L7o4E4YjSLeE1Zvx4wqvd4e5UiQjgjv+0/9R O/M7k9sRr8hvzNuRXAhJAt5Qr6n5Tr945UyMG5bR7VsvtjwjQgPV0w9Fj0bkoEqh lSASwxseYNP6CxWIcaC/bV0lYZ+VDWY= -----END CERTIFICATE-----Generated at Mon Jun 16 05:11:02 2025 by rpki-client