$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa File: 29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa (raw, json) Hash identifier: FnaJRkz4wjA7xCuz1XTclXQJAJVCduLhAE+PPvgJd8c= Subject key identifier: 08:7E:3B:AD:91:AB:2C:E3:CD:86:BA:C9:65:C6:C0:71:C8:26:11:D5 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F43285849B149F1BFE59A82D73D322E90 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 164.55.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f1:bf:e5:9a:82:d7:3d:32:2e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a038909b-cf88-43a4-8829-20a8e452e161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:68:e7:5b:b5:b4:b2:ee:95:3c:17:99:02: d0:f8:49:39:b9:9e:94:19:c1:6e:d5:90:52:03:a0: 4d:b1:c1:9b:e6:42:e0:24:a2:80:bc:79:7d:14:85: 43:db:2f:ed:64:52:98:dc:cd:9c:33:1f:e6:1a:12: 71:70:f1:e2:72:3f:79:9b:ec:7b:3b:7c:4e:b2:d2: 62:11:0b:9f:d6:f2:26:63:07:23:da:ce:f6:aa:6a: 2d:d9:6f:7b:84:e4:26:1f:2b:da:ac:31:cc:e8:94: dd:e3:ee:1e:4f:59:e9:37:c7:56:3c:f7:e8:15:ae: 4d:78:91:22:f0:f5:c7:27:98:9b:51:39:68:4e:f5: 84:7a:78:d2:cc:77:63:a4:6a:74:ea:dd:1e:6a:10: ab:e9:30:47:51:ee:cb:83:67:1a:bf:3d:f5:a8:d9: ad:cc:28:fb:a6:b8:09:fe:0f:a7:95:bc:08:e8:89: 54:c2:b7:c4:67:8f:ce:de:6c:ca:b3:04:ee:65:20: f2:54:1d:09:ce:60:13:be:36:b5:a7:3a:d6:e6:5a: 1e:8c:e9:9d:61:25:ad:d3:3e:4b:bb:58:05:ab:6d: d5:8b:18:8d:c6:c2:c5:b0:ec:1a:62:bf:d4:ed:20: 1c:8e:c3:07:f4:bb:8e:4a:1d:a6:65:4d:b2:75:1b: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7E:3B:AD:91:AB:2C:E3:CD:86:BA:C9:65:C6:C0:71:C8:26:11:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 164.55.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:57:2c:69:66:ad:e6:74:c6:e0:11:05:0a:7d:40:72:18:37: 94:d8:d9:69:82:5c:9b:91:46:e0:49:cf:04:d9:48:f8:03:ac: 6d:b4:5a:67:62:ac:9b:97:ac:f7:b7:5c:55:5b:49:4d:59:85: 38:40:47:09:e3:b2:05:b5:05:bc:5e:11:e1:8e:18:e3:e2:db: a4:cb:db:60:ab:be:a0:c2:76:45:03:fc:2c:bf:59:d0:e2:c2: ba:e4:7a:8c:ea:40:59:35:b0:8f:b2:6b:ec:09:06:c2:e6:31: 0d:68:f7:d6:b4:c5:38:73:1f:24:34:38:6f:cd:af:1d:c9:07: ff:ed:84:df:b9:e1:83:94:ea:18:a7:53:49:a8:a5:2a:a8:bc: 9d:a5:cc:c7:e4:59:ca:2f:8e:aa:16:dc:c5:44:32:3a:1f:71: 4f:88:1c:c8:e6:cd:71:ff:27:31:7f:cb:ae:bb:c9:99:56:a2: 02:43:21:9c:50:e6:2a:3e:e4:43:bd:12:db:82:1e:f8:32:34: 42:55:74:d2:09:0e:72:d2:94:1a:a9:2a:72:35:08:60:d3:f1: fb:d8:de:bd:e8:74:3d:02:89:f4:d7:22:37:44:94:2b:b2:29: 49:84:14:22:74:e5:8e:5a:ce:9c:df:16:7e:6f:ae:36:3a:5f: 64:80:a2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfG/5ZqC1z0yLpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTAzODkwOWItY2Y4OC00M2E0LTg4MjktMjBhOGU0NTJlMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFxo51u1tLLulTwXmQLQ+Ek5uZ6UGcFu1ZBS A6BNscGb5kLgJKKAvHl9FIVD2y/tZFKY3M2cMx/mGhJxcPHicj95m+x7O3xOstJi EQuf1vImYwcj2s72qmot2W97hOQmHyvarDHM6JTd4+4eT1npN8dWPPfoFa5NeJEi 8PXHJ5ibUTloTvWEenjSzHdjpGp06t0eahCr6TBHUe7Lg2cavz31qNmtzCj7prgJ /g+nlbwI6IlUwrfEZ4/O3mzKswTuZSDyVB0JzmATvja1pzrW5loejOmdYSWt0z5L u1gFq23VixiNxsLFsOwaYr/U7SAcjsMH9LuOSh2mZU2ydRsUHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAh+O62RqyzjzYa6yWXGwHHIJhHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMjlkN2YyZWUtMzVhNC0z NjNjLThjMWEtZGE3MDFhNGEzMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDflMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVXLGlmreZ0xuARBQp9QHIYN5TY2WmCXJuRRuBJzwTZSPgDrG20Wmdi rJuXrPe3XFVbSU1ZhThARwnjsgW1BbxeEeGOGOPi26TL22CrvqDCdkUD/Cy/WdDi wrrkeozqQFk1sI+ya+wJBsLmMQ1o99a0xThzHyQ0OG/Nrx3JB//thN+54YOU6hin U0mopSqovJ2lzMfkWcovjqoW3MVEMjofcU+IHMjmzXH/JzF/y667yZlWogJDIZxQ 5io+5EO9EtuCHvgyNEJVdNIJDnLSlBqpKnI1CGDT8fvY3r3odD0CifTXIjdElCuy KUmEFCJ05Y5azpzfFn5vrjY6X2SAooc= -----END CERTIFICATE-----Generated at Sun Jun 15 18:56:10 2025 by rpki-client