$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa File: f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa (raw, json) Hash identifier: +GCIb/JGh9V+k8R3FlRI9XGzq8cHBjk/4PBLHW7lEfM= Subject key identifier: 50:24:E6:8F:58:BE:7C:17:0B:BD:49:64:F6:30:EB:14:B2:26:E5:71 Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F432858491246A2252DC9860337900218 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 35847 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a2:25:2d:c9:86:03:37:90:02:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2157ea09-0dbc-493d-9319-b36bad8b68c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:f5:0d:4a:7c:e0:7b:4a:b4:36:94:0e:4b: cc:0e:de:d8:06:67:7b:d1:ad:9d:3d:48:ad:a5:c5: 83:63:16:0f:60:51:df:b9:47:1d:a5:3f:31:eb:9d: 68:d0:7f:01:7d:10:80:87:a3:35:38:40:58:15:87: c4:72:4d:ea:8e:bd:5a:5f:05:59:49:35:d7:e3:c7: 8b:95:82:5b:53:f7:cf:b2:37:e8:be:58:2c:15:93: 81:0e:53:b5:8f:94:cf:0a:f0:11:5b:ed:0b:7c:85: 6c:ae:35:07:e2:71:62:44:6e:ad:83:2b:bc:f1:e6: 85:8f:33:aa:f9:e2:b1:0b:ba:a1:71:4c:7e:0d:ee: d1:8e:25:94:e8:e0:79:e4:e5:35:2e:14:90:43:3a: de:72:bd:6c:5c:d0:a4:55:f8:53:6b:90:41:e9:e7: 81:4f:01:6a:8e:b7:5c:27:08:39:da:b1:b5:89:15: 5d:37:40:77:27:bc:a8:7f:1d:73:c5:41:a0:37:44: ad:f9:65:09:a9:ca:aa:68:56:b2:2f:05:97:27:9e: df:cb:fc:7d:f5:26:bf:f1:a2:6f:ac:be:7f:14:92: aa:21:a0:a6:cc:70:96:8c:eb:bc:6e:ce:a4:a3:72: d4:a1:6b:7d:55:99:2c:f9:83:3a:03:64:56:ae:67: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:E6:8F:58:BE:7C:17:0B:BD:49:64:F6:30:EB:14:B2:26:E5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a7:66:5d:d2:af:f2:df:9f:3a:3e:da:ff:c0:d8:ea:a5:0c: 6b:0d:22:fe:59:20:86:cb:66:3b:bf:90:e6:2f:eb:b0:0e:70: 96:94:88:20:ef:55:79:9e:65:9e:6b:f0:41:73:2e:ec:6d:1d: 6c:e2:7f:6c:5d:6b:27:cb:e5:be:a6:cc:47:02:49:ba:8d:4b: af:f6:0a:a7:ca:95:64:30:6d:bd:f7:c1:3a:21:0a:e9:22:31: 46:09:d5:8f:79:7c:a2:16:fd:e9:85:c3:e9:25:e9:bd:d7:b4: fd:5b:7b:c8:d5:92:bd:83:df:1c:fb:ea:28:57:d9:27:20:21: bf:32:2e:e9:9a:ae:a7:b5:6e:66:11:c8:9a:fa:68:a5:5a:3a: 80:d4:1b:4e:d8:d1:4a:b3:9f:5f:72:58:05:3b:1c:5b:a4:65: a9:0b:97:a2:e4:a4:7e:96:08:f1:9b:ee:54:1d:cf:fa:68:13: 4a:32:c5:36:83:39:5d:98:dd:64:ea:32:47:03:df:7e:d5:e4: 62:16:b5:61:6c:cf:1a:de:82:59:12:40:ac:be:ec:11:49:fa: 03:91:09:ad:2f:ba:90:cc:c1:70:b5:84:7e:c6:22:db:0c:9c: 39:45:26:ac:69:06:38:f8:83:e1:38:d3:ca:19:1b:49:ec:ed: c6:91:8e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqIlLcmGAzeQAhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MjE1N2VhMDktMGRiYy00OTNkLTkzMTktYjM2YmFkOGI2OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFP1DUp84HtKtDaUDkvMDt7YBmd70a2dPUit pcWDYxYPYFHfuUcdpT8x651o0H8BfRCAh6M1OEBYFYfEck3qjr1aXwVZSTXX48eL lYJbU/fPsjfovlgsFZOBDlO1j5TPCvARW+0LfIVsrjUH4nFiRG6tgyu88eaFjzOq +eKxC7qhcUx+De7RjiWU6OB55OU1LhSQQzrecr1sXNCkVfhTa5BB6eeBTwFqjrdc Jwg52rG1iRVdN0B3J7yofx1zxUGgN0St+WUJqcqqaFayLwWXJ57fy/x99Sa/8aJv rL5/FJKqIaCmzHCWjOu8bs6ko3LUoWt9VZks+YM6A2RWrmeQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAk5o9YvnwXC71JZPYw6xSyJuVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvZjZiM2Y2YTYtM2E4Yy0z ZTA3LTgwYWItMjhhOGY0MzI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2nZl3Sr/Lfnzo+2v/A2OqlDGsNIv5ZIIbLZju/kOYv67AOcJaUiCDv VXmeZZ5r8EFzLuxtHWzif2xdayfL5b6mzEcCSbqNS6/2CqfKlWQwbb33wTohCuki MUYJ1Y95fKIW/emFw+kl6b3XtP1be8jVkr2D3xz76ihX2ScgIb8yLumarqe1bmYR yJr6aKVaOoDUG07Y0Uqzn19yWAU7HFukZakLl6LkpH6WCPGb7lQdz/poE0oyxTaD OV2Y3WTqMkcD337V5GIWtWFszxreglkSQKy+7BFJ+gORCa0vupDMwXC1hH7GItsM nDlFJqxpBjj4g+E408oZG0ns7caRjrI= -----END CERTIFICATE-----Generated at Fri May 9 08:29:05 2025 by rpki-client