$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa File: 6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa (raw, json) Hash identifier: RqaD3ZNf4LwqxOj/x29P1/EvtEnaadjRE8LR/jW5Cjc= Subject key identifier: 42:C2:F6:0D:D6:0B:43:ED:02:CC:BE:87:64:72:73:A8:6E:2A:DF:45 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F432858495D896EA1B08E37A03BEADBC0 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 205220 IP address blocks: 167.253.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6e:a1:b0:8e:37:a0:3b:ea:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=85e9caf8-7602-4e54-ac83-15caacab8ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:af:d0:c6:84:f1:38:dc:6b:f7:1b:bf:4a: c6:46:6f:5a:8e:18:b5:8f:37:30:c9:54:4f:9e:8d: c1:fd:fa:c1:57:7c:53:99:d7:ff:fb:6f:eb:41:8c: 9a:a3:d8:6f:78:d0:f8:1d:19:65:b7:dd:e9:ff:e9: de:d3:d0:90:aa:86:5d:84:33:a4:99:de:17:e3:15: 57:8c:94:f7:2e:9a:90:09:d4:83:f5:65:0f:d6:ef: 85:d2:5d:12:38:67:0d:84:81:1f:ae:fa:36:7d:74: 07:b2:de:c3:0c:28:3b:5d:59:68:95:33:af:01:20: 91:cc:1f:10:16:58:28:10:e8:ef:62:ca:66:97:43: 59:bd:0d:00:94:d6:4b:1b:99:75:73:36:b7:10:c8: 38:5d:06:54:f1:27:62:16:85:fe:20:0e:cf:a3:bf: 3f:5a:e0:15:4b:64:78:21:2e:4d:cb:bb:9b:5c:90: 60:36:39:49:10:3f:fb:43:b8:02:e5:8a:c1:61:ea: e3:b5:0b:dc:68:a3:9c:0b:66:65:7d:ad:b7:09:00: e5:a5:5d:44:a6:de:a9:f7:a7:41:a5:98:82:92:e1: 29:0e:7e:ee:c9:ed:51:e7:49:17:77:c7:31:4e:b0: c0:2a:53:34:a4:6e:51:98:8f:b0:ef:a0:00:f6:2f: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:F6:0D:D6:0B:43:ED:02:CC:BE:87:64:72:73:A8:6E:2A:DF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/6418fb82-d9c7-3cba-975e-2ebdac633a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bf:9b:ed:b0:2f:0d:0e:28:74:a2:49:22:96:2b:24:f9:26: 68:27:4d:83:85:b1:d2:2b:6e:fd:89:63:85:17:56:96:bb:bd: a1:17:78:40:4b:51:65:f0:c8:20:e6:1f:27:2b:17:48:7f:ac: 7f:5c:bc:05:3d:e5:a1:9e:13:52:63:7d:ea:96:1e:80:fd:a7: 03:d3:fe:d6:f2:61:14:2a:ab:a4:2a:42:b5:7e:54:6f:68:c2: e9:85:54:63:85:0b:db:15:e7:22:5e:32:51:10:95:15:dc:88: 54:9e:7a:24:f0:5a:39:ad:53:ef:74:93:57:34:81:0f:93:be: 7e:0e:41:53:0e:2e:59:23:96:40:33:34:ec:f2:94:52:31:6c: 95:a6:d5:c0:b1:3c:ef:93:59:b7:45:97:ef:69:aa:5a:e9:ab: 3a:09:21:6b:74:5f:ed:75:77:cd:91:c1:88:cd:ea:4e:7c:c8: 0f:ae:7e:41:d7:45:d9:fa:6c:a9:db:44:83:56:e7:63:62:8a: cf:8b:0c:23:05:a0:05:0b:2f:b5:7d:53:ef:43:ab:e9:a5:14: 2a:23:4b:d9:d2:05:c7:06:db:ea:6c:b8:5a:0b:7a:47:2c:ef: fb:2b:67:85:bb:32:4a:81:64:38:1a:59:c4:c8:62:72:98:b4: d9:03:f8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiW6hsI43oDvq28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODVlOWNhZjgtNzYwMi00ZTU0LWFjODMtMTVjYWFjYWI4ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvKv0MaE8Tjca/cbv0rGRm9ajhi1jzcwyVRP no3B/frBV3xTmdf/+2/rQYyao9hveND4HRllt93p/+ne09CQqoZdhDOkmd4X4xVX jJT3LpqQCdSD9WUP1u+F0l0SOGcNhIEfrvo2fXQHst7DDCg7XVlolTOvASCRzB8Q FlgoEOjvYspml0NZvQ0AlNZLG5l1cza3EMg4XQZU8SdiFoX+IA7Po78/WuAVS2R4 IS5Ny7ubXJBgNjlJED/7Q7gC5YrBYerjtQvcaKOcC2Zlfa23CQDlpV1Ept6p96dB pZiCkuEpDn7uye1R50kXd8cxTrDAKlM0pG5RmI+w76AA9i9TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELC9g3WC0PtAsy+h2Ryc6huKt9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvNjQxOGZiODItZDljNy0z Y2JhLTk3NWUtMmViZGFjNjMzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm/m+2wLw0OKHSiSSKWKyT5JmgnTYOFsdIrbv2JY4UXVpa7vaEXeEBL UWXwyCDmHycrF0h/rH9cvAU95aGeE1JjfeqWHoD9pwPT/tbyYRQqq6QqQrV+VG9o wumFVGOFC9sV5yJeMlEQlRXciFSeeiTwWjmtU+90k1c0gQ+Tvn4OQVMOLlkjlkAz NOzylFIxbJWm1cCxPO+TWbdFl+9pqlrpqzoJIWt0X+11d82RwYjN6k58yA+ufkHX Rdn6bKnbRINW52Niis+LDCMFoAULL7V9U+9Dq+mlFCojS9nSBccG2+psuFoLekcs 7/srZ4W7MkqBZDgaWcTIYnKYtNkD+CU= -----END CERTIFICATE-----Generated at Sun Apr 6 20:44:13 2025 by rpki-client