$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa File: 59fc405d-4035-30c0-b187-caacc2bd4a19.roa (raw, json) Hash identifier: hapDEZIpFLwtnjMXDOFTwynFDRG1l65VXoHx4UY6sic= Subject key identifier: 60:DB:DB:C0:87:E8:D6:00:06:BE:0E:AB:89:59:0E:82:04:71:0A:10 Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F4328584A43DB0A4AFBC8FC115C2C3240 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 12022 IP address blocks: 208.83.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0a:4a:fb:c8:fc:11:5c:2c:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=bf7df2c0-cf1b-4ea0-b026-a366a8caa73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9d:fa:ff:01:d0:be:08:ab:e0:dd:48:50:21: cd:55:cc:d0:d0:9d:70:73:30:6d:61:56:1d:ac:a3: 37:13:77:e9:31:05:5c:29:45:e2:ab:cb:cc:42:e7: 40:48:0f:c3:7a:03:80:fe:78:75:c7:45:8a:29:49: 6d:4d:9f:14:79:34:f9:83:38:e5:82:7b:36:82:f6: 87:ce:c2:42:9d:de:ec:3c:de:34:47:b7:24:ee:50: 40:8e:1a:f1:3f:c7:81:67:26:9c:06:91:01:39:8b: b5:0c:87:b8:30:a8:82:64:b9:03:c8:09:a9:75:34: 6a:27:91:27:d2:f8:22:78:e7:3a:b5:8f:4f:5b:01: ec:cf:b2:16:5d:7e:db:73:49:19:49:cf:6c:09:74: 51:b8:f5:54:9f:fe:d4:cd:46:f6:05:9a:e0:4a:a8: 13:3d:1d:68:74:d1:6d:2e:b0:af:ec:e6:f0:d8:61: ac:af:87:84:bf:7b:eb:55:47:4d:5e:9d:0a:3c:17: 81:c5:10:d6:ac:96:97:da:26:64:59:2f:3f:1f:1d: fd:92:1f:c8:ce:e7:4c:7f:58:23:a3:c0:53:1a:8b: 13:1e:25:b6:db:13:8e:6d:8d:f0:8e:0d:1f:fb:c1: f8:17:cd:c0:f9:6d:10:23:5a:de:fe:e1:ba:08:b0: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DB:DB:C0:87:E8:D6:00:06:BE:0E:AB:89:59:0E:82:04:71:0A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:91:fb:e7:66:13:1e:ea:21:03:c0:f0:9c:b5:56:db:49:0a: a5:c1:86:6e:05:b8:69:00:f7:41:28:ba:4a:fe:97:3a:23:1d: 4e:af:2c:50:e3:24:0d:ce:d9:df:d5:29:f6:2c:eb:7d:b4:fe: 49:2f:61:ce:bc:08:af:89:e4:e1:2e:44:c6:54:14:ed:76:31: 12:ed:4d:5f:c4:5f:a8:1d:5d:68:b1:1e:04:4a:e9:29:75:2c: 43:b7:c1:fb:af:9f:48:26:f1:b6:08:d3:18:97:db:1f:94:4c: 15:08:bb:7e:f9:45:bf:7b:77:cf:ac:17:fa:b4:3e:7d:55:b1: 42:62:e4:70:56:73:f3:44:21:61:a4:20:63:8d:11:48:f7:08: ed:59:5c:58:d3:ea:ee:da:80:00:06:aa:b4:92:48:40:e6:72: 75:29:85:79:21:d4:d9:fb:37:3a:61:46:2c:a5:f8:d7:cc:49: 9e:74:4d:be:21:6a:b4:29:ac:ba:5a:44:cf:52:3d:90:62:a3: 02:77:d5:6c:df:4a:be:af:38:14:9c:ee:7a:36:42:4b:8a:0b: 4e:99:59:28:90:bd:40:3d:38:32:59:85:97:da:e5:ad:87:ce: 4d:c6:4c:ad:d7:50:ae:ab:be:c0:4f:11:87:2c:1f:9b:c3:3c: d0:d1:db:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wpK+8j8EVwsMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YmY3ZGYyYzAtY2YxYi00ZWEwLWIwMjYtYTM2NmE4Y2FhNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ36/wHQvgir4N1IUCHNVczQ0J1wczBtYVYd rKM3E3fpMQVcKUXiq8vMQudASA/DegOA/nh1x0WKKUltTZ8UeTT5gzjlgns2gvaH zsJCnd7sPN40R7ck7lBAjhrxP8eBZyacBpEBOYu1DIe4MKiCZLkDyAmpdTRqJ5En 0vgieOc6tY9PWwHsz7IWXX7bc0kZSc9sCXRRuPVUn/7UzUb2BZrgSqgTPR1odNFt LrCv7Obw2GGsr4eEv3vrVUdNXp0KPBeBxRDWrJaX2iZkWS8/Hx39kh/IzudMf1gj o8BTGosTHiW22xOObY3wjg0f+8H4F83A+W0QI1re/uG6CLCnqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDb28CH6NYABr4Oq4lZDoIEcQoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvNTlmYzQwNWQtNDAzNS0z MGMwLWIxODctY2FhY2MyYmQ0YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2R++dmEx7qIQPA8Jy1VttJCqXBhm4FuGkA90Eoukr+lzojHU6vLFDj JA3O2d/VKfYs6320/kkvYc68CK+J5OEuRMZUFO12MRLtTV/EX6gdXWixHgRK6Sl1 LEO3wfuvn0gm8bYI0xiX2x+UTBUIu375Rb97d8+sF/q0Pn1VsUJi5HBWc/NEIWGk IGONEUj3CO1ZXFjT6u7agAAGqrSSSEDmcnUphXkh1Nn7NzphRiyl+NfMSZ50Tb4h arQprLpaRM9SPZBiowJ31WzfSr6vOBSc7no2QkuKC06ZWSiQvUA9ODJZhZfa5a2H zk3GTK3XUK6rvsBPEYcsH5vDPNDR22g= -----END CERTIFICATE-----Generated at Sat Jul 5 05:11:39 2025 by rpki-client