$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/9e91c8f4-a512-3a0f-b09d-2da3568fbd57.roa File: 9e91c8f4-a512-3a0f-b09d-2da3568fbd57.roa (raw, json) Hash identifier: rh7eEsIJL0h1CfMDFaJsMLiQsuhxnCcGWY9SBJj3n0M= Subject key identifier: A2:DF:D5:9C:A0:9C:F8:44:AE:B5:3C:E2:90:5A:F4:D2:A3:96:1B:CB Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849E654F09589B7B7C97BA97080 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/9e91c8f4-a512-3a0f-b09d-2da3568fbd57.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 12076 IP address blocks: 151.207.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:f0:95:89:b7:b7:c9:7b:a9:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=856ef1d0-b09a-4cfa-b4ec-1dd7d8c041c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:91:e7:ff:5f:45:d4:01:e3:a0:45:f6:6a:2d: 8e:2d:23:20:fe:5d:8e:62:44:ba:db:0e:bc:5e:19: 7f:a3:6a:14:58:e7:23:bf:49:9e:ed:af:d8:15:2e: dc:bb:32:88:56:86:30:4e:e7:e6:e9:43:d6:52:09: b5:87:f7:63:64:78:c1:92:69:04:8e:2c:f8:e5:fd: b0:f0:b9:3e:74:29:4b:48:fa:31:73:81:b6:c4:87: 40:73:1e:d5:7d:96:a0:af:ea:d7:82:78:08:4b:f5: fb:a8:d6:a1:4b:44:19:25:a1:b7:98:44:51:65:1c: 61:5c:4c:c3:b8:4d:ed:92:34:69:6d:3a:6a:df:ea: 33:8c:8b:fc:ff:59:dc:fd:6d:e0:6f:80:5d:d5:c5: 8a:fc:d7:8e:98:1e:05:ed:29:01:43:a8:53:f0:fb: fd:35:32:ad:78:25:04:03:e0:fc:ef:d3:34:4d:06: 18:b7:57:aa:7a:a0:88:57:b4:ba:97:03:8a:0d:1f: d9:52:e0:5a:bd:ed:d8:e1:fd:fc:a0:c8:7c:9b:86: d6:94:7f:93:a0:87:73:3b:70:81:32:ed:04:7a:6f: 26:9d:86:46:fe:d5:f1:d0:f6:66:20:ba:9c:45:c3: 92:a6:06:13:65:bd:73:53:76:56:fa:d7:5b:40:56: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DF:D5:9C:A0:9C:F8:44:AE:B5:3C:E2:90:5A:F4:D2:A3:96:1B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/9e91c8f4-a512-3a0f-b09d-2da3568fbd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:01:28:c4:38:bb:1d:c4:a9:2e:4b:21:0a:a9:a6:97:39:a3: 27:d2:1d:a7:34:d8:b8:76:c6:40:6c:10:ac:d2:c6:aa:6e:d8: bd:bb:59:e6:af:76:60:28:90:02:b8:af:50:a7:d6:2e:1c:52: a2:9c:58:39:d2:ff:25:ae:31:d3:71:1c:2a:ef:1b:e2:2b:be: 90:d2:d0:be:3b:a4:35:cb:f2:f9:7d:5d:38:4b:35:2f:a1:ce: d4:a5:00:fa:c9:86:ef:73:e0:cf:c7:29:cb:bb:45:5d:2f:a2: 5a:59:88:94:97:f2:10:e5:1f:44:6f:6f:36:d8:f1:29:e3:de: 16:62:ed:73:2b:c7:a6:cf:00:05:83:3a:b5:ed:1e:7d:17:ba: e0:ed:ea:5d:3c:e5:f7:bd:f2:73:7e:38:03:b2:5f:a4:c4:c5: df:51:4c:77:ac:be:6e:b4:ff:af:04:c3:3b:a9:ae:29:15:3a: b1:53:35:0b:a4:f9:af:ea:ae:16:69:13:5e:29:b0:81:d8:b8: a3:97:19:18:3a:8e:7b:1b:8f:40:ab:04:99:e6:0f:c4:ef:5c: 72:51:05:ab:6b:a1:54:88:9a:1b:3e:ef:2e:32:dc:91:f2:ec: 7e:1e:96:2c:d4:93:46:af:30:4b:43:de:90:40:ac:ee:e3:59: 9f:0f:79:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPCVibe3yXupcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ODU2ZWYxZDAtYjA5YS00Y2ZhLWI0ZWMtMWRkN2Q4YzA0MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJHn/19F1AHjoEX2ai2OLSMg/l2OYkS62w68 Xhl/o2oUWOcjv0me7a/YFS7cuzKIVoYwTufm6UPWUgm1h/djZHjBkmkEjiz45f2w 8Lk+dClLSPoxc4G2xIdAcx7VfZagr+rXgngIS/X7qNahS0QZJaG3mERRZRxhXEzD uE3tkjRpbTpq3+ozjIv8/1nc/W3gb4Bd1cWK/NeOmB4F7SkBQ6hT8Pv9NTKteCUE A+D879M0TQYYt1eqeqCIV7S6lwOKDR/ZUuBave3Y4f38oMh8m4bWlH+ToIdzO3CB Mu0Eem8mnYZG/tXx0PZmILqcRcOSpgYTZb1zU3ZW+tdbQFaO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLf1ZygnPhErrU84pBa9NKjlhvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvOWU5MWM4ZjQtYTUxMi0z YTBmLWIwOWQtMmRhMzU2OGZiZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl88oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4BKMQ4ux3EqS5LIQqpppc5oyfSHac02Lh2xkBsEKzSxqpu2L27Weav dmAokAK4r1Cn1i4cUqKcWDnS/yWuMdNxHCrvG+IrvpDS0L47pDXL8vl9XThLNS+h ztSlAPrJhu9z4M/HKcu7RV0volpZiJSX8hDlH0RvbzbY8Snj3hZi7XMrx6bPAAWD OrXtHn0XuuDt6l085fe98nN+OAOyX6TExd9RTHesvm60/68EwzuprikVOrFTNQuk +a/qrhZpE14psIHYuKOXGRg6jnsbj0CrBJnmD8TvXHJRBatroVSImhs+7y4y3JHy 7H4elizUk0avMEtD3pBArO7jWZ8PedA= -----END CERTIFICATE-----Generated at Mon Jun 16 10:53:42 2025 by rpki-client