$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa File: aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa (raw, json) Hash identifier: /j+GeWz0O/qP4ri066lLX2sehf2skwvlr2Bk+bjWH+A= Subject key identifier: D8:4C:8B:D9:66:B0:E8:D2:AA:D1:50:E7:D8:49:D7:9D:0A:0C:3C:56 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584A4F05CEA41A3E20BA307AA080 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 46475 IP address blocks: 185.167.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:ce:a4:1a:3e:20:ba:30:7a:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=0ed9623f-39c0-400c-947b-8bd340f86a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:21:9c:45:50:32:ce:05:dd:2c:0a:a9:7f: 80:4d:aa:e9:54:2b:32:65:38:e8:e0:82:b4:79:f4: 1f:c3:4a:ce:fb:8f:42:b1:07:44:69:b6:7a:24:49: 8b:29:43:e3:88:02:f9:06:cc:60:e8:42:7a:5a:56: b2:0c:d3:82:7a:4f:db:25:74:7a:7d:6a:67:6f:80: 3a:60:57:8b:f6:7e:f7:20:f3:37:83:ab:f4:04:0d: 6f:da:eb:c2:44:ad:78:b4:35:42:c4:e6:f9:6b:aa: e9:5a:60:90:50:09:2b:51:97:28:c5:cb:71:6a:e8: e4:6e:1e:b8:52:8b:40:b4:a9:2a:3a:25:89:37:a4: 4d:4a:82:2c:e1:30:d4:45:21:19:a8:d2:96:47:9d: 77:f4:ff:8e:e2:71:fc:7e:f3:0a:ca:4d:cf:ca:37: 58:d6:8b:83:ec:5c:56:f4:00:22:a4:5d:e0:b8:5e: ff:ab:20:65:ff:cc:ed:f0:39:a1:18:a7:f8:3b:6f: 14:93:5c:eb:98:d2:94:32:f5:8d:18:66:3a:83:40: ce:45:15:1d:fd:1f:58:37:0e:ee:83:01:5a:31:a3: df:04:46:f3:66:97:b9:a6:57:15:8d:c7:eb:c6:61: 3d:4f:a6:8d:1d:f8:52:ff:3a:dc:88:8e:fd:0b:9f: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4C:8B:D9:66:B0:E8:D2:AA:D1:50:E7:D8:49:D7:9D:0A:0C:3C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 185.167.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:eb:3b:b8:30:a3:c0:2f:10:22:03:d2:d5:44:05:29:74: 3b:d8:f9:21:b4:53:83:e2:f7:dc:0c:d7:24:22:af:7c:14:52: 4d:eb:f6:05:da:2f:99:40:f1:14:86:a3:60:f7:5f:c0:6d:9a: 98:62:2d:c9:b9:f7:98:30:3f:a7:f0:0f:51:79:bf:a7:0e:4e: 19:9e:2e:60:bd:b9:60:85:60:e1:36:43:9f:6a:2d:15:a5:88: 03:61:21:e7:69:50:f8:71:4d:ad:5a:6d:d2:4e:49:1c:15:6e: 33:7e:e2:b3:8a:bc:8b:00:65:2e:97:1d:7d:da:04:bc:ee:2d: 4a:01:ef:4e:21:97:a2:f4:c6:14:26:6d:45:68:ce:93:b0:cb: 28:3f:97:c0:46:33:2e:43:89:26:ca:bc:19:c3:62:f7:23:09: 8a:fd:bf:c5:35:25:41:80:bf:a0:02:90:85:fc:87:92:15:95: 9d:b4:fb:8a:48:48:f6:38:6f:73:26:15:b9:03:35:21:83:6b: 95:4d:f6:a1:b7:ce:05:5a:3f:79:1e:6e:5c:a4:ee:ba:d7:ab: fa:d4:65:70:93:b0:8a:e8:5a:f7:eb:8d:90:a4:8a:b9:9b:5e: 36:0c:6e:1f:9a:8b:e4:b5:49:f9:15:6d:a9:bc:79:b1:15:9d: a5:00:b6:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc6kGj4gujB6oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MGVkOTYyM2YtMzljMC00MDBjLTk0N2ItOGJkMzQwZjg2YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7EhnEVQMs4F3SwKqX+ATarpVCsyZTjo4IK0 efQfw0rO+49CsQdEabZ6JEmLKUPjiAL5Bsxg6EJ6WlayDNOCek/bJXR6fWpnb4A6 YFeL9n73IPM3g6v0BA1v2uvCRK14tDVCxOb5a6rpWmCQUAkrUZcoxctxaujkbh64 UotAtKkqOiWJN6RNSoIs4TDURSEZqNKWR5139P+O4nH8fvMKyk3PyjdY1ouD7FxW 9AAipF3guF7/qyBl/8zt8DmhGKf4O28Uk1zrmNKUMvWNGGY6g0DORRUd/R9YNw7u gwFaMaPfBEbzZpe5plcVjcfrxmE9T6aNHfhS/zrciI79C582mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhMi9lmsOjSqtFQ59hJ150KDDxWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvYWE1ZWMxOWMtZjI5My0z OTlhLTk2MWUtZjFmZTRmNmJjYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuac8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKu6zu4MKPALxAiA9LVRAUpdDvY+SG0U4Pi99wM1yQir3wUUk3r9gXa L5lA8RSGo2D3X8BtmphiLcm595gwP6fwD1F5v6cOThmeLmC9uWCFYOE2Q59qLRWl iANhIedpUPhxTa1abdJOSRwVbjN+4rOKvIsAZS6XHX3aBLzuLUoB704hl6L0xhQm bUVozpOwyyg/l8BGMy5DiSbKvBnDYvcjCYr9v8U1JUGAv6ACkIX8h5IVlZ20+4pI SPY4b3MmFbkDNSGDa5VN9qG3zgVaP3keblyk7rrXq/rUZXCTsIroWvfrjZCkirmb XjYMbh+ai+S1SfkVbam8ebEVnaUAtuU= -----END CERTIFICATE-----Generated at Sun Jun 29 15:54:21 2025 by rpki-client