$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa File: 8810de1f-a392-3d60-8edb-e6eed27b2547.roa (raw, json) Hash identifier: a6qv1fhCU1DHQsI2pGOwMFT530MVi16m1kCgPzhKFlw= Subject key identifier: 96:D9:66:2C:AC:B5:04:F9:05:B1:1B:3F:0A:7D:C1:22:86:10:82:FB Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F432858491941918C42CAA7DA3AD06300 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 398343 IP address blocks: 167.253.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:91:8c:42:ca:a7:da:3a:d0:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=076b42ab-5ee3-4f09-8ece-07ad74687157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:df:90:8a:a3:fa:cf:6b:9a:ee:2a:60:ed: ea:28:9d:46:80:28:cb:69:5c:39:0d:e9:4c:48:f7: b5:48:fc:a4:24:ef:4f:06:43:2c:49:c8:79:b1:cc: 68:3f:41:67:c6:a0:5b:7d:85:1d:9a:3e:fd:dc:86: 41:e9:b6:c2:ce:f0:b5:68:31:d7:9c:78:08:b5:62: e1:d1:3a:65:22:45:61:10:1d:7b:61:6f:96:c6:84: c4:26:f4:47:da:13:fb:85:0e:5d:95:fa:8b:73:d8: 5c:3e:89:93:48:c5:7e:36:54:35:54:be:af:b9:e7: 79:f4:e2:09:69:d7:46:b4:e7:3e:a3:2b:39:db:d0: 76:d6:0a:f2:f8:89:ce:ed:87:df:33:bc:62:b2:39: 8f:8a:ff:2a:81:05:ba:98:f9:d7:58:eb:e5:2f:c9: 22:29:c4:6e:05:df:57:ee:6c:99:fd:77:16:cc:1f: 16:c0:a9:c9:fc:33:b7:da:c2:af:bc:57:f2:67:b5: cb:8f:35:1d:df:87:8c:64:58:18:9d:e1:0d:18:aa: ec:39:cd:12:39:e4:ba:9a:71:ba:5f:de:25:41:65: af:0f:7e:0c:15:ba:46:a3:b6:85:ba:17:77:bf:5c: ac:92:83:b2:90:d2:3f:25:b1:01:75:6d:3e:9b:a3: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D9:66:2C:AC:B5:04:F9:05:B1:1B:3F:0A:7D:C1:22:86:10:82:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:12:e9:93:f9:48:9d:66:aa:b4:17:b5:7a:ce:38:6c:dd:8b: 56:67:36:71:4f:00:62:d0:ce:83:8b:51:fa:5b:f9:81:59:ae: 09:f4:44:6b:06:74:da:66:dd:87:bc:c0:ab:6e:36:55:8f:23: 05:d4:57:eb:33:a3:84:3f:e2:80:66:c1:35:a9:60:ca:e4:8d: 3b:f8:93:bd:e1:0d:2d:39:bf:79:a4:72:9a:c6:a4:21:a3:79: e8:3b:47:90:f9:5a:fc:30:2c:eb:95:11:2a:10:26:ca:0e:d6: 3d:c2:92:86:5a:99:dd:12:2c:9f:42:1b:2f:82:9c:c2:1c:15: b8:7a:72:9d:c6:63:91:de:c0:1e:3b:fe:6a:4e:8d:1d:ab:ce: 97:0e:15:ff:3f:31:fd:35:19:3d:0b:99:92:e3:49:9d:53:4d: 71:75:9d:37:99:ad:85:e9:13:ee:6c:e0:da:13:55:f1:aa:08: ca:b8:3f:f6:db:2c:49:6a:79:40:37:99:86:ef:3d:5b:50:01: 28:ea:2b:be:c5:fd:d8:54:67:f0:0c:ac:91:5b:57:6a:0c:e5: 4b:79:a7:4b:00:2a:45:cf:a6:b0:0c:b7:be:b1:2c:a1:a2:10: 1c:2c:78:74:3a:2a:a2:bd:c0:91:50:fa:51:be:7a:01:90:f4: f3:5e:26:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQZGMQsqn2jrQYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MDc2YjQyYWItNWVlMy00ZjA5LThlY2UtMDdhZDc0Njg3MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1bfkIqj+s9rmu4qYO3qKJ1GgCjLaVw5DelM SPe1SPykJO9PBkMsSch5scxoP0FnxqBbfYUdmj793IZB6bbCzvC1aDHXnHgItWLh 0TplIkVhEB17YW+WxoTEJvRH2hP7hQ5dlfqLc9hcPomTSMV+NlQ1VL6vued59OIJ addGtOc+oys529B21gry+InO7YffM7xisjmPiv8qgQW6mPnXWOvlL8kiKcRuBd9X 7myZ/XcWzB8WwKnJ/DO32sKvvFfyZ7XLjzUd34eMZFgYneENGKrsOc0SOeS6mnG6 X94lQWWvD34MFbpGo7aFuhd3v1yskoOykNI/JbEBdW0+m6MjYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbZZiystQT5BbEbPwp9wSKGEIL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvODgxMGRlMWYtYTM5Mi0z ZDYwLThlZGItZTZlZWQyN2IyNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkS6ZP5SJ1mqrQXtXrOOGzdi1ZnNnFPAGLQzoOLUfpb+YFZrgn0RGsG dNpm3Ye8wKtuNlWPIwXUV+szo4Q/4oBmwTWpYMrkjTv4k73hDS05v3mkcprGpCGj eeg7R5D5WvwwLOuVESoQJsoO1j3CkoZamd0SLJ9CGy+CnMIcFbh6cp3GY5HewB47 /mpOjR2rzpcOFf8/Mf01GT0LmZLjSZ1TTXF1nTeZrYXpE+5s4NoTVfGqCMq4P/bb LElqeUA3mYbvPVtQASjqK77F/dhUZ/AMrJFbV2oM5Ut5p0sAKkXPprAMt76xLKGi EBwseHQ6KqK9wJFQ+lG+egGQ9PNeJqc= -----END CERTIFICATE-----Generated at Sat Apr 5 08:58:29 2025 by rpki-client