$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa File: bb5fb053-0a17-3122-970c-cf4d60448f9d.roa (raw, json) Hash identifier: GA6SEg4nA8H9MuAvAuBTpcRJ3MmZy02Npfxt8RG5cGc= Subject key identifier: B6:D6:83:F4:05:CB:20:0D:D7:B1:8F:E2:83:EA:C9:79:64:9A:F8:64 Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Certificate serial: 010D0C9F432858499AF482D064A9CF52DA228300 Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 23265 IP address blocks: 67.158.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:82:d0:64:a9:cf:52:da:22:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ed34e916-9617-4e4b-a86a-5ea30538d230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:d5:f6:6b:8c:21:3c:d9:65:9c:52:a5:cc: dc:5e:0d:48:71:ee:2f:bb:fe:cf:01:61:a5:49:24: 85:62:63:5d:e8:c5:8f:9e:a2:e0:16:92:b0:dd:af: 6f:d8:fb:c8:ab:0e:01:01:77:fa:b0:46:4b:8d:f8: 7b:d3:8b:e4:50:32:9a:46:db:13:77:0c:17:10:50: 47:9e:a5:da:0d:aa:03:47:4c:92:39:8c:7b:37:fd: 35:1e:75:d8:d8:28:34:5e:4b:ae:23:39:ae:5c:e2: 4e:87:f7:7e:1e:cc:4f:0b:aa:d5:58:a0:a8:34:9a: 45:ec:68:70:93:47:b9:6b:41:2c:9a:d7:ad:8a:04: 8b:2b:5f:85:11:88:a0:54:19:be:e9:91:52:13:a4: 7d:22:7b:e6:41:92:c3:5c:73:bd:0d:b0:d2:df:58: 02:04:2f:e4:ba:26:87:12:b6:ad:02:4c:f8:27:8a: bb:08:61:c9:f0:50:c7:4c:f8:97:15:af:51:7d:82: d2:14:d0:ae:63:39:20:4b:c1:6e:54:3a:8b:9d:45: da:de:ef:6c:11:7e:37:0c:d6:b1:f9:8c:3b:42:3d: 05:63:fb:cd:26:82:e1:f1:31:7d:6d:92:54:06:9a: cc:b4:4f:e1:38:bf:6b:a6:21:a5:d2:d5:13:ae:5f: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D6:83:F4:05:CB:20:0D:D7:B1:8F:E2:83:EA:C9:79:64:9A:F8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl X509v3 Authority Key Identifier: keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer sbgp-ipAddrBlock: critical IPv4: 67.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:71:21:31:3b:83:5c:c0:3a:92:8d:d8:1a:ea:f6:ab:b6:24: e9:a3:e3:7d:33:18:c0:c2:52:de:62:7c:42:d6:10:e0:ed:dc: 52:5e:c1:08:68:10:41:17:ee:07:30:84:0b:d3:02:2b:93:5e: 6a:01:48:3f:40:bf:cf:81:3b:a6:ae:2c:35:76:29:5f:fb:bd: 6b:35:e1:4d:f6:bd:f6:c2:9b:a1:1e:e9:1e:dc:db:55:a8:ba: a0:6f:61:ee:f4:50:25:1e:9e:f3:fa:2e:96:f2:d1:01:c7:d5: 54:f7:2e:c6:db:9a:2f:b2:25:29:eb:c6:6a:7f:c8:ba:bc:6b: ba:5a:2d:16:41:55:c0:9f:c3:e4:2d:75:23:2d:1d:17:4e:20: e9:54:76:e5:a3:1c:4e:5b:b5:b0:b8:ea:42:a5:49:45:10:f1: d1:cc:48:c8:c5:61:4a:4e:7e:f4:83:ea:e5:b9:7c:c9:b7:c7: c3:97:64:10:6c:a3:6e:28:e1:0e:58:b5:68:00:33:8f:b6:8c: 29:5c:2e:f1:93:35:0e:90:70:9c:e8:ed:7b:b3:56:f4:35:a6: 79:3f:b1:f0:fa:b6:29:ef:3c:6a:e2:e5:4d:49:a6:b1:a8:7a: 39:32:a1:17:a0:9f:f2:96:1f:e0:a3:1d:30:2b:04:de:31:f7: 50:60:19:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9ILQZKnPUtoigwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0 MWU5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWQzNGU5MTYtOTYxNy00ZTRiLWE4NmEtNWVhMzA1MzhkMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7LV9muMITzZZZxSpczcXg1Ice4vu/7PAWGl SSSFYmNd6MWPnqLgFpKw3a9v2PvIqw4BAXf6sEZLjfh704vkUDKaRtsTdwwXEFBH nqXaDaoDR0ySOYx7N/01HnXY2Cg0XkuuIzmuXOJOh/d+HsxPC6rVWKCoNJpF7Ghw k0e5a0EsmtetigSLK1+FEYigVBm+6ZFSE6R9InvmQZLDXHO9DbDS31gCBC/kuiaH EratAkz4J4q7CGHJ8FDHTPiXFa9RfYLSFNCuYzkgS8FuVDqLnUXa3u9sEX43DNax +Yw7Qj0FY/vNJoLh8TF9bZJUBprMtE/hOL9rpiGl0tUTrl/B8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbWg/QFyyAN17GP4oPqyXlkmvhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5 ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvYmI1ZmIwNTMtMGExNy0z MTIyLTk3MGMtY2Y0ZDYwNDQ4ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm YmUzYTQxZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ57gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9xITE7g1zAOpKN2Brq9qu2JOmj430zGMDCUt5ifELWEODt3FJewQho EEEX7gcwhAvTAiuTXmoBSD9Av8+BO6auLDV2KV/7vWs14U32vfbCm6Ee6R7c21Wo uqBvYe70UCUenvP6Lpby0QHH1VT3Lsbbmi+yJSnrxmp/yLq8a7paLRZBVcCfw+Qt dSMtHRdOIOlUduWjHE5btbC46kKlSUUQ8dHMSMjFYUpOfvSD6uW5fMm3x8OXZBBs o24o4Q5YtWgAM4+2jClcLvGTNQ6QcJzo7XuzVvQ1pnk/sfD6tinvPGri5U1JprGo ejkyoRegn/KWH+CjHTArBN4x91BgGV0= -----END CERTIFICATE-----Generated at Mon Apr 28 18:43:29 2025 by rpki-client