$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa File: d2f2610a-a62c-3b03-99f9-138214533fcd.roa (raw, json) Hash identifier: SKWiRBcsmIcBhpuUkfFpgt2VmNon0Wh8qpo9jryMCaU= Subject key identifier: 34:3D:62:36:20:24:7C:7F:95:02:69:38:F0:D7:51:E5:4D:4D:1D:05 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F43285849CBCF9D3C6608A983B63B3F00 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 397666 IP address blocks: 167.253.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9d:3c:66:08:a9:83:b6:3b:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=1d157f68-da48-4826-b732-c7636d0383f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:ce:3d:6f:37:e1:d6:68:7d:ad:7a:51:e4: c6:9e:95:76:bd:32:07:bb:c3:8b:f6:5a:54:1f:0b: 93:d7:49:ba:53:c0:ce:70:a9:93:5b:c7:88:58:83: b2:11:96:07:99:7a:07:ab:7d:18:18:94:26:69:db: 22:d2:9d:f7:ad:df:36:b2:c0:3f:ad:7c:05:94:87: e6:ac:11:cf:ec:8d:c5:4e:6f:fc:0b:ce:3d:07:22: 8b:2d:a6:10:da:6a:65:8a:cb:7c:0c:6c:d3:12:54: 18:95:44:cf:26:b9:6e:45:ba:ad:cf:b5:15:2f:d1: 88:c2:c0:f6:14:bd:0f:19:a4:74:3a:75:bd:0f:27: 00:df:3b:f4:39:a6:a9:f4:3e:76:e4:f3:72:c9:37: 14:b9:41:e7:15:b9:ba:1d:99:a8:ec:25:7b:63:c1: 37:c2:56:b5:46:34:3d:b1:24:31:c9:56:f7:d7:11: 98:cb:eb:28:0e:e6:55:1b:65:88:32:de:88:54:f3: 47:9e:5f:5a:90:2c:45:e5:25:e1:1a:40:86:2b:92: 89:a9:b3:18:a2:10:48:04:53:a8:10:10:79:93:81: 22:42:71:9e:a4:aa:de:14:1b:0d:61:9a:86:85:c9: 92:a5:9d:b9:57:b7:4e:32:4d:79:7d:5c:e8:80:52: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3D:62:36:20:24:7C:7F:95:02:69:38:F0:D7:51:E5:4D:4D:1D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:1b:b7:da:14:22:c9:b9:97:dc:65:5d:26:ea:fe:9e:a5:9d: ea:8d:bd:4b:2c:1a:fc:97:a5:4a:60:bf:a2:0b:c3:57:8d:ff: bb:71:e8:0e:14:01:20:65:7a:c8:a9:0b:ca:e3:28:29:d2:fe: 15:f6:5b:8b:85:06:82:ca:26:ed:3c:83:7e:ec:08:7f:92:27: 84:df:d0:eb:1d:79:e0:9f:0f:1f:4f:77:df:0d:5a:e6:2a:c8: b7:21:89:06:ac:3d:c9:a8:0d:dd:a4:95:c9:66:fa:e8:7a:cb: 90:e7:33:23:e7:8a:e9:17:9b:f2:c4:e3:8b:dc:cd:df:52:61: 96:e4:3e:d4:43:06:76:51:74:34:c1:55:19:e3:41:66:b7:7a: d7:80:47:c4:47:78:a0:dd:7a:24:0c:2d:f2:92:01:65:24:ca: 93:21:44:07:5c:0c:3f:02:05:b2:04:03:42:80:9f:11:ec:b7: 6c:04:85:a2:e6:f8:d6:c4:2f:3b:d3:1a:b4:d4:81:54:a8:2b: 7a:14:73:65:ab:dd:03:94:d2:ff:61:70:27:1a:e0:6c:60:ec: 14:04:a2:85:5d:4b:f0:2b:00:2b:93:3a:39:9e:d0:75:4d:0a: 99:87:ef:9a:ba:dc:68:1c:1f:e6:3b:e9:f9:12:ae:07:8f:ae: da:af:57:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz508Zgipg7Y7PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MWQxNTdmNjgtZGE0OC00ODI2LWI3MzItYzc2MzZkMDM4M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsDOPW834dZofa16UeTGnpV2vTIHu8OL9lpU HwuT10m6U8DOcKmTW8eIWIOyEZYHmXoHq30YGJQmadsi0p33rd82ssA/rXwFlIfm rBHP7I3FTm/8C849ByKLLaYQ2mplist8DGzTElQYlUTPJrluRbqtz7UVL9GIwsD2 FL0PGaR0OnW9DycA3zv0Oaap9D525PNyyTcUuUHnFbm6HZmo7CV7Y8E3wla1RjQ9 sSQxyVb31xGYy+soDuZVG2WIMt6IVPNHnl9akCxF5SXhGkCGK5KJqbMYohBIBFOo EBB5k4EiQnGepKreFBsNYZqGhcmSpZ25V7dOMk15fVzogFJ6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ9YjYgJHx/lQJpOPDXUeVNTR0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDJmMjYxMGEtYTYyYy0z YjAzLTk5ZjktMTM4MjE0NTMzZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEbt9oUIsm5l9xlXSbq/p6lneqNvUssGvyXpUpgv6ILw1eN/7tx6A4U ASBlesipC8rjKCnS/hX2W4uFBoLKJu08g37sCH+SJ4Tf0OsdeeCfDx9Pd98NWuYq yLchiQasPcmoDd2klclm+uh6y5DnMyPniukXm/LE44vczd9SYZbkPtRDBnZRdDTB VRnjQWa3eteAR8RHeKDdeiQMLfKSAWUkypMhRAdcDD8CBbIEA0KAnxHst2wEhaLm +NbELzvTGrTUgVSoK3oUc2Wr3QOU0v9hcCca4Gxg7BQEooVdS/ArACuTOjme0HVN CpmH75q63GgcH+Y76fkSrgePrtqvV2Y= -----END CERTIFICATE-----Generated at Wed Jun 18 07:19:38 2025 by rpki-client