$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa File: bd53a3c2-b425-32de-abae-cbb2ab87890a.roa (raw, json) Hash identifier: yOKE6ePXrcWD4ACZTmIP27nv1zLwslFeJWHspsNNYiU= Subject key identifier: BA:F4:2D:00:4C:95:18:C9:B7:05:36:35:00:04:61:A3:FB:84:64:51 Certificate issuer: /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Certificate serial: 010D0C9F4328584A3CE029F1BF7CEC1AD6C496C0 Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 2055 IP address blocks: 167.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:29:f1:bf:7c:ec:1a:d6:c4:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=e75d5c41-3d2a-4e42-bb49-8da5db3095eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:a6:b4:91:64:7c:ae:82:39:e8:dc:a8:09: f5:79:7c:3d:7d:e2:68:d9:be:e5:f7:0b:0b:79:c3: 4b:05:88:23:b4:0b:7f:b2:9f:40:c6:fb:ac:77:a9: 52:b1:7b:0a:35:dd:3a:b7:85:36:45:cb:29:33:7c: be:d4:60:ad:34:7e:3a:78:e8:86:5e:d6:3c:44:0a: d3:3c:c3:e7:8e:f3:91:b4:8f:5d:b7:53:f0:98:8b: 18:8f:1e:88:d5:cb:a2:34:2f:f2:32:1c:9e:5b:ec: 7c:3f:e4:a0:57:50:8e:0b:de:8d:c7:2f:07:4b:a4: 40:7a:23:b6:4b:87:c5:d7:2d:8a:f0:2b:ac:d2:2f: 8c:3d:60:56:67:59:05:ba:09:ea:ff:d4:0c:12:7a: 18:23:57:d3:e5:ce:27:62:64:f6:4e:3b:50:6d:32: b7:22:06:26:bf:15:b9:24:91:fc:20:3e:79:bb:27: ba:23:62:4e:bd:89:cd:30:41:30:fc:ae:f1:41:82: f8:0b:a4:45:82:f0:a7:91:39:cb:63:2e:f1:ef:7a: c7:48:cb:70:01:06:07:bf:fb:cc:0d:86:98:d5:ad: 6d:c8:77:83:a2:bc:e7:d6:31:46:c0:16:b4:62:f1: ab:92:27:0a:a1:89:79:46:9b:44:ca:d2:b0:30:38: ab:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F4:2D:00:4C:95:18:C9:B7:05:36:35:00:04:61:A3:FB:84:64:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl X509v3 Authority Key Identifier: keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer sbgp-ipAddrBlock: critical IPv4: 167.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:05:29:77:30:e1:0d:95:5a:f4:0f:3d:ab:d9:29:65:a3:16: 0d:31:c6:42:0b:e3:5c:4c:90:67:a4:f1:47:a0:2b:2c:a3:eb: bb:86:4e:6c:dc:79:68:7d:75:60:c5:f3:36:fa:54:77:63:38: 52:4c:4e:4c:8e:ab:53:11:6e:0f:88:eb:81:ee:ac:f0:b8:fb: 52:0b:29:2e:da:1d:16:bd:9f:41:58:51:b2:19:a2:0f:d0:f7: bf:d0:47:de:fa:6b:30:b1:2e:dd:15:d3:a5:39:9e:48:08:b5: 26:bd:8d:76:c8:c6:d8:16:fe:e7:f0:ef:7d:22:01:29:09:ca: ec:2d:ec:8c:25:6b:b1:99:e0:00:8e:7e:5b:26:34:95:f4:21: 74:ec:f2:0d:17:0b:70:07:74:52:8b:1f:e3:37:10:7c:b1:d3: fd:44:d2:8f:c4:64:55:af:35:41:3c:b7:d9:1c:4f:20:04:fa: 2e:bf:c6:f9:99:9c:da:b2:fc:32:72:6c:77:7a:09:48:2a:41: 60:0d:7b:ec:92:4c:87:17:f0:85:00:91:fd:4a:8b:da:8c:04: b8:1c:6e:7d:ed:f0:2b:8b:7c:c8:5c:27:b9:40:f1:83:5b:2f: ac:07:29:47:b2:1b:b8:44:84:89:69:2c:20:e4:22:da:01:a2: 89:3d:9a:d3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEo84Cnxv3zsGtbElsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5 MjMxMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk ZTc1ZDVjNDEtM2QyYS00ZTQyLWJiNDktOGRhNWRiMzA5NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSamtJFkfK6COejcqAn1eXw9feJo2b7l9wsL ecNLBYgjtAt/sp9Axvusd6lSsXsKNd06t4U2RcspM3y+1GCtNH46eOiGXtY8RArT PMPnjvORtI9dt1PwmIsYjx6I1cuiNC/yMhyeW+x8P+SgV1COC96Nxy8HS6RAeiO2 S4fF1y2K8Cus0i+MPWBWZ1kFugnq/9QMEnoYI1fT5c4nYmT2TjtQbTK3IgYmvxW5 JJH8ID55uye6I2JOvYnNMEEw/K7xQYL4C6RFgvCnkTnLYy7x73rHSMtwAQYHv/vM DYaY1a1tyHeDorzn1jFGwBa0YvGrkicKoYl5RptEytKwMDirjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLr0LQBMlRjJtwU2NQAEYaP7hGRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMWY5 NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvYmQ1M2EzYzItYjQyNS0z MmRlLWFiYWUtY2JiMmFiODc4OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjFmOTc2ZmQtN2ZhMC00MzIzLTk3 ZmEtMzViYjg2OWE5MjMxL2IxZjk3NmZkLTdmYTAtNDMyMy05N2ZhLTM1YmI4Njlh OTIzMS5jcmwwHwYDVR0jBBgwFoAUrpokcZiF5gtdP+4v/cqhapTgJzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJi ODY5YTkyMzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp2AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjgUpdzDhDZVa9A89q9kpZaMWDTHGQgvjXEyQZ6TxR6ArLKPru4ZObNx5 aH11YMXzNvpUd2M4UkxOTI6rUxFuD4jrge6s8Lj7UgspLtodFr2fQVhRshmiD9D3 v9BH3vprMLEu3RXTpTmeSAi1Jr2NdsjG2Bb+5/DvfSIBKQnK7C3sjCVrsZngAI5+ WyY0lfQhdOzyDRcLcAd0Uosf4zcQfLHT/UTSj8RkVa81QTy32RxPIAT6Lr/G+Zmc 2rL8MnJsd3oJSCpBYA177JJMhxfwhQCR/UqL2owEuBxufe3wK4t8yFwnuUDxg1sv rAcpR7IbuESEiWksIOQi2gGiiT2a0w== -----END CERTIFICATE-----Generated at Tue Jul 1 11:47:26 2025 by rpki-client