$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ff6eca0-53f4-33c7-9ecf-14b9b6032014.roa File: 2ff6eca0-53f4-33c7-9ecf-14b9b6032014.roa (raw, json) Hash identifier: jokj4U/xXTBGL/oTP+CHAb+u+ny1yy4/u9j9e9BFXrU= Subject key identifier: 10:09:E3:2C:B2:F1:DB:7C:DE:EE:86:6F:84:C4:81:3A:85:CC:6D:54 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285849DC8FD21AC82DFD6AA92FCD80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ff6eca0-53f4-33c7-9ecf-14b9b6032014.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 54113 IP address blocks: 167.82.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:d2:1a:c8:2d:fd:6a:a9:2f:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=bca0ce6b-6d3d-473c-bd7a-c256395f9f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:49:14:bc:89:cf:b5:af:d0:9c:e8:db:66: 3a:f7:e2:66:80:1f:0b:da:87:ba:98:da:36:a0:94: 3c:26:11:6a:5b:8e:3f:22:11:31:cb:55:b4:e9:d6: b3:3b:61:cd:3b:82:b9:5d:34:fc:72:54:22:76:4a: b5:dc:81:3b:79:8c:84:0c:38:02:69:83:7b:14:11: 40:c6:dc:b9:89:74:16:9d:09:8d:fe:c3:ad:0e:65: 69:ee:38:1d:be:63:55:f3:43:5b:f4:3c:78:d8:95: 4f:44:f1:0a:39:94:53:7c:e0:5a:a3:20:80:fb:83: 35:1b:9d:83:a9:5d:71:76:bc:54:cb:17:5e:ee:ad: 9b:bd:eb:6a:55:02:51:c8:b1:12:d5:1d:c4:49:db: 40:fe:bc:ca:92:2c:95:35:c7:11:93:f0:ef:19:fa: f8:c5:5c:b1:b7:56:3a:42:bf:cf:64:89:e2:e8:83: 65:1a:a7:67:3f:15:41:47:94:aa:ea:66:9f:f7:3f: 31:f5:32:de:f4:da:b0:3b:b1:40:43:ee:19:da:fc: 61:b8:43:44:9d:13:da:ca:5d:0f:b1:58:4c:db:86: 66:bf:9d:ea:2f:2a:00:4a:ab:1f:e5:ed:e6:de:4e: 6d:22:7f:94:24:f1:58:ce:da:d1:97:52:c9:83:a8: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:E3:2C:B2:F1:DB:7C:DE:EE:86:6F:84:C4:81:3A:85:CC:6D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ff6eca0-53f4-33c7-9ecf-14b9b6032014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 167.82.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b7:60:36:28:b9:07:6a:c0:a6:eb:02:ff:c4:1c:8e:31:a4: 53:03:e6:78:0f:53:58:62:92:a7:81:ca:c9:16:35:cb:47:dc: bc:34:98:b9:9f:47:c7:e2:f7:22:47:0d:50:6c:86:3f:56:05: 39:16:8b:21:ed:51:98:4f:b2:38:b6:21:2e:0e:03:91:d2:d2: 70:eb:0e:19:f4:c5:24:7f:d3:78:df:bf:70:b1:32:d4:36:2d: 06:30:97:79:69:a2:20:8f:f1:14:13:51:04:c8:e0:21:67:bb: 71:b2:20:4e:41:b9:e3:e2:85:92:4e:d3:b0:15:9b:e2:57:ee: a4:40:6c:02:18:c1:a0:8f:ba:2f:8a:77:4d:93:c8:cb:9d:cf: 5c:05:55:32:3b:95:45:a4:f3:47:21:85:3b:f5:a9:a0:c2:7d: d8:bd:a8:6b:b0:14:a2:74:93:ad:23:3f:ac:86:a6:fa:20:70: d7:d2:64:8e:1a:62:10:ef:78:8c:de:ad:b6:48:d4:f7:d7:9c: 5b:af:7c:7b:82:11:9f:f6:a7:64:3b:31:c4:06:5a:f7:64:0a: 35:4f:6f:97:a8:27:a1:fa:52:de:e4:10:49:ab:89:f9:6c:68: 67:1f:f8:35:0a:e9:89:ee:2c:80:53:18:a6:68:90:5c:06:30: f8:e9:a8:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj9IayC39aqkvzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YmNhMGNlNmItNmQzZC00NzNjLWJkN2EtYzI1NjM5NWY5ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtRJFLyJz7Wv0Jzo22Y69+JmgB8L2oe6mNo2 oJQ8JhFqW44/IhExy1W06dazO2HNO4K5XTT8clQidkq13IE7eYyEDDgCaYN7FBFA xty5iXQWnQmN/sOtDmVp7jgdvmNV80Nb9Dx42JVPRPEKOZRTfOBaoyCA+4M1G52D qV1xdrxUyxde7q2bvetqVQJRyLES1R3ESdtA/rzKkiyVNccRk/DvGfr4xVyxt1Y6 Qr/PZIni6INlGqdnPxVBR5Sq6maf9z8x9TLe9NqwO7FAQ+4Z2vxhuENEnRPayl0P sVhM24Zmv53qLyoASqsf5e3m3k5tIn+UJPFYztrRl1LJg6ibHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAJ4yyy8dt83u6Gb4TEgTqFzG1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMmZmNmVjYTAtNTNmNC0z M2M3LTllY2YtMTRiOWI2MDMyMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1KhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF23YDYouQdqwKbrAv/EHI4xpFMD5ngPU1hikqeByskWNctH3Lw0mLmf R8fi9yJHDVBshj9WBTkWiyHtUZhPsji2IS4OA5HS0nDrDhn0xSR/03jfv3CxMtQ2 LQYwl3lpoiCP8RQTUQTI4CFnu3GyIE5BuePihZJO07AVm+JX7qRAbAIYwaCPui+K d02TyMudz1wFVTI7lUWk80chhTv1qaDCfdi9qGuwFKJ0k60jP6yGpvogcNfSZI4a YhDveIzerbZI1PfXnFuvfHuCEZ/2p2Q7McQGWvdkCjVPb5eoJ6H6Ut7kEEmrifls aGcf+DUK6YnuLIBTGKZokFwGMPjpqOY= -----END CERTIFICATE-----Generated at Mon Jun 30 20:29:45 2025 by rpki-client