$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa File: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (raw, json) Hash identifier: w9hZZo2X6aXE8fuMmVJtSCHdf2xvHQpjLzDH8l7esK4= Subject key identifier: 81:1E:A1:2A:13:4A:64:30:E6:6F:E4:C3:03:1A:0A:0F:12:DD:4C:64 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F43285849CBCFA45F4220EA5B35F8ED00 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 54041 IP address blocks: 167.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a4:5f:42:20:ea:5b:35:f8:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=43ad3068-008c-4d65-b63c-e31907af7133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:2d:64:e6:6b:5b:55:be:df:d2:02:a7:e2: a1:f3:c6:b5:2d:02:56:92:a2:e9:53:d7:6c:a7:b0: 05:7c:0b:64:50:6b:27:e7:69:5d:3f:97:63:2c:b6: da:66:18:c0:50:b0:fc:52:ce:cd:7e:59:5e:28:7d: 45:6d:f0:53:09:98:8f:d3:fb:b6:b3:1d:c4:bc:85: 85:53:a9:b7:ff:31:19:24:7f:ef:a3:84:4a:3b:bd: bf:5f:d2:0e:60:b5:81:51:95:b8:90:34:e0:ea:f5: d8:5f:fc:09:7e:9c:03:57:64:8e:ae:f9:00:e2:7c: 35:02:ae:88:b1:47:ca:b8:94:f2:28:ae:94:ef:f9: 40:80:a4:49:7b:f2:d5:ed:0f:5b:8a:b8:13:b4:5a: 02:92:07:c0:eb:dc:a8:a6:c9:a7:0e:96:86:7a:fd: 20:72:f0:a3:e8:fb:1d:ac:5e:eb:9f:28:76:72:99: 90:c3:9d:2a:07:74:09:76:c6:4e:24:69:06:58:ce: b7:70:b9:99:3b:94:3d:19:63:9f:51:a7:a7:a4:ee: 13:6e:e6:d1:a1:b8:65:1f:c6:7f:da:68:ee:3f:56: 38:b7:fb:ff:b4:f7:dd:d1:b1:0c:16:4f:a7:ae:6c: 44:0b:c9:7d:e2:83:2e:c9:23:f1:2b:02:95:d1:76: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1E:A1:2A:13:4A:64:30:E6:6F:E4:C3:03:1A:0A:0F:12:DD:4C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: 167.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d3:e1:46:17:61:82:b7:96:f1:15:a7:04:0d:6f:f0:f1:67: 8a:aa:8a:13:59:96:14:53:96:c3:b1:cf:dc:09:a0:41:4b:42: 0d:f6:51:8d:23:2a:1d:29:37:00:5d:13:95:55:24:84:9a:95: 27:d7:0f:53:03:31:9e:a6:1b:8c:f4:8e:d2:c2:aa:e5:e3:5f: 1d:06:bc:62:1f:86:86:5b:64:09:58:95:b9:de:c9:8d:7a:7e: a9:25:23:4e:43:05:a3:cc:e4:a1:26:d5:d6:58:b7:5b:f2:03: 35:8d:27:b0:28:7d:56:7e:6a:e7:a7:c5:d0:33:d6:02:e1:2e: 1b:ab:2a:5b:7e:de:14:9a:f3:2f:65:57:1d:a8:c2:89:f6:7c: 79:9a:14:38:c8:06:2e:25:f6:6a:5d:ca:a6:72:4f:64:9a:9f: ae:c0:be:4b:de:36:d8:e6:c2:e2:1b:69:45:2b:a3:53:43:af: cc:27:1a:5b:93:44:12:b5:62:81:ec:02:84:07:ad:6b:7e:b2: 1f:4f:52:36:83:a1:08:61:25:20:bb:b9:5a:02:83:73:47:7e: 46:59:6d:38:dd:3c:81:40:66:ca:82:a6:3c:59:1b:66:9b:39: 91:07:b3:13:5f:f8:4b:b2:93:9e:92:46:e1:db:bc:cb:55:df: 0e:85:77:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6RfQiDqWzX47QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NDNhZDMwNjgtMDA4Yy00ZDY1LWI2M2MtZTMxOTA3YWY3MTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPAtZOZrW1W+39ICp+Kh88a1LQJWkqLpU9ds p7AFfAtkUGsn52ldP5djLLbaZhjAULD8Us7NflleKH1FbfBTCZiP0/u2sx3EvIWF U6m3/zEZJH/vo4RKO72/X9IOYLWBUZW4kDTg6vXYX/wJfpwDV2SOrvkA4nw1Aq6I sUfKuJTyKK6U7/lAgKRJe/LV7Q9birgTtFoCkgfA69yopsmnDpaGev0gcvCj6Psd rF7rnyh2cpmQw50qB3QJdsZOJGkGWM63cLmZO5Q9GWOfUaenpO4TbubRobhlH8Z/ 2mjuP1Y4t/v/tPfd0bEMFk+nrmxEC8l94oMuySPxKwKV0XbJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEeoSoTSmQw5m/kwwMaCg8S3UxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvZjkxZDMwZjAtYThjNC0z Mzk4LWE4MGYtMjE4YjEyNTVjZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7T4UYXYYK3lvEVpwQNb/DxZ4qqihNZlhRTlsOxz9wJoEFLQg32UY0j Kh0pNwBdE5VVJISalSfXD1MDMZ6mG4z0jtLCquXjXx0GvGIfhoZbZAlYlbneyY16 fqklI05DBaPM5KEm1dZYt1vyAzWNJ7AofVZ+auenxdAz1gLhLhurKlt+3hSa8y9l Vx2owon2fHmaFDjIBi4l9mpdyqZyT2San67AvkveNtjmwuIbaUUro1NDr8wnGluT RBK1YoHsAoQHrWt+sh9PUjaDoQhhJSC7uVoCg3NHfkZZbTjdPIFAZsqCpjxZG2ab OZEHsxNf+Euyk56SRuHbvMtV3w6Fd/4= -----END CERTIFICATE-----Generated at Mon Jun 30 10:24:26 2025 by rpki-client