$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa File: 87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa (raw, json) Hash identifier: lnW4YtjHQaduMZ7ZcoKRg7MuG5xV6so4Gwt/sJ9iEMg= Subject key identifier: CF:4D:17:22:18:F6:37:AE:8A:16:89:FF:2B:53:A5:8B:BF:32:17:5C Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584A2C20144A7A8EC42B0D2FAC00 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 36407 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:14:4a:7a:8e:c4:2b:0d:2f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=03a6ad33-f50d-465e-a2da-05dc245fedcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:f9:9f:ae:7b:a2:4f:e7:1c:c7:8b:45:ee: c7:c7:12:c4:86:de:7d:6a:cf:73:34:d1:af:50:fe: d1:42:13:d1:bf:fa:ed:4c:2b:40:f9:ff:39:18:40: 2e:c1:c5:e9:26:79:e1:39:9c:08:b2:6a:1c:32:c0: 57:40:5c:8b:c9:ea:69:03:12:cc:c1:18:d8:0d:e8: d0:3f:a6:b9:7a:04:e3:74:59:c3:1e:25:03:0a:2e: 23:68:b5:a4:3f:a0:e3:c5:4a:b6:bd:08:fa:56:ac: 6f:48:d0:69:bb:dc:75:bf:63:b5:23:c8:4e:92:ff: b3:cb:90:8a:53:50:55:39:6f:87:cd:69:58:23:fc: 7c:57:13:e6:ac:94:25:ea:0a:26:30:2e:28:85:18: 96:da:83:5e:a4:0d:de:79:f9:a7:16:b9:52:1a:de: 80:7b:ae:1b:19:b4:9c:05:7d:9c:2d:8b:c1:8f:b3: bf:c3:b6:3a:f9:be:17:62:b9:14:3a:41:e9:4e:e0: a3:28:8c:a1:47:16:9e:3d:58:09:08:1f:c8:f5:da: 0b:f7:54:c4:d6:2e:41:d0:32:42:b7:35:ee:58:28: 74:63:95:4f:2e:b5:6b:71:48:1b:f9:56:64:a4:2b: ab:39:5b:f3:43:96:bb:5c:bb:54:68:b0:a9:5b:2c: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4D:17:22:18:F6:37:AE:8A:16:89:FF:2B:53:A5:8B:BF:32:17:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7c:6e:18:30:ad:2a:a4:00:0c:bf:3c:91:ba:ed:e5:0f:cd: 2f:c5:56:f2:01:af:cf:03:05:18:92:fb:fc:8b:6b:b4:55:7d: 62:de:1d:bc:af:4e:c5:57:77:b7:ca:43:e1:de:f8:da:79:53: ef:17:43:f9:a3:ee:93:f8:af:87:f0:16:a2:0d:42:ae:5e:33: e9:2e:16:cf:83:e9:80:a4:2e:4e:78:e9:0a:3e:0a:9a:95:10: 5d:0d:b8:dd:b9:31:ae:77:99:eb:72:db:85:69:0a:a8:d3:c5: 3e:fe:c6:5e:fc:d7:b9:3e:c3:5b:0c:18:4c:f8:70:4a:fb:65: a2:6b:c5:d6:b2:fd:f5:91:c6:e2:43:57:07:96:e5:95:1b:4e: 5f:f5:3a:82:29:8f:07:da:21:80:03:3d:a1:e0:22:c9:b4:35: b1:11:33:50:0f:b5:ba:12:6d:2c:47:57:ba:b8:6b:2a:5d:b6: 48:0e:ee:45:a6:01:8e:e2:ed:2b:51:11:be:3f:6f:c4:ff:57: 43:7a:86:66:85:7c:54:54:25:3f:20:38:47:f7:c5:4d:85:bd: 26:8d:3e:bb:2f:a7:58:ee:24:9f:8b:c2:b6:e2:69:3f:21:ea: cb:31:8e:b0:e3:5b:bc:a4:f6:30:88:29:f5:cd:e4:1e:a8:49: 32:d2:50:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBRKeo7EKw0vrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MDNhNmFkMzMtZjUwZC00NjVlLWEyZGEtMDVkYzI0NWZlZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ35n657ok/nHMeLRe7HxxLEht59as9zNNGv UP7RQhPRv/rtTCtA+f85GEAuwcXpJnnhOZwIsmocMsBXQFyLyeppAxLMwRjYDejQ P6a5egTjdFnDHiUDCi4jaLWkP6DjxUq2vQj6VqxvSNBpu9x1v2O1I8hOkv+zy5CK U1BVOW+HzWlYI/x8VxPmrJQl6gomMC4ohRiW2oNepA3eefmnFrlSGt6Ae64bGbSc BX2cLYvBj7O/w7Y6+b4XYrkUOkHpTuCjKIyhRxaePVgJCB/I9doL91TE1i5B0DJC tzXuWCh0Y5VPLrVrcUgb+VZkpCurOVvzQ5a7XLtUaLCpWyyBJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9NFyIY9jeuihaJ/ytTpYu/MhdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvODdhNWY1NzEtM2NmYS0z NGM2LThlYzItMTEwZWU3MTQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR8bhgwrSqkAAy/PJG67eUPzS/FVvIBr88DBRiS+/yLa7RVfWLeHbyv TsVXd7fKQ+He+Np5U+8XQ/mj7pP4r4fwFqINQq5eM+kuFs+D6YCkLk546Qo+CpqV EF0NuN25Ma53mety24VpCqjTxT7+xl7817k+w1sMGEz4cEr7ZaJrxday/fWRxuJD VweW5ZUbTl/1OoIpjwfaIYADPaHgIsm0NbERM1APtboSbSxHV7q4aypdtkgO7kWm AY7i7StREb4/b8T/V0N6hmaFfFRUJT8gOEf3xU2FvSaNPrsvp1juJJ+LwrbiaT8h 6ssxjrDjW7yk9jCIKfXN5B6oSTLSUA8= -----END CERTIFICATE-----Generated at Mon Jun 16 12:22:20 2025 by rpki-client