$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/e7a5e9fa-54f1-3277-837e-353a459841a6.roa File: e7a5e9fa-54f1-3277-837e-353a459841a6.roa (raw, json) Hash identifier: FpbKPKE9UsZIrzxylUtaQoLZHymTUh3iEKjoHEDVRmM= Subject key identifier: 9B:41:7B:04:4B:C3:8F:ED:4A:6B:8D:3E:CA:E6:CF:34:B0:37:E4:61 Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F43285849E90EC709E60F4FF0CD9D64E8 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/e7a5e9fa-54f1-3277-837e-353a459841a6.roa Signing time: Tue 20 May 2025 00:26:57 +0000 ROA not before: Tue 20 May 2025 00:26:57 +0000 ROA not after: Mon 18 Aug 2025 00:26:57 +0000 asID: 40505 IP address blocks: 65.181.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:0e:c7:09:e6:0f:4f:f0:cd:9d:64:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: May 20 00:26:57 2025 GMT Not After : Aug 18 00:26:57 2025 GMT Subject: CN=26066158-82dc-418e-8f7b-eaf1bf34d9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:36:b4:c5:4e:34:dd:0f:27:ca:70:7e:b4: 82:1c:ff:ab:18:f9:50:31:9b:46:f2:1e:b2:6c:60: 4e:70:10:ad:16:4b:d6:5b:09:b2:46:0f:23:bf:69: ec:00:45:b9:9d:4c:ee:77:b2:d4:45:b6:dd:05:a9: cb:47:64:fe:12:41:ce:f8:eb:cc:2d:94:ed:a8:13: 18:c4:5f:60:cd:c1:b4:c3:8f:48:22:3a:0e:d5:c9: d7:aa:64:f0:b9:d5:d1:e3:ba:c1:d1:44:ac:48:de: fb:94:15:dd:67:eb:52:fd:25:f7:91:8f:8b:e0:96: 05:6a:75:7a:ac:56:cf:78:2b:2b:07:a6:59:18:db: 09:71:14:d8:f9:15:5f:ac:7c:34:b9:d6:e0:00:67: 81:07:4b:4a:63:37:5e:0f:be:86:26:a6:7a:7f:57: ac:40:ea:96:34:4b:18:3c:c7:2d:be:96:bb:23:27: 37:f5:c9:92:28:90:eb:e1:8f:15:06:f2:e5:b7:56: 8d:99:73:6a:20:74:73:49:4d:dc:00:69:6f:f8:9a: ae:d6:67:da:c2:62:d4:68:8d:ba:27:4a:0f:a7:62: b9:aa:0b:93:3a:d3:91:5b:5f:6e:6f:43:de:c5:bf: ae:11:d8:0b:50:69:59:3b:a8:b3:91:30:79:d1:82: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:7B:04:4B:C3:8F:ED:4A:6B:8D:3E:CA:E6:CF:34:B0:37:E4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/e7a5e9fa-54f1-3277-837e-353a459841a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a4:45:f6:de:4c:ae:39:c2:cf:4c:8a:77:0d:18:7b:01:8e: db:6b:9b:ae:6a:14:0c:cb:a0:eb:6c:a7:af:3c:64:a5:10:3d: 69:83:bb:4f:f8:06:38:9e:b4:36:85:ec:b3:02:26:9d:d2:6c: ff:9a:0d:78:fb:eb:a7:b7:0e:31:99:8f:92:93:5e:13:99:13: 32:40:06:81:e7:93:2f:04:33:84:86:e9:00:95:7f:cd:dd:65: 2f:5b:66:58:95:4e:23:16:46:86:8b:95:6f:5a:c8:be:80:4e: 55:0c:15:94:16:93:67:fc:92:40:49:48:82:62:79:72:b2:9c: 80:bc:99:7d:af:a8:6c:59:4a:a0:55:44:0c:e0:52:30:74:c3: 1f:bb:97:fd:91:63:4a:a4:8d:6c:c3:75:15:69:3b:7b:e1:7f: 42:0e:83:ab:45:23:df:d6:7f:ad:96:59:0f:a0:07:75:4b:68: 72:ef:73:22:7a:14:a1:55:1c:81:3c:71:ab:86:79:e5:ca:df: b6:7d:4b:9e:50:e5:19:a5:65:7e:da:f2:26:cb:78:01:a3:5e: f9:2b:13:df:4a:45:d8:a6:09:09:58:f3:29:78:ac:84:fb:e1: f8:aa:20:70:82:8b:d9:e4:59:f5:79:bc:6f:c3:cb:ce:34:f3: ce:4e:d9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpDscJ5g9P8M2dZOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI1MDUyMDAwMjY1N1oXDTI1MDgxODAwMjY1N1owLzEtMCsGA1UEAxMk MjYwNjYxNTgtODJkYy00MThlLThmN2ItZWFmMWJmMzRkOWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9k2tMVONN0PJ8pwfrSCHP+rGPlQMZtG8h6y bGBOcBCtFkvWWwmyRg8jv2nsAEW5nUzud7LURbbdBanLR2T+EkHO+OvMLZTtqBMY xF9gzcG0w49IIjoO1cnXqmTwudXR47rB0USsSN77lBXdZ+tS/SX3kY+L4JYFanV6 rFbPeCsrB6ZZGNsJcRTY+RVfrHw0udbgAGeBB0tKYzdeD76GJqZ6f1esQOqWNEsY PMctvpa7Iyc39cmSKJDr4Y8VBvLlt1aNmXNqIHRzSU3cAGlv+Jqu1mfawmLUaI26 J0oPp2K5qguTOtORW19ub0Pexb+uEdgLUGlZO6izkTB50YLjZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtBewRLw4/tSmuNPsrmzzSwN+RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvZTdhNWU5ZmEtNTRmMS0z Mjc3LTgzN2UtMzUzYTQ1OTg0MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAakRfbeTK45ws9MincNGHsBjttrm65qFAzLoOtsp688ZKUQPWmDu0/4 BjietDaF7LMCJp3SbP+aDXj766e3DjGZj5KTXhOZEzJABoHnky8EM4SG6QCVf83d ZS9bZliVTiMWRoaLlW9ayL6ATlUMFZQWk2f8kkBJSIJieXKynIC8mX2vqGxZSqBV RAzgUjB0wx+7l/2RY0qkjWzDdRVpO3vhf0IOg6tFI9/Wf62WWQ+gB3VLaHLvcyJ6 FKFVHIE8cauGeeXK37Z9S55Q5RmlZX7a8ibLeAGjXvkrE99KRdimCQlY8yl4rIT7 4fiqIHCCi9nkWfV5vG/Dy840885O2Vg= -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:13 2025 by rpki-client