$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa File: f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa (raw, json) Hash identifier: WPVlnvYU20TnXKPcMktopW7O0ot25Z1foGl+vdGoGw4= Subject key identifier: 02:57:98:75:48:23:77:6B:D5:18:9A:E3:18:10:D1:EF:51:7F:71:6A Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F43285849F17FC4E725C09E370081DE00 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 35847 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c4:e7:25:c0:9e:37:00:81:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=157c0fc0-6831-4649-86e7-fb1cdde8c0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:a9:1b:58:9d:19:8e:35:c1:9c:70:f9:3d: 35:68:78:9e:cb:d0:91:e9:22:44:31:9f:29:2e:60: 95:80:22:fb:c5:f3:d6:b0:95:52:a7:c7:34:19:c4: 24:ea:e0:32:45:6f:9c:e8:8c:96:d8:3b:2e:db:4a: ff:af:fb:cd:dc:84:89:28:88:90:a8:67:b2:ac:28: d8:68:14:e4:e7:71:94:dd:06:82:b3:ec:b0:0d:ef: 52:21:4e:d9:2d:71:49:69:ec:42:b2:f0:29:c1:e6: d0:e5:4e:78:37:4d:f8:b4:7b:ed:ea:88:50:a9:48: 6b:1b:24:8d:bc:2f:22:f6:43:ac:57:7c:a6:8c:bc: 7e:63:cf:8b:10:7b:30:a3:75:b1:5d:aa:4e:5f:31: d9:c3:8a:d8:05:90:49:5a:68:50:db:8b:40:e2:98: b8:8e:b6:0b:fd:ae:08:8e:7f:7d:79:d4:3b:2e:9e: fc:03:5a:db:d2:36:4e:42:9c:5f:d0:52:67:1a:dd: 7d:2a:c7:53:34:b2:af:b6:59:6a:38:76:04:93:4b: 69:da:1f:10:fe:2f:56:1b:4e:a6:72:2e:99:8b:32: 87:e2:d3:83:78:a5:21:cd:b2:4f:09:a0:6c:00:93: 68:71:6f:ca:b2:e4:26:f9:08:9b:38:4f:82:8e:b7: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:57:98:75:48:23:77:6B:D5:18:9A:E3:18:10:D1:EF:51:7F:71:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:95:61:41:b4:ea:3f:75:48:c2:bf:a2:63:fe:18:64:dc:16: d3:fa:ad:b0:69:eb:22:49:19:58:90:2a:00:00:e8:da:81:0d: a1:5a:28:24:95:84:f6:19:b9:c2:60:b9:29:7e:60:61:eb:3d: 84:27:88:46:26:72:a3:f9:87:76:4d:2c:77:3f:a3:07:d2:2c: 88:ef:c9:d3:15:3b:72:d0:57:f4:9a:1a:38:a8:4a:c0:b0:13: 7b:3b:8b:61:02:cb:06:d9:a9:54:28:74:6e:75:90:23:ba:9b: fa:0c:36:0e:15:48:d5:6f:35:12:48:19:ec:62:54:06:28:42: 12:fa:16:61:d1:91:18:42:80:c2:70:4d:3c:7d:02:87:ce:1f: 0e:7c:c7:f6:4d:b2:08:a6:84:a9:cb:a1:96:4e:ad:29:0a:7d: 64:3f:15:a0:51:d8:53:7c:ab:cd:60:e4:f0:4c:9d:15:1e:8e: c6:2d:c1:6a:62:a7:c5:8f:6e:13:8e:2c:17:0e:dd:ff:85:55: 85:aa:22:34:5d:09:07:be:07:7e:ca:17:53:b6:7f:dd:37:0a: 02:05:67:93:1d:e2:48:ad:9d:a7:e9:2c:6b:88:f1:84:0d:ec: d3:1a:e9:4c:f6:2b:01:e5:f6:70:3e:34:85:31:f7:5d:67:01: e4:63:97:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8TnJcCeNwCB3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MTU3YzBmYzAtNjgzMS00NjQ5LTg2ZTctZmIxY2RkZThjMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYapG1idGY41wZxw+T01aHiey9CR6SJEMZ8p LmCVgCL7xfPWsJVSp8c0GcQk6uAyRW+c6IyW2Dsu20r/r/vN3ISJKIiQqGeyrCjY aBTk53GU3QaCs+ywDe9SIU7ZLXFJaexCsvApwebQ5U54N034tHvt6ohQqUhrGySN vC8i9kOsV3ymjLx+Y8+LEHswo3WxXapOXzHZw4rYBZBJWmhQ24tA4pi4jrYL/a4I jn99edQ7Lp78A1rb0jZOQpxf0FJnGt19KsdTNLKvtllqOHYEk0tp2h8Q/i9WG06m ci6ZizKH4tODeKUhzbJPCaBsAJNocW/KsuQm+QibOE+CjrfjlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJXmHVII3dr1Ria4xgQ0e9Rf3FqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvZjZiM2Y2YTYtM2E4Yy0z ZTA3LTgwYWItMjhhOGY0MzI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeVYUG06j91SMK/omP+GGTcFtP6rbBp6yJJGViQKgAA6NqBDaFaKCSV hPYZucJguSl+YGHrPYQniEYmcqP5h3ZNLHc/owfSLIjvydMVO3LQV/SaGjioSsCw E3s7i2ECywbZqVQodG51kCO6m/oMNg4VSNVvNRJIGexiVAYoQhL6FmHRkRhCgMJw TTx9AofOHw58x/ZNsgimhKnLoZZOrSkKfWQ/FaBR2FN8q81g5PBMnRUejsYtwWpi p8WPbhOOLBcO3f+FVYWqIjRdCQe+B37KF1O2f903CgIFZ5Md4kitnafpLGuI8YQN 7NMa6Uz2KwHl9nA+NIUx911nAeRjl+c= -----END CERTIFICATE-----Generated at Mon Jun 16 18:56:27 2025 by rpki-client