$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa File: dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa (raw, json) Hash identifier: hRJdwMgMGBsJ8UL/sO6XoNXAmyXY4u+wqqWbGJ5AlNk= Subject key identifier: DE:19:55:BE:48:03:07:8D:81:22:40:96:AA:6E:F8:72:1A:59:24:36 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849E654F0839C31F7BB9EB65AE0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 5744 IP address blocks: 151.207.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:f0:83:9c:31:f7:bb:9e:b6:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=10e3e715-e7f7-4a4c-8c58-da17ac272b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:f8:84:c2:09:52:3f:9a:fe:bd:03:9c:da: f8:37:c6:84:65:61:e7:8e:8a:0b:36:7f:2b:67:21: c0:54:e3:d6:15:ef:fb:37:04:50:90:8b:8e:76:e4: 82:96:9f:d2:06:f7:f6:f1:5c:ea:8a:1e:8c:93:15: 76:3d:80:12:9d:1d:01:c1:19:7e:64:52:b8:2c:ac: e9:52:94:90:6a:b5:c0:5b:c9:fd:f6:dc:08:a3:94: bc:9e:37:51:21:52:85:5c:d2:9f:72:07:96:6a:96: 3e:99:39:01:fe:66:ca:82:6c:a0:19:e4:fc:7f:ce: 7b:7e:82:d2:2d:e2:1a:65:40:96:39:67:6a:78:91: 46:d1:1e:df:93:f3:8e:31:f3:c3:23:ee:75:69:23: 5b:f5:78:b6:83:dc:a7:e0:62:f0:8a:21:b8:69:d5: 05:ee:29:01:37:69:fc:42:78:e2:03:f8:24:c6:f5: 31:59:9d:ce:9c:b6:b0:fb:c9:cf:3f:67:88:dc:d7: 19:64:7a:af:59:3d:4d:ad:08:92:50:83:4b:d4:fe: a7:45:8a:ae:81:17:ac:73:9a:54:a3:08:35:23:4f: d2:28:4b:9c:3b:88:86:28:b9:47:14:0d:d6:e9:0b: 9c:8a:77:0a:f3:29:5f:35:95:6d:cf:e4:b4:09:e2: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:55:BE:48:03:07:8D:81:22:40:96:AA:6E:F8:72:1A:59:24:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5d:ba:e3:3a:20:73:15:cf:81:8f:d6:29:f1:8a:9f:51:20: f5:2b:14:30:9b:fb:99:bd:34:e7:f5:a4:a0:31:ff:45:7d:4d: ed:9c:d7:0a:8e:9c:af:45:0c:9b:7d:c1:4e:c2:3e:f4:13:eb: cf:bf:f8:21:4b:98:37:63:59:74:0c:df:16:85:c1:1f:d0:8a: ae:28:32:73:df:78:4e:fa:95:67:da:5e:f7:05:cc:f4:54:db: 21:94:8a:e7:75:e5:97:e9:07:6e:20:b4:84:c1:45:68:3d:b2: 55:59:d0:6e:7a:fc:ba:f0:4d:5a:d5:f5:32:4b:04:a1:6c:0f: c9:0a:1a:62:6e:c2:69:1e:7a:15:78:a1:51:e9:2d:5f:a8:28: b1:19:92:24:1a:95:c4:97:37:98:c0:c2:ee:75:4f:12:fc:5a: 72:96:f3:cd:fb:55:4a:d8:69:d3:d3:cb:85:1d:3d:d3:b6:6e: ef:85:43:68:87:ba:bd:ab:b1:97:ad:99:9e:43:af:de:21:b6: f2:93:7d:ab:18:99:64:0b:6c:16:ab:44:8e:3e:10:49:9a:58: 88:6a:dd:ee:a0:c2:ca:c1:2d:0d:83:3b:5a:07:b1:5f:17:db: e6:95:32:68:c4:0c:3a:b1:d2:4c:0c:75:0e:0f:1b:5c:79:ea: 38:44:1a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPCDnDH3u562WuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MTBlM2U3MTUtZTdmNy00YTRjLThjNTgtZGExN2FjMjcyYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyH4hMIJUj+a/r0DnNr4N8aEZWHnjooLNn8r ZyHAVOPWFe/7NwRQkIuOduSClp/SBvf28Vzqih6MkxV2PYASnR0BwRl+ZFK4LKzp UpSQarXAW8n99twIo5S8njdRIVKFXNKfcgeWapY+mTkB/mbKgmygGeT8f857foLS LeIaZUCWOWdqeJFG0R7fk/OOMfPDI+51aSNb9Xi2g9yn4GLwiiG4adUF7ikBN2n8 QnjiA/gkxvUxWZ3OnLaw+8nPP2eI3NcZZHqvWT1NrQiSUINL1P6nRYqugResc5pU owg1I0/SKEucO4iGKLlHFA3W6QucincK8ylfNZVtz+S0CeLhqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4ZVb5IAweNgSJAlqpu+HIaWSQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQyM2EyOTctOTA5MC0z YjJkLTkzMTQtMWVjMzJmY2FmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRduuM6IHMVz4GP1inxip9RIPUrFDCb+5m9NOf1pKAx/0V9Te2c1wqO nK9FDJt9wU7CPvQT68+/+CFLmDdjWXQM3xaFwR/Qiq4oMnPfeE76lWfaXvcFzPRU 2yGUiud15ZfpB24gtITBRWg9slVZ0G56/LrwTVrV9TJLBKFsD8kKGmJuwmkeehV4 oVHpLV+oKLEZkiQalcSXN5jAwu51TxL8WnKW8837VUrYadPTy4UdPdO2bu+FQ2iH ur2rsZetmZ5Dr94htvKTfasYmWQLbBarRI4+EEmaWIhq3e6gwsrBLQ2DO1oHsV8X 2+aVMmjEDDqx0kwMdQ4PG1x56jhEGm8= -----END CERTIFICATE-----Generated at Tue Jun 17 05:29:20 2025 by rpki-client