$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa File: 2ddea806-81f0-34de-aed2-4e3ace1914b0.roa (raw, json) Hash identifier: KWJPuHRoSbm5073kx3jwfrOn0K58sRM5QqFGkgsE2H4= Subject key identifier: 20:44:1B:01:5D:46:3F:38:A3:D6:46:7D:AE:80:B5:BF:6A:E0:DF:80 Certificate issuer: /CN=b59f0cf0-b1db-4139-bfc6-e624159d7343 Certificate serial: 010D0C9F4328584A1465777BD22AE742DA424E00 Authority key identifier: AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 31898 IP address blocks: 168.151.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:77:7b:d2:2a:e7:42:da:42:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59f0cf0-b1db-4139-bfc6-e624159d7343 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=c84053ce-d043-4401-bdd9-fcde1b023483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:8f:9b:51:18:38:76:58:68:7f:bb:8a:02: be:45:0f:e2:58:03:ef:16:51:5c:75:a4:2f:4a:a2: 85:c4:6c:63:2f:f5:88:46:5a:c4:c6:d8:c2:85:db: 91:80:b3:25:1c:1f:ff:25:04:91:bc:fa:1c:47:0b: f8:6c:7c:47:b9:e0:88:55:20:f4:64:af:f3:7a:5d: c1:3f:53:4b:19:71:3d:7d:79:4e:19:f7:12:b1:e6: 44:b2:81:51:39:ad:46:70:c5:c4:15:2a:c8:2a:82: 0b:06:17:99:9b:b5:c2:79:4b:d0:61:28:7e:7a:a9: 83:e9:ba:04:1d:34:d9:b0:ea:13:85:de:45:04:68: 0d:48:79:30:79:2e:55:06:5b:f9:9d:1e:fb:cf:9b: 25:3e:e1:42:09:8c:c5:e3:16:72:49:36:36:7b:78: 41:37:5f:6d:8d:ed:f4:f4:b5:40:29:91:2c:0e:57: 88:eb:c5:d4:d3:6c:76:98:40:90:70:be:3e:53:6b: 9e:b9:f9:3b:60:48:a8:e0:13:ff:7a:d7:c2:00:a6: 5f:f9:45:52:3f:ea:04:5f:25:35:bb:c1:60:70:e7: 4c:6d:97:1a:81:90:37:fb:9f:d2:8d:e9:ea:54:cc: d1:21:87:c9:7e:3f:2b:f6:c7:f0:23:6f:b4:a1:cf: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:44:1B:01:5D:46:3F:38:A3:D6:46:7D:AE:80:B5:BF:6A:E0:DF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl X509v3 Authority Key Identifier: keyid:AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer sbgp-ipAddrBlock: critical IPv4: 168.151.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a0:2a:c0:88:16:69:44:d4:79:be:52:04:fe:1a:4d:bf:17: 17:ee:a0:b7:18:11:19:ac:d9:72:cd:b4:92:5c:73:64:d7:98: 22:04:3b:61:4b:1a:68:5b:e3:c6:e2:84:bd:90:d6:29:12:68: 90:89:f2:74:b6:83:1f:1b:43:e4:cb:2d:49:cc:07:d0:3a:11: 47:76:dd:d7:9d:2a:35:00:d9:2b:93:25:67:13:90:c6:84:65: f9:6e:c4:b2:33:fc:1d:60:c3:84:46:2e:10:ab:fe:d8:17:3d: 16:3e:4f:46:5a:a4:98:f1:3b:64:9e:53:84:f9:98:ff:48:3c: c3:14:39:8a:8c:1d:0a:7a:df:cf:37:46:9d:86:cf:9e:f4:0f: c1:d7:cb:17:d7:6e:87:bf:f4:0a:04:a4:21:70:7d:fd:36:6a: f8:9c:d6:eb:d5:31:f4:71:6d:4a:4c:6a:c8:19:7e:c7:fc:5c: d7:41:2d:ad:e2:b5:28:0f:3c:32:90:fe:02:f2:b1:37:4d:2f: fc:89:70:61:78:3c:5a:97:8c:01:17:03:e4:bd:b8:e8:bd:2f: 7d:2b:43:40:fe:d4:6a:6b:51:d0:50:ea:26:6d:d8:24:2a:3f: 67:3e:dc:31:db:7c:62:7d:8f:4a:17:da:e6:59:88:cd:0c:af: c9:43:ba:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXd70irnQtpCTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU5ZjBjZjAtYjFkYi00MTM5LWJmYzYtZTYyNDE1OWQ3 MzQzMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Yzg0MDUzY2UtZDA0My00NDAxLWJkZDktZmNkZTFiMDIzNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjOPm1EYOHZYaH+7igK+RQ/iWAPvFlFcdaQv SqKFxGxjL/WIRlrExtjChduRgLMlHB//JQSRvPocRwv4bHxHueCIVSD0ZK/zel3B P1NLGXE9fXlOGfcSseZEsoFROa1GcMXEFSrIKoILBheZm7XCeUvQYSh+eqmD6boE HTTZsOoThd5FBGgNSHkweS5VBlv5nR77z5slPuFCCYzF4xZySTY2e3hBN19tje30 9LVAKZEsDleI68XU02x2mECQcL4+U2ueufk7YEio4BP/etfCAKZf+UVSP+oEXyU1 u8FgcOdMbZcagZA3+5/SjenqVMzRIYfJfj8r9sfwI2+0oc8CDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBEGwFdRj84o9ZGfa6Atb9q4N+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlm MGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0MTU5ZDczNDMvMmRkZWE4MDYtODFmMC0z NGRlLWFlZDItNGUzYWNlMTkxNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjU5ZjBjZjAtYjFkYi00MTM5LWJm YzYtZTYyNDE1OWQ3MzQzL2I1OWYwY2YwLWIxZGItNDEzOS1iZmM2LWU2MjQxNTlk NzM0My5jcmwwHwYDVR0jBBgwFoAUqvHU4NNuFDrX637PeSGpAaKpEIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlmMGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0 MTU5ZDczNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOgKsCIFmlE1Hm+UgT+Gk2/FxfuoLcYERms2XLNtJJcc2TXmCIEO2FL Gmhb48bihL2Q1ikSaJCJ8nS2gx8bQ+TLLUnMB9A6EUd23dedKjUA2SuTJWcTkMaE ZfluxLIz/B1gw4RGLhCr/tgXPRY+T0ZapJjxO2SeU4T5mP9IPMMUOYqMHQp63883 Rp2Gz570D8HXyxfXboe/9AoEpCFwff02avic1uvVMfRxbUpMasgZfsf8XNdBLa3i tSgPPDKQ/gLysTdNL/yJcGF4PFqXjAEXA+S9uOi9L30rQ0D+1GprUdBQ6iZt2CQq P2c+3DHbfGJ9j0oX2uZZiM0Mr8lDuvs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:33:56 2025 by rpki-client