$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa File: 8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa (raw, json) Hash identifier: ppkr/NQCDiDX59nl73Gz9PepMzfvQU5k2xWhhAwUqKE= Subject key identifier: 44:A5:53:9F:F1:34:CC:F6:D6:3F:97:A1:EE:3E:C2:5A:43:30:31:0B Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F4328584A90A0C2A143E8519FDEFB9620 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 23393 IP address blocks: 199.167.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c2:a1:43:e8:51:9f:de:fb:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f89d8f69-44b5-4cfa-9371-77b8a32b92a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:25:e5:76:42:c6:bd:60:37:7b:84:e5:2b: d4:de:22:87:58:06:b8:e1:fe:0f:a2:49:df:9f:6c: 15:e2:79:33:6a:6e:e2:e6:1f:d4:04:af:2a:16:f2: 46:81:af:7a:f5:99:18:39:9f:29:c1:e1:c5:50:f1: 3d:79:00:35:02:dd:a0:c3:f5:47:d8:7c:ff:60:02: b6:63:09:18:70:48:6b:22:42:25:11:7d:cb:f5:a3: a8:32:98:40:e2:21:29:2f:b8:21:2e:41:79:ef:22: 27:93:7d:d7:5d:dc:bd:f6:f3:98:30:ab:83:d5:30: b3:6c:1a:2a:d5:e5:4d:7e:a2:a8:be:3b:b9:d0:cd: 1e:9b:9a:5c:60:4f:c6:c5:54:fe:de:a6:f5:fc:2d: db:0e:90:42:51:5b:c8:61:44:e9:da:27:6c:04:52: 46:ba:bf:ba:9f:b4:64:5d:ba:9c:c6:18:ec:87:24: 20:d3:93:12:a5:44:2e:12:79:0c:e1:09:dc:2b:82: 49:fd:75:48:65:fa:ca:5d:bd:09:b8:9b:72:d1:90: f3:46:6c:83:16:79:f6:60:78:91:18:53:ed:84:47: 07:6d:a5:a3:de:f8:f1:0d:18:c5:ee:23:02:81:49: 25:4c:77:43:39:3b:95:11:ee:e8:91:d4:58:f0:19: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A5:53:9F:F1:34:CC:F6:D6:3F:97:A1:EE:3E:C2:5A:43:30:31:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 199.167.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1b:cd:4f:44:93:e6:cf:f9:52:b3:12:fc:08:6f:76:7e:16: 82:6e:b4:fd:a3:56:e2:83:37:79:2d:a9:0d:77:7b:2b:2c:95: bb:ec:4a:d5:fa:e2:67:d6:55:ac:f5:a5:cb:ad:45:62:35:8b: 13:6a:7f:b0:6b:86:49:08:da:1d:9a:c0:ff:5e:59:d2:f3:67: 34:00:d9:53:58:91:c5:ce:68:63:14:0f:7a:25:1a:26:3f:c7: 3a:98:df:9c:0d:b9:e6:a3:d8:8f:fe:58:9c:9d:e7:60:74:eb: ba:d2:59:08:dd:29:fe:cc:0e:93:78:1f:d3:a8:cf:93:d4:90: d2:43:01:83:70:21:44:9c:91:c1:46:c4:aa:0d:b6:0c:f7:4c: 9d:2c:b1:a8:12:4c:89:13:6b:97:ee:58:7c:07:78:07:14:c0: d9:d9:8c:6a:82:01:33:54:91:b8:33:86:54:81:07:1a:b2:98: 7f:3b:56:3e:f4:98:17:ce:0a:bc:1a:b9:7b:86:6b:a8:75:ae: 30:c9:2b:69:93:63:b6:f9:cf:6a:24:7c:58:d0:54:3f:d7:92: 0b:08:9d:f4:fd:b1:98:45:3d:ad:77:f8:fe:07:b1:41:a1:d9: 06:43:26:99:6b:aa:a8:6c:88:09:e5:88:34:85:66:44:06:a7: cc:34:c1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMKhQ+hRn977liAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Zjg5ZDhmNjktNDRiNS00Y2ZhLTkzNzEtNzdiOGEzMmI5MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvkl5XZCxr1gN3uE5SvU3iKHWAa44f4Poknf n2wV4nkzam7i5h/UBK8qFvJGga969ZkYOZ8pweHFUPE9eQA1At2gw/VH2Hz/YAK2 YwkYcEhrIkIlEX3L9aOoMphA4iEpL7ghLkF57yInk33XXdy99vOYMKuD1TCzbBoq 1eVNfqKovju50M0em5pcYE/GxVT+3qb1/C3bDpBCUVvIYUTp2idsBFJGur+6n7Rk XbqcxhjshyQg05MSpUQuEnkM4QncK4JJ/XVIZfrKXb0JuJty0ZDzRmyDFnn2YHiR GFPthEcHbaWj3vjxDRjF7iMCgUklTHdDOTuVEe7okdRY8Bl9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESlU5/xNMz21j+Xoe4+wlpDMDELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvOGI2YzhjMmQtYzZkMC0z ZjA4LTlkYjItNjk2YmIxNDQ3YWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkbzU9Ek+bP+VKzEvwIb3Z+FoJutP2jVuKDN3ktqQ13eysslbvsStX6 4mfWVaz1pcutRWI1ixNqf7BrhkkI2h2awP9eWdLzZzQA2VNYkcXOaGMUD3olGiY/ xzqY35wNueaj2I/+WJyd52B067rSWQjdKf7MDpN4H9Ooz5PUkNJDAYNwIUSckcFG xKoNtgz3TJ0ssagSTIkTa5fuWHwHeAcUwNnZjGqCATNUkbgzhlSBBxqymH87Vj70 mBfOCrwauXuGa6h1rjDJK2mTY7b5z2okfFjQVD/XkgsInfT9sZhFPa13+P4HsUGh 2QZDJplrqqhsiAnliDSFZkQGp8w0wZY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:32:18 2025 by rpki-client