$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json) Hash identifier: Q+PxaB39Vs0IqOAke+c/1LvBbcHj9tWSaumsmqlaR8s= Subject key identifier: F0:49:C2:9A:E9:E7:69:EC:A5:6D:EC:A9:F6:93:A5:83:90:99:85:EF Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F43285849FE0FFEB1D4B613C7DD2396E0 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 59253 IP address blocks: 167.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fe:b1:d4:b6:13:c7:dd:23:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=e26da972-ff61-40b5-a187-a2675fdc0cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:dd:d0:13:b7:16:60:94:ba:4b:50:bf:b1: f8:74:77:6f:4e:a2:81:94:47:64:7c:5d:80:18:ab: 3c:05:25:8e:7b:8f:be:83:96:6d:e2:36:91:2a:1d: 5c:c8:14:8c:b3:01:8b:8c:12:2c:34:d7:cd:f1:6d: bd:a7:be:d8:a4:3c:12:47:42:bf:af:1f:72:5e:08: 84:c3:5a:57:c4:91:33:a3:e5:67:87:3c:d4:29:b5: 3f:3d:93:83:ff:f4:68:3b:9e:55:f1:bf:bf:41:3a: 10:b6:10:a3:46:5f:2d:27:12:fa:54:07:53:a3:25: 64:12:08:e8:09:13:d9:34:ae:0e:b2:66:d2:a1:42: fb:e7:ed:91:e4:8d:00:9c:3c:1d:08:ec:31:88:42: 10:1c:6b:f3:94:c6:29:06:30:7a:c7:c9:be:f8:7f: f7:76:2c:95:d0:13:2d:aa:54:2e:0b:bc:66:f7:3a: 60:a0:8b:7c:9a:b8:5e:37:0e:a4:32:af:c5:c5:8e: 32:0a:40:17:ce:97:a7:78:76:27:c1:31:64:94:fc: aa:c8:89:10:85:85:e4:d4:4c:a3:28:a8:47:eb:dc: 2d:44:96:b5:f9:3a:65:8b:9e:36:3b:9d:29:c1:da: c4:1c:da:23:64:07:d2:a7:53:3b:06:d4:9c:6b:73: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:49:C2:9A:E9:E7:69:EC:A5:6D:EC:A9:F6:93:A5:83:90:99:85:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 167.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:34:0a:db:ff:90:e0:c0:b7:82:cc:d7:f2:45:67:0f:4e:37: 17:15:30:38:47:c6:10:1a:84:4c:21:d6:1e:59:f5:1d:0e:0d: 46:05:2a:8d:c4:29:89:55:7b:a6:3e:f0:c1:75:d4:06:69:48: c6:10:49:6a:9f:6b:b2:59:5d:42:9d:b9:1b:91:fe:3e:04:98: b2:fc:b7:eb:e0:94:fb:05:9e:ff:18:6d:40:89:a3:38:ff:d8: bf:9c:db:05:d9:61:98:fb:60:64:41:f1:a9:3f:b1:ff:34:4e: 83:f7:b9:29:5b:7c:34:e2:2d:67:bc:ce:c6:76:fb:0c:a0:63: bf:51:a1:5e:6d:e7:67:f6:7f:17:f4:65:c0:33:b7:8c:ce:11: 30:e6:46:c6:2b:da:f0:73:ee:f9:06:f7:2f:6f:8b:41:ad:66: 28:0c:1a:1c:1a:fb:0d:c3:2b:3c:d0:c1:74:67:42:9f:4d:bd: 16:e9:1c:98:3f:ba:f5:39:be:81:d1:f1:43:dc:00:ee:d2:91: 09:eb:7c:1a:6f:0e:7d:7c:fb:6b:46:9c:7c:fc:57:f2:de:46: bc:07:1f:9c:fc:0e:e3:5c:5c:59:55:26:d1:f5:48:e3:76:c8: 73:e1:87:79:a7:2d:7e:fb:c7:f5:1c:e8:3d:b1:72:28:32:8f: a9:99:50:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/6x1LYTx90jluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTI2ZGE5NzItZmY2MS00MGI1LWExODctYTI2NzVmZGMwY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Pd0BO3FmCUuktQv7H4dHdvTqKBlEdkfF2A GKs8BSWOe4++g5Zt4jaRKh1cyBSMswGLjBIsNNfN8W29p77YpDwSR0K/rx9yXgiE w1pXxJEzo+VnhzzUKbU/PZOD//RoO55V8b+/QToQthCjRl8tJxL6VAdToyVkEgjo CRPZNK4OsmbSoUL75+2R5I0AnDwdCOwxiEIQHGvzlMYpBjB6x8m++H/3diyV0BMt qlQuC7xm9zpgoIt8mrheNw6kMq/FxY4yCkAXzpeneHYnwTFklPyqyIkQhYXk1Eyj KKhH69wtRJa1+Tpli542O50pwdrEHNojZAfSp1M7BtSca3OInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBJwprp52nspW3sqfaTpYOQmYXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY0Ctv/kODAt4LM1/JFZw9ONxcVMDhHxhAahEwh1h5Z9R0ODUYFKo3E KYlVe6Y+8MF11AZpSMYQSWqfa7JZXUKduRuR/j4EmLL8t+vglPsFnv8YbUCJozj/ 2L+c2wXZYZj7YGRB8ak/sf80ToP3uSlbfDTiLWe8zsZ2+wygY79RoV5t52f2fxf0 ZcAzt4zOETDmRsYr2vBz7vkG9y9vi0GtZigMGhwa+w3DKzzQwXRnQp9NvRbpHJg/ uvU5voHR8UPcAO7SkQnrfBpvDn18+2tGnHz8V/LeRrwHH5z8DuNcXFlVJtH1SON2 yHPhh3mnLX77x/Uc6D2xcigyj6mZUIY= -----END CERTIFICATE-----Generated at Tue Jun 17 15:04:13 2025 by rpki-client