$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa File: 4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa (raw, json) Hash identifier: PbmK0DCmNIyVbXoXXHNt7GFLna3Vk3LAvgMvaeNgkNY= Subject key identifier: 31:5E:87:C7:36:AF:A0:77:81:FB:37:F8:64:71:88:26:26:43:85:22 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE097EB5B9D2C46CAF29800 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 167.94.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:eb:5b:9d:2c:46:ca:f2:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=833ad7f5-78a9-49c4-9745-9ba5f0810c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:f0:5a:9e:ae:10:46:c2:b9:a2:0a:bd:2c: 0f:95:cf:24:b1:4c:55:86:3a:22:60:38:74:8a:c3: 3d:db:43:68:5b:bb:c8:2d:7a:9d:70:9a:f1:9e:a0: ba:04:35:0f:80:fb:25:07:d2:54:62:9a:a1:09:e8: 61:60:df:2d:05:46:ec:42:b1:0f:38:9a:db:ac:61: 50:90:90:05:8e:5f:2b:94:09:55:a4:61:81:7d:29: 79:8d:db:25:82:12:a8:d1:31:21:33:d9:6f:d0:2f: ec:c9:1f:97:a4:e7:1d:dc:74:6b:77:e7:ce:f6:e5: 3e:45:9b:15:d7:b0:82:60:41:99:9d:db:80:c0:85: e1:27:e2:ad:ef:e2:c8:1d:d8:ce:94:b3:9a:85:03: 59:47:0d:26:6f:51:86:16:96:17:3e:bd:2d:ad:be: cb:02:fe:07:87:b6:8a:96:7a:3b:43:1d:fc:31:fa: ab:ff:8d:70:cb:92:69:0b:68:a3:09:bb:d2:66:9a: 6d:2c:dc:b3:18:a0:b1:91:d7:a6:f1:29:20:22:6b: 79:c2:33:5e:1e:60:61:fe:4c:5c:20:67:ab:fd:8c: ba:36:5a:d3:3a:3e:ff:7a:24:3d:65:24:63:a3:7c: ac:2b:80:cc:7b:0b:98:ee:c2:41:47:1d:30:c3:ac: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5E:87:C7:36:AF:A0:77:81:FB:37:F8:64:71:88:26:26:43:85:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6c:b9:22:0a:9f:ff:e1:6b:42:12:d3:3e:1f:86:79:32:d1: 1a:bc:a4:35:92:7d:dc:60:bd:47:d0:a4:85:09:98:29:a4:09: 39:90:bc:b3:80:16:ee:25:52:e7:8f:95:da:d2:4f:d9:97:d6: 6c:0b:cb:ef:70:ce:8f:81:da:52:53:13:92:3d:82:71:63:97: e6:42:4d:ef:9c:7d:ff:09:ae:ac:25:33:42:a4:b5:51:2a:cb: 74:1e:66:3b:46:85:1d:86:4b:0e:ab:64:ba:39:d2:85:63:e9: 42:56:bb:70:75:0a:46:da:cc:3b:05:3b:8f:3c:f0:ad:ae:3e: ee:4c:ee:24:fa:d2:d0:b9:98:38:d8:17:09:8a:d1:89:d0:19: 32:cc:cf:b2:e1:fd:0f:ac:f9:aa:e2:ac:34:9d:f0:71:73:88: 28:21:98:82:3c:29:58:b9:c1:ce:bf:b0:20:ee:33:e8:6e:48: f6:d4:0d:45:28:a1:d2:99:51:73:0e:54:63:73:cd:fa:c6:99: d9:ef:49:e3:33:48:b1:b8:75:9f:12:6f:6c:51:6f:83:8d:10: a7:e1:15:26:96:10:0c:df:b4:96:c3:6e:bf:f6:21:8d:4d:00: ec:c8:47:4b:b5:56:19:3f:0d:2a:66:40:3a:35:f0:03:a3:83: 54:45:73:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JfrW50sRsrymAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ODMzYWQ3ZjUtNzhhOS00OWM0LTk3NDUtOWJhNWYwODEwYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WPwWp6uEEbCuaIKvSwPlc8ksUxVhjoiYDh0 isM920NoW7vILXqdcJrxnqC6BDUPgPslB9JUYpqhCehhYN8tBUbsQrEPOJrbrGFQ kJAFjl8rlAlVpGGBfSl5jdslghKo0TEhM9lv0C/syR+XpOcd3HRrd+fO9uU+RZsV 17CCYEGZnduAwIXhJ+Kt7+LIHdjOlLOahQNZRw0mb1GGFpYXPr0trb7LAv4Hh7aK lno7Qx38Mfqr/41wy5JpC2ijCbvSZpptLNyzGKCxkdem8SkgImt5wjNeHmBh/kxc IGer/Yy6NlrTOj7/eiQ9ZSRjo3ysK4DMewuY7sJBRx0ww6ywJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFeh8c2r6B3gfs3+GRxiCYmQ4UiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNGNkNGUwZTgtYmFkOS0z NDZkLTk0MTEtMTVjMmYxY2UyNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBsuSIKn//ha0IS0z4fhnky0Rq8pDWSfdxgvUfQpIUJmCmkCTmQvLOA Fu4lUuePldrST9mX1mwLy+9wzo+B2lJTE5I9gnFjl+ZCTe+cff8JrqwlM0KktVEq y3QeZjtGhR2GSw6rZLo50oVj6UJWu3B1CkbazDsFO4888K2uPu5M7iT60tC5mDjY FwmK0YnQGTLMz7Lh/Q+s+arirDSd8HFziCghmII8KVi5wc6/sCDuM+huSPbUDUUo odKZUXMOVGNzzfrGmdnvSeMzSLG4dZ8Sb2xRb4ONEKfhFSaWEAzftJbDbr/2IY1N AOzIR0u1Vhk/DSpmQDo18AOjg1RFc9A= -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:41 2025 by rpki-client