$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/bff32ba3-85a6-3c72-b447-303a431e3a1b.roa File: bff32ba3-85a6-3c72-b447-303a431e3a1b.roa (raw, json) Hash identifier: 4w7FWDZNVyqJnQBO364ABMSOH9+UNZn16rorbgV0PfQ= Subject key identifier: 13:96:D4:E9:83:B2:07:1D:C9:FE:40:07:64:D3:F0:4C:28:47:A1:9C Certificate issuer: /CN=44c2b619-4d8d-47ef-ab56-fedefb0e01bb Certificate serial: 010D0C9F4328584A6358FD9AD58F0F89741D0740 Authority key identifier: 76:C9:87:90:5E:9E:64:24:93:86:65:30:07:72:39:36:87:68:9B:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/bff32ba3-85a6-3c72-b447-303a431e3a1b.roa Signing time: Wed 02 Jul 2025 19:45:06 +0000 ROA not before: Wed 02 Jul 2025 19:45:06 +0000 ROA not after: Tue 30 Sep 2025 19:45:06 +0000 asID: 398465 IP address blocks: 167.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:58:fd:9a:d5:8f:0f:89:74:1d:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c2b619-4d8d-47ef-ab56-fedefb0e01bb Validity Not Before: Jul 2 19:45:06 2025 GMT Not After : Sep 30 19:45:06 2025 GMT Subject: CN=5d9beed2-db00-48cd-b2ad-48794f9ef14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:05:0e:bf:39:a0:db:6b:cf:23:1f:d6:6b: 46:96:cb:ea:d3:98:17:e2:39:a5:69:d8:6b:f6:e7: bf:0b:ce:39:6a:ee:af:52:a5:bb:02:c9:2d:84:5d: dd:fd:93:83:7a:6a:05:f7:2f:fc:e8:de:c2:a7:65: c6:4e:0a:8e:2a:59:23:1c:d7:04:cd:5f:f9:84:65: db:01:20:9a:6a:81:2f:ce:3d:3b:4d:a9:e3:0c:eb: 94:55:6b:52:1e:d4:92:da:99:67:51:aa:78:90:ac: 1c:e2:b2:b9:f6:53:41:f1:d5:e3:f6:1d:cd:db:ab: 20:63:ee:a5:b6:b1:62:16:19:88:7b:dd:82:9d:11: eb:8e:57:29:1f:4c:61:35:4c:4c:67:17:fa:cb:44: b9:e3:81:5e:c1:80:34:f8:7f:4e:b7:86:f5:e3:ee: 32:b4:8b:00:71:3b:16:28:1c:19:63:fe:88:62:df: 84:fb:5f:41:96:59:01:ed:90:a4:f2:57:76:4b:bf: 67:9d:60:dc:7a:30:d8:c7:aa:6c:3b:82:10:13:7b: 86:4e:1d:78:29:b9:5f:21:eb:6e:c4:e9:2e:56:0b: 27:a3:f6:ab:27:b3:6c:ef:8b:62:06:5a:b2:0c:58: a3:a5:32:47:be:81:cb:8f:76:9e:fe:a5:3c:d4:8c: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:96:D4:E9:83:B2:07:1D:C9:FE:40:07:64:D3:F0:4C:28:47:A1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/bff32ba3-85a6-3c72-b447-303a431e3a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.crl X509v3 Authority Key Identifier: keyid:76:C9:87:90:5E:9E:64:24:93:86:65:30:07:72:39:36:87:68:9B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.cer sbgp-ipAddrBlock: critical IPv4: 167.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:07:9d:6d:a6:6c:96:dd:91:1d:26:8a:1a:eb:47:09:15:e5: d3:81:b0:be:89:e0:5e:e5:f0:2a:64:42:ba:ac:77:cb:66:1a: ba:6d:00:34:d2:a3:7e:7d:47:37:16:ab:15:6d:5c:9e:4b:21: be:bc:87:aa:13:16:e4:ed:84:af:ac:6d:80:c3:5f:90:86:af: 1a:28:9d:78:84:a0:bb:3b:f5:a5:d7:16:77:a4:ee:da:9e:75: 78:b3:f0:cc:4b:fc:6e:b8:f0:7c:5d:38:93:b0:34:e9:f9:1e: bc:6a:af:92:92:e7:8f:d4:81:eb:6a:60:2c:16:ab:bc:28:4f: 90:bb:49:84:bb:74:9d:b2:45:af:17:75:26:54:98:51:5d:23: 46:8a:58:f1:af:3e:c2:fe:83:12:72:06:fa:05:7d:40:0b:82: f0:9b:ad:7d:d7:c2:47:df:78:af:49:88:36:48:6a:06:a5:76: 18:02:92:fa:6c:27:d5:a8:7e:bc:f1:82:f3:dc:33:50:b8:45: f3:4a:c6:fe:7c:19:3c:9b:17:9f:4b:d7:ee:62:f5:a6:b6:e7: 8d:2c:5d:93:31:91:0e:d1:53:a3:a1:66:af:bb:cf:65:e8:41: d9:9b:68:57:4f:4d:e7:45:2d:1a:0d:ad:ed:7b:fd:4e:e8:ef: 44:7d:97:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpjWP2a1Y8PiXQdB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRjMmI2MTktNGQ4ZC00N2VmLWFiNTYtZmVkZWZiMGUw MWJiMB4XDTI1MDcwMjE5NDUwNloXDTI1MDkzMDE5NDUwNlowLzEtMCsGA1UEAxMk NWQ5YmVlZDItZGIwMC00OGNkLWIyYWQtNDg3OTRmOWVmMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOgFDr85oNtrzyMf1mtGlsvq05gX4jmladhr 9ue/C845au6vUqW7AskthF3d/ZODemoF9y/86N7Cp2XGTgqOKlkjHNcEzV/5hGXb ASCaaoEvzj07TanjDOuUVWtSHtSS2plnUap4kKwc4rK59lNB8dXj9h3N26sgY+6l trFiFhmIe92CnRHrjlcpH0xhNUxMZxf6y0S544FewYA0+H9Ot4b14+4ytIsAcTsW KBwZY/6IYt+E+19BllkB7ZCk8ld2S79nnWDcejDYx6psO4IQE3uGTh14KblfIetu xOkuVgsno/arJ7Ns74tiBlqyDFijpTJHvoHLj3ae/qU81IwGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOW1OmDsgcdyf5AB2TT8EwoR6GcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NGMy YjYxOS00ZDhkLTQ3ZWYtYWI1Ni1mZWRlZmIwZTAxYmIvYmZmMzJiYTMtODVhNi0z YzcyLWI0NDctMzAzYTQzMWUzYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDRjMmI2MTktNGQ4ZC00N2VmLWFi NTYtZmVkZWZiMGUwMWJiLzQ0YzJiNjE5LTRkOGQtNDdlZi1hYjU2LWZlZGVmYjBl MDFiYi5jcmwwHwYDVR0jBBgwFoAUdsmHkF6eZCSThmUwB3I5Nodom2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NGMyYjYxOS00ZDhkLTQ3ZWYtYWI1Ni1mZWRl ZmIwZTAxYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAHnW2mbJbdkR0mihrrRwkV5dOBsL6J4F7l8CpkQrqsd8tmGrptADTS o359RzcWqxVtXJ5LIb68h6oTFuTthK+sbYDDX5CGrxoonXiEoLs79aXXFnek7tqe dXiz8MxL/G648HxdOJOwNOn5Hrxqr5KS54/UgetqYCwWq7woT5C7SYS7dJ2yRa8X dSZUmFFdI0aKWPGvPsL+gxJyBvoFfUALgvCbrX3XwkffeK9JiDZIagaldhgCkvps J9WofrzxgvPcM1C4RfNKxv58GTybF59L1+5i9aa2540sXZMxkQ7RU6OhZq+7z2Xo QdmbaFdPTedFLRoNre17/U7o70R9l9E= -----END CERTIFICATE-----Generated at Thu Jul 3 08:46:18 2025 by rpki-client