$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bfa215d8-cdf9-3c5c-b4cd-86971c856555.roa File: bfa215d8-cdf9-3c5c-b4cd-86971c856555.roa (raw, json) Hash identifier: OTIoVUTZm7suYrExDZOb4D+x0cnoySilyLQOnR+tsz0= Subject key identifier: F6:48:B7:70:B1:C7:28:F0:9E:EA:BA:65:87:AB:B1:BC:18:D7:34:7B Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F43285849F48FD97048B34796BED449E0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bfa215d8-cdf9-3c5c-b4cd-86971c856555.roa Signing time: Sat 24 May 2025 03:20:54 +0000 ROA not before: Sat 24 May 2025 03:20:54 +0000 ROA not after: Fri 22 Aug 2025 03:20:54 +0000 asID: 19886 IP address blocks: 171.162.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:8f:d9:70:48:b3:47:96:be:d4:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 24 03:20:54 2025 GMT Not After : Aug 22 03:20:54 2025 GMT Subject: CN=0fdac827-cc52-4e4b-8ffd-377d670b45a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:9a:31:71:7d:e1:a5:e3:1a:b9:3c:d1:73: 7d:13:75:db:22:06:07:ae:c9:42:bf:e3:f6:7a:2d: d4:c9:0f:1f:2b:56:76:57:95:92:24:03:d1:4c:d4: c3:2d:c6:df:41:c8:4e:95:53:4e:71:8b:05:d9:13: 9d:64:21:aa:3d:cb:7f:29:f8:58:07:0a:c9:c6:8a: 67:44:76:39:9b:f6:dc:df:b7:6e:b5:92:c0:cd:52: 18:80:9f:2a:bb:c3:14:76:7a:24:88:21:9d:df:93: a6:42:4e:1f:94:ce:b6:8c:48:35:45:be:98:cd:a7: 5c:68:78:34:e7:aa:6b:0a:78:32:71:4d:13:0f:81: ce:a5:45:04:20:e9:c6:ae:5e:87:d5:ee:8b:bf:11: d3:f4:be:50:73:6c:05:e8:53:2e:cb:d6:da:5f:eb: 19:99:c9:be:f4:bc:5c:8b:8b:40:b0:24:f6:8d:03: 17:7a:82:86:75:8d:47:66:df:d9:34:64:53:f1:bc: 08:17:23:13:81:f7:7e:6a:a9:fb:ab:07:ff:93:81: f6:fa:f1:bd:f2:9a:78:6f:7b:46:f2:ca:91:d3:dd: 15:d7:df:e6:00:12:70:bc:f8:bc:92:41:5f:a2:58: 25:79:47:f1:5f:20:96:46:a8:6b:02:d4:44:98:17: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:48:B7:70:B1:C7:28:F0:9E:EA:BA:65:87:AB:B1:BC:18:D7:34:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bfa215d8-cdf9-3c5c-b4cd-86971c856555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:98:b7:68:9c:68:03:68:ca:8c:aa:50:21:a1:fb:b7:a2:44: 3b:1f:3c:12:c7:0e:73:e2:8d:d0:40:24:22:e2:83:d6:41:63: 53:c8:d3:b3:50:e3:f3:ec:3f:44:bd:39:78:cc:e1:78:74:de: 82:e2:33:6a:48:43:71:88:b7:4f:ce:6f:31:ef:28:e4:df:c5: 7f:00:f7:38:bb:f6:a2:11:85:e7:2f:01:e7:f2:b0:8b:16:82: 97:ce:2a:0d:2c:c1:5e:0b:3b:7c:2d:84:85:19:21:11:85:c5: b7:8c:5f:bf:7a:20:d6:77:f9:68:1c:a8:50:76:dd:81:7f:95: 40:8e:13:54:5b:7f:67:13:8f:c6:de:1b:92:40:bf:8c:51:28: fd:8a:e5:83:45:38:94:d7:b5:1d:7f:5b:9c:41:0a:1a:45:36: 91:e0:05:26:7a:a5:f5:d9:5d:8f:f9:ac:d6:02:ad:08:cc:e0: 3c:76:7f:5b:63:ce:b3:d2:12:ac:c5:ab:f0:e2:b9:6b:97:83: 80:6a:27:6b:0e:a9:be:66:a8:bc:00:0f:c4:38:75:6b:f7:b4: b4:ab:86:18:be:59:14:6e:f6:e4:f7:64:b2:9f:de:7b:28:16: c5:f4:a9:87:4e:13:4b:07:66:8a:20:14:da:f3:7e:72:9e:a2: 8a:ce:67:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0j9lwSLNHlr7USeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDUyNDAzMjA1NFoXDTI1MDgyMjAzMjA1NFowLzEtMCsGA1UEAxMk MGZkYWM4MjctY2M1Mi00ZTRiLThmZmQtMzc3ZDY3MGI0NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+aMXF94aXjGrk80XN9E3XbIgYHrslCv+P2 ei3UyQ8fK1Z2V5WSJAPRTNTDLcbfQchOlVNOcYsF2ROdZCGqPct/KfhYBwrJxopn RHY5m/bc37dutZLAzVIYgJ8qu8MUdnokiCGd35OmQk4flM62jEg1Rb6YzadcaHg0 56prCngycU0TD4HOpUUEIOnGrl6H1e6LvxHT9L5Qc2wF6FMuy9baX+sZmcm+9Lxc i4tAsCT2jQMXeoKGdY1HZt/ZNGRT8bwIFyMTgfd+aqn7qwf/k4H2+vG98pp4b3tG 8sqR090V19/mABJwvPi8kkFfolgleUfxXyCWRqhrAtREmBdx+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZIt3Cxxyjwnuq6ZYersbwY1zR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmZhMjE1ZDgtY2RmOS0z YzVjLWI0Y2QtODY5NzFjODU2NTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6I7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqYt2icaANoyoyqUCGh+7eiRDsfPBLHDnPijdBAJCLig9ZBY1PI07NQ 4/PsP0S9OXjM4Xh03oLiM2pIQ3GIt0/ObzHvKOTfxX8A9zi79qIRhecvAefysIsW gpfOKg0swV4LO3wthIUZIRGFxbeMX796INZ3+WgcqFB23YF/lUCOE1Rbf2cTj8be G5JAv4xRKP2K5YNFOJTXtR1/W5xBChpFNpHgBSZ6pfXZXY/5rNYCrQjM4Dx2f1tj zrPSEqzFq/DiuWuXg4BqJ2sOqb5mqLwAD8Q4dWv3tLSrhhi+WRRu9uT3ZLKf3nso FsX0qYdOE0sHZoogFNrzfnKeoorOZ1E= -----END CERTIFICATE-----Generated at Mon Jun 30 00:48:59 2025 by rpki-client