$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/feac8bb5-695a-3b29-b9b1-a1c79df4d22a.roa File: feac8bb5-695a-3b29-b9b1-a1c79df4d22a.roa (raw, json) Hash identifier: 06nvgEkG69zyXT90BAapcQXwKeQgcYsAr87O7KmR4gw= Subject key identifier: 3F:6A:B2:4A:A8:24:8F:B1:3E:28:A5:29:C8:E8:5A:76:E3:6D:B5:07 Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F43285849C79F67E6F0DEB9E5E84507C0 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/feac8bb5-695a-3b29-b9b1-a1c79df4d22a.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 16276 IP address blocks: 185.216.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:67:e6:f0:de:b9:e5:e8:45:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=b45f8dec-c7f1-4c0f-a7d7-416d37e1b531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:73:53:cc:59:dc:43:2d:93:d6:be:87:cd: 5e:1d:46:c5:1d:78:c9:04:ac:37:f2:43:7a:56:35: 4c:15:2d:df:e3:ba:6d:95:f9:1a:b1:88:89:2b:16: 66:bc:14:e5:a1:20:86:7a:f0:33:88:3e:fd:44:5e: ae:63:56:a3:eb:ac:1e:b5:28:50:4e:6b:b3:05:5a: 40:ae:f9:6d:43:26:52:db:98:f8:2c:a0:3d:a6:6d: 4e:8c:8f:ff:87:52:8b:7f:ab:7e:16:41:6a:10:0e: de:9f:d9:29:b9:61:2e:1d:52:f3:9e:84:cc:81:57: b5:85:6a:17:02:b2:ee:33:18:a1:89:03:e7:df:0e: 55:c7:df:d4:23:74:58:55:4e:8f:5e:6a:81:74:cb: c0:60:60:b3:79:a4:af:fa:80:16:b9:c1:80:44:4c: ba:9e:a3:27:dc:b8:fb:a4:99:e7:4f:be:1e:4d:96: d9:8a:34:83:59:b0:9e:ff:a7:32:01:42:99:5e:56: 99:4d:df:3b:ce:f7:11:48:79:e2:ed:60:d1:1a:54: 94:e9:3d:70:0a:03:a7:f6:b5:ec:c9:b9:97:78:4c: db:8c:9d:68:ed:2a:e9:a8:f1:b4:2b:76:d8:46:d4: 86:a2:ed:3d:60:2a:98:18:f4:2f:58:cb:85:41:14: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6A:B2:4A:A8:24:8F:B1:3E:28:A5:29:C8:E8:5A:76:E3:6D:B5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/feac8bb5-695a-3b29-b9b1-a1c79df4d22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:03:91:97:92:cf:a9:fd:f7:8a:b3:40:c2:d6:75:cd:a9:92: b5:e2:41:18:d5:2c:7f:e3:a5:37:06:a9:24:e5:26:64:f2:6e: b5:83:04:6e:0f:87:62:16:53:09:f8:74:64:91:e0:af:41:8a: f5:fd:bd:38:8e:9e:06:bc:63:7b:9a:09:4c:95:98:3d:af:06: 99:a1:36:77:6f:e4:53:88:43:11:3f:e4:b7:a8:ae:44:ef:35: 08:39:ed:05:4a:f2:13:81:bf:76:f7:04:04:73:30:fd:da:1d: 0a:af:5d:b2:6c:91:e1:14:32:e5:46:a5:57:3b:a5:af:d9:0b: 3c:db:95:21:ba:ea:6b:e4:2f:84:ca:4c:ee:3b:6e:5c:e5:8b: 07:95:62:5f:db:75:66:d2:41:e9:ac:f8:f9:96:5c:8d:53:55: d3:a4:72:67:06:69:8e:23:27:1f:ba:8e:0c:9a:b1:91:7d:a5: 04:22:a1:a3:42:b2:d0:d1:61:59:8e:1b:f2:c3:8d:3d:9a:08: a3:54:6e:6a:2b:c1:d2:dd:cb:a9:f4:13:47:65:2b:2e:21:22: 80:31:94:67:39:2b:ba:05:35:89:f9:6a:ef:a5:e6:1f:62:f1: df:ec:29:45:bf:66:3f:d8:9b:12:ac:9a:68:80:40:8a:28:00: b4:13:fe:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2fm8N655ehFB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YjQ1ZjhkZWMtYzdmMS00YzBmLWE3ZDctNDE2ZDM3ZTFiNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7JzU8xZ3EMtk9a+h81eHUbFHXjJBKw38kN6 VjVMFS3f47ptlfkasYiJKxZmvBTloSCGevAziD79RF6uY1aj66wetShQTmuzBVpA rvltQyZS25j4LKA9pm1OjI//h1KLf6t+FkFqEA7en9kpuWEuHVLznoTMgVe1hWoX ArLuMxihiQPn3w5Vx9/UI3RYVU6PXmqBdMvAYGCzeaSv+oAWucGAREy6nqMn3Lj7 pJnnT74eTZbZijSDWbCe/6cyAUKZXlaZTd87zvcRSHni7WDRGlSU6T1wCgOn9rXs ybmXeEzbjJ1o7SrpqPG0K3bYRtSGou09YCqYGPQvWMuFQRT+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9qskqoJI+xPiilKcjoWnbjbbUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvZmVhYzhiYjUtNjk1YS0z YjI5LWI5YjEtYTFjNzlkZjRkMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHADkZeSz6n994qzQMLWdc2pkrXiQRjVLH/jpTcGqSTlJmTybrWDBG4P h2IWUwn4dGSR4K9BivX9vTiOnga8Y3uaCUyVmD2vBpmhNndv5FOIQxE/5LeorkTv NQg57QVK8hOBv3b3BARzMP3aHQqvXbJskeEUMuVGpVc7pa/ZCzzblSG66mvkL4TK TO47blzliweVYl/bdWbSQems+PmWXI1TVdOkcmcGaY4jJx+6jgyasZF9pQQioaNC stDRYVmOG/LDjT2aCKNUbmorwdLdy6n0E0dlKy4hIoAxlGc5K7oFNYn5au+l5h9i 8d/sKUW/Zj/YmxKsmmiAQIooALQT/hE= -----END CERTIFICATE-----Generated at Thu May 8 03:01:16 2025 by rpki-client