$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/98437b71-3c6d-3541-b04e-ea56100bbdc5.roa File: 98437b71-3c6d-3541-b04e-ea56100bbdc5.roa (raw, json) Hash identifier: 6c2XZdHvMSO1bfLlYh1m7Jvu01wKHn5cyZYw7dZXOLI= Subject key identifier: 42:87:59:CC:7A:C4:26:B8:6A:A8:9E:14:F8:32:56:06:51:10:D5:F8 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584A023FC62EE4C0D870BCFC0280 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/98437b71-3c6d-3541-b04e-ea56100bbdc5.roa Signing time: Thu 29 May 2025 01:00:50 +0000 ROA not before: Thu 29 May 2025 01:00:50 +0000 ROA not after: Wed 27 Aug 2025 01:00:50 +0000 asID: 32710 IP address blocks: 164.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:3f:c6:2e:e4:c0:d8:70:bc:fc:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: May 29 01:00:50 2025 GMT Not After : Aug 27 01:00:50 2025 GMT Subject: CN=dfc9c671-1b0d-40fc-abb3-c009b7da7e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:88:ee:82:c2:b2:c1:1a:ec:c4:de:dc:77: c8:bb:cc:83:57:f2:2c:59:b8:23:6a:32:f5:3d:a3: 82:49:e8:f1:17:55:5d:fa:ac:10:ce:66:68:3c:a9: 09:92:9d:20:b9:20:c6:33:5e:db:3c:72:ba:41:55: 78:eb:d6:37:33:43:a7:4e:47:ef:d0:14:06:60:9d: 5d:9e:bd:32:e7:61:b2:23:df:ee:8c:36:04:1b:1b: e3:36:ed:11:4a:bd:29:72:29:94:01:25:97:86:9d: 48:40:2d:9b:cc:66:10:a3:fc:41:54:3d:08:79:7e: 9d:1a:81:43:1b:e8:cc:c3:8e:84:f4:a4:6b:bf:77: 67:a6:03:7d:e1:5f:7f:a6:fd:01:f9:6c:ab:cf:42: 07:f1:91:ba:0c:33:06:0b:a7:11:26:93:f0:85:16: 85:00:7d:79:75:9a:93:bf:77:34:69:45:2b:c1:e2: ff:73:e2:25:e9:1c:cb:06:49:84:4e:92:b1:98:2a: 82:98:4d:53:5e:1a:58:a7:43:bd:3a:38:15:42:77: f8:c8:61:69:2c:5a:2c:a0:cc:48:21:0c:5a:a8:fd: 0e:a8:4e:e7:93:21:49:28:cd:95:b7:9d:77:9f:b3: 96:1f:5c:b2:b0:fb:e3:ec:96:50:7c:fe:28:34:91: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:87:59:CC:7A:C4:26:B8:6A:A8:9E:14:F8:32:56:06:51:10:D5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/98437b71-3c6d-3541-b04e-ea56100bbdc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:05:09:92:bc:e2:52:41:7b:95:e9:e1:bd:10:9f:29:e5:e5: 03:c1:3a:51:a6:49:52:83:4b:a3:9f:fc:cd:83:54:d2:57:83: 2d:13:1b:39:be:0b:6d:9a:83:f1:34:59:f5:96:f4:23:ab:34: 46:55:19:12:00:3e:86:2c:c4:8f:e5:73:d5:a6:d8:c0:94:62: eb:50:43:92:d3:f2:40:14:62:b3:8e:c0:b7:f4:55:93:a5:d2: 0b:d0:ee:84:99:53:7f:90:39:4c:07:10:1b:17:cd:5b:b8:94: be:3b:db:99:24:c6:05:e1:16:49:2b:4c:dd:df:48:cc:b5:74: 5a:4b:ba:0f:10:e9:2d:b1:cc:69:56:05:86:85:c9:5a:03:04: f0:8b:01:10:97:62:5a:48:74:de:e1:8c:66:a5:0b:57:d9:63: 6f:87:82:3a:23:e6:7b:b6:68:d7:42:cd:0a:e9:55:c1:5e:b9: 9c:ee:f0:25:fc:7d:30:05:05:37:04:af:99:ea:c1:8c:83:46: d3:4b:79:bc:f4:64:6f:9b:dd:c2:fd:38:6f:b6:57:53:25:65: 15:e3:17:7c:e6:11:92:d6:25:52:ca:26:58:2b:d3:e8:1c:c6: 02:73:7d:71:a0:2f:f6:b5:8a:91:03:3f:75:5a:c3:9f:d7:e5: 27:7f:c7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCP8Yu5MDYcLz8AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZGZjOWM2NzEtMWIwZC00MGZjLWFiYjMtYzAwOWI3ZGE3ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEaI7oLCssEa7MTe3HfIu8yDV/IsWbgjajL1 PaOCSejxF1Vd+qwQzmZoPKkJkp0guSDGM17bPHK6QVV469Y3M0OnTkfv0BQGYJ1d nr0y52GyI9/ujDYEGxvjNu0RSr0pcimUASWXhp1IQC2bzGYQo/xBVD0IeX6dGoFD G+jMw46E9KRrv3dnpgN94V9/pv0B+Wyrz0IH8ZG6DDMGC6cRJpPwhRaFAH15dZqT v3c0aUUrweL/c+Il6RzLBkmETpKxmCqCmE1TXhpYp0O9OjgVQnf4yGFpLFosoMxI IQxaqP0OqE7nkyFJKM2Vt513n7OWH1yysPvj7JZQfP4oNJGPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKHWcx6xCa4aqieFPgyVgZRENX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvOTg0MzdiNzEtM2M2ZC0z NTQxLWIwNGUtZWE1NjEwMGJiZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIFCZK84lJBe5Xp4b0Qnynl5QPBOlGmSVKDS6Of/M2DVNJXgy0TGzm+ C22ag/E0WfWW9COrNEZVGRIAPoYsxI/lc9Wm2MCUYutQQ5LT8kAUYrOOwLf0VZOl 0gvQ7oSZU3+QOUwHEBsXzVu4lL4725kkxgXhFkkrTN3fSMy1dFpLug8Q6S2xzGlW BYaFyVoDBPCLARCXYlpIdN7hjGalC1fZY2+Hgjoj5nu2aNdCzQrpVcFeuZzu8CX8 fTAFBTcEr5nqwYyDRtNLebz0ZG+b3cL9OG+2V1MlZRXjF3zmEZLWJVLKJlgr0+gc xgJzfXGgL/a1ipEDP3Vaw5/X5Sd/xyM= -----END CERTIFICATE-----Generated at Sun Jun 15 05:13:20 2025 by rpki-client