$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa File: 70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa (raw, json) Hash identifier: eDwruHh2eMEJbOqvCS6R6GimCv9DKdx30Hm0sIliAY8= Subject key identifier: 59:DF:48:52:4C:BD:89:47:E3:44:4A:3B:EC:94:F5:50:70:0B:F3:07 Certificate issuer: /CN=b6e29f76-f782-45f9-8ad8-791d08e6d174 Certificate serial: 010D0C9F43285849EBEA4A35A04FC7BE6A50F800 Authority key identifier: 58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 30192 IP address blocks: 167.88.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4a:35:a0:4f:c7:be:6a:50:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e29f76-f782-45f9-8ad8-791d08e6d174 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=851f6fc5-00b9-46dc-8f23-9835381d87a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:c4:3e:b3:27:67:79:55:6c:ac:64:85:68: b5:f3:d4:84:66:2a:23:1b:e5:15:84:ff:16:b0:94: d8:23:94:51:d1:23:85:8c:de:31:0a:af:7c:a3:63: ce:ac:7c:8f:bd:ea:50:2f:d9:f0:8d:5e:76:bb:d3: 90:f8:da:c8:e7:41:b4:4e:1b:47:89:6a:61:29:2a: 44:cf:74:52:c4:4b:8b:41:d6:10:56:56:03:e1:cc: 46:dc:d6:9d:fd:38:02:bb:84:0a:eb:d9:4f:ba:8b: 50:12:54:22:88:52:4f:61:5d:77:c1:57:f7:07:ee: b1:65:ce:6d:bf:a0:4a:04:de:b2:42:11:60:b3:8f: 07:86:21:13:99:bf:70:67:e5:95:4e:be:9b:44:b4: 80:33:9f:b2:85:85:29:a0:89:20:a9:d2:f1:f1:90: 6a:76:87:46:59:a3:99:9e:18:e5:93:0a:e9:3e:1a: d9:7a:b3:05:cd:13:c8:a5:f2:56:08:2c:33:2b:fe: e7:92:07:2d:e0:c9:7a:bb:e9:5f:6c:8b:00:8d:15: 19:5d:cb:cd:5f:1d:72:ba:c3:1a:f7:48:63:5f:b5: 65:91:83:e2:cf:74:15:82:5c:23:e4:3d:60:3b:72: 4d:f5:d5:ec:6e:e9:32:4c:8b:56:e2:a7:0f:d3:b4: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DF:48:52:4C:BD:89:47:E3:44:4A:3B:EC:94:F5:50:70:0B:F3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl X509v3 Authority Key Identifier: keyid:58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer sbgp-ipAddrBlock: critical IPv4: 167.88.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ad:f5:06:32:a7:12:b6:70:e2:31:d2:2e:70:f4:96:7c:c2: d9:f5:d4:2f:d1:8f:83:5e:ec:57:49:4f:67:6d:9c:32:a4:1e: ea:db:6b:f8:16:08:9f:4c:48:43:e6:6a:6f:a7:25:d7:4a:c5: d8:08:8c:8e:e7:36:15:c8:27:fb:8f:28:70:2d:ca:64:15:d4: 53:bc:6c:86:31:b1:20:be:47:db:72:ec:db:f4:a0:c8:9f:74: 0c:ef:98:eb:fc:da:79:fb:a5:50:89:11:83:63:92:ec:64:1b: ef:fe:44:55:d3:33:be:54:b4:3c:71:56:37:72:ca:55:48:2e: cc:25:a2:80:87:93:b8:28:c1:fc:16:e5:aa:a4:39:ca:3a:80: 80:0e:bd:f6:f4:9a:db:24:51:af:3e:68:c9:27:40:d1:9c:f1: 08:86:a4:91:27:37:33:ec:64:4c:91:36:2a:59:8d:96:b0:3b: 3c:0b:5b:40:c1:9c:a4:f8:8d:3b:a2:46:5e:17:d3:e0:b6:91: 84:77:63:fa:1e:03:77:15:73:57:30:94:2d:3d:42:09:43:6d: 61:25:9b:2d:a6:a7:95:f9:3b:d4:f1:2a:9d:0e:dc:cf:37:a3: 6a:de:0b:2c:2f:fb:63:44:55:ca:3b:a8:73:01:0f:d1:15:f0: 2d:19:cf:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6ko1oE/HvmpQ+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZlMjlmNzYtZjc4Mi00NWY5LThhZDgtNzkxZDA4ZTZk MTc0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ODUxZjZmYzUtMDBiOS00NmRjLThmMjMtOTgzNTM4MWQ4N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ujEPrMnZ3lVbKxkhWi189SEZiojG+UVhP8W sJTYI5RR0SOFjN4xCq98o2POrHyPvepQL9nwjV52u9OQ+NrI50G0ThtHiWphKSpE z3RSxEuLQdYQVlYD4cxG3Nad/TgCu4QK69lPuotQElQiiFJPYV13wVf3B+6xZc5t v6BKBN6yQhFgs48HhiETmb9wZ+WVTr6bRLSAM5+yhYUpoIkgqdLx8ZBqdodGWaOZ nhjlkwrpPhrZerMFzRPIpfJWCCwzK/7nkgct4Ml6u+lfbIsAjRUZXcvNXx1yusMa 90hjX7VlkYPiz3QVglwj5D1gO3JN9dXsbukyTItW4qcP07QRSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnfSFJMvYlH40RKO+yU9VBwC/MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUy OWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFkMDhlNmQxNzQvNzAyNDFjMDctMGEzYy0z ZWMxLTg5NDQtZTczZGNhYzdkZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjZlMjlmNzYtZjc4Mi00NWY5LThh ZDgtNzkxZDA4ZTZkMTc0L2I2ZTI5Zjc2LWY3ODItNDVmOS04YWQ4LTc5MWQwOGU2 ZDE3NC5jcmwwHwYDVR0jBBgwFoAUWLB6IKgRUwfQQ1rgBQMgU6N0nwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUyOWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFk MDhlNmQxNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1g7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmt9QYypxK2cOIx0i5w9JZ8wtn11C/Rj4Ne7FdJT2dtnDKkHurba/gW CJ9MSEPmam+nJddKxdgIjI7nNhXIJ/uPKHAtymQV1FO8bIYxsSC+R9ty7Nv0oMif dAzvmOv82nn7pVCJEYNjkuxkG+/+RFXTM75UtDxxVjdyylVILswlooCHk7gowfwW 5aqkOco6gIAOvfb0mtskUa8+aMknQNGc8QiGpJEnNzPsZEyRNipZjZawOzwLW0DB nKT4jTuiRl4X0+C2kYR3Y/oeA3cVc1cwlC09QglDbWElmy2mp5X5O9TxKp0O3M83 o2reCywv+2NEVco7qHMBD9EV8C0Zz/g= -----END CERTIFICATE-----Generated at Tue Jul 1 19:37:07 2025 by rpki-client