$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa File: 3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa (raw, json) Hash identifier: l8tvFh77DPD0r+/lvu/8jiMWFAjB45oqF63Ct3SVxPM= Subject key identifier: 75:F9:18:31:31:48:68:9C:42:24:56:5D:0D:AB:B3:71:60:17:85:12 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F43285848EC969AA3DFF011EEE0A0E580 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 397666 IP address blocks: 167.253.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:9a:a3:df:f0:11:ee:e0:a0:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=402fcac9-4778-44c9-b401-294805ad0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:5d:a9:da:4d:67:6d:9c:1c:43:e2:2f:90: c7:51:05:a0:ae:26:13:9e:b6:a5:9b:42:d0:94:57: 8e:be:dd:5f:87:6e:e4:52:9b:2f:4a:c0:6b:17:d5: 6a:2b:11:83:d0:de:ae:b2:f3:57:1e:91:4a:e8:02: 28:f1:5a:ea:e5:02:35:23:aa:12:a6:0f:2e:d3:cb: 2c:a1:55:cd:44:34:2c:8a:25:85:cc:0e:a9:32:67: 9c:62:f5:1d:55:d6:52:2f:ea:58:cc:f8:c4:d8:85: 0b:56:9c:d2:b5:78:f0:e3:f8:9e:6c:74:aa:45:1b: bc:8f:24:0e:c4:be:70:3d:99:07:12:61:a9:98:75: 8e:60:01:41:72:89:74:7f:a5:1f:3c:b1:9c:dc:90: 66:e5:5f:20:21:f4:0d:55:12:6f:5c:21:88:87:4e: ea:74:fe:6e:60:b9:b8:e5:01:d1:4d:b1:c5:92:77: d8:2b:9c:9a:e6:3d:29:76:30:1f:af:2e:04:5a:81: f3:e7:91:e2:6d:a1:a9:ed:c0:67:1e:8b:4a:36:04: 8b:69:bd:ed:1f:1f:51:14:9f:07:b9:8e:c8:fb:92: b4:c2:81:25:51:f1:f2:12:49:1d:ba:b7:c3:22:18: fb:22:9f:3f:1a:62:1e:2a:93:f9:2b:96:6c:20:3a: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F9:18:31:31:48:68:9C:42:24:56:5D:0D:AB:B3:71:60:17:85:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:23:6e:90:5c:c2:d9:9f:7d:17:71:fd:a7:84:22:b2:76:f3: 31:fb:04:b2:1c:fe:e5:90:58:6c:b4:84:04:56:75:19:f6:ec: 20:77:61:4f:44:4f:ff:bb:e5:c6:04:0d:c1:af:18:6c:1c:9c: e6:dd:ae:74:2a:ac:be:f9:57:93:bc:57:b3:ed:2e:96:01:1b: cb:89:84:e9:4d:f5:77:15:7e:29:72:d5:90:eb:84:bf:31:11: 8a:67:4f:cb:12:81:cd:f3:d2:82:d0:1e:92:b9:b2:56:93:83: 61:ea:dc:39:d9:1c:d7:3c:55:35:1d:bd:cf:da:4f:d0:25:9a: aa:9c:59:2d:7b:12:06:a2:c1:fe:eb:39:c7:73:dd:98:28:f7: ce:4a:38:48:5c:c0:c5:85:ff:72:ca:10:d0:83:71:9a:d6:59: ed:f3:71:90:4e:95:aa:9d:b5:c0:e4:bb:c3:69:32:4c:b7:7a: 72:0a:29:e5:d1:44:4f:c2:6c:97:6c:cb:f9:1c:36:de:2d:0a: d2:96:73:cd:b8:ec:c6:cc:14:4e:fe:e7:e7:08:a8:62:80:4a: 3f:76:0b:42:02:7d:ed:f4:1a:27:62:39:9e:ec:91:cc:8c:a4: 83:ea:10:1a:64:3a:9b:4e:1a:56:b6:04:86:18:4b:52:19:21: 8a:0a:80:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpqj3/AR7uCg5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDAyZmNhYzktNDc3OC00NGM5LWI0MDEtMjk0ODA1YWQwNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBxdqdpNZ22cHEPiL5DHUQWgriYTnralm0LQ lFeOvt1fh27kUpsvSsBrF9VqKxGD0N6usvNXHpFK6AIo8Vrq5QI1I6oSpg8u08ss oVXNRDQsiiWFzA6pMmecYvUdVdZSL+pYzPjE2IULVpzStXjw4/iebHSqRRu8jyQO xL5wPZkHEmGpmHWOYAFBcol0f6UfPLGc3JBm5V8gIfQNVRJvXCGIh07qdP5uYLm4 5QHRTbHFknfYK5ya5j0pdjAfry4EWoHz55HibaGp7cBnHotKNgSLab3tHx9RFJ8H uY7I+5K0woElUfHyEkkdurfDIhj7Ip8/GmIeKpP5K5ZsIDqq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX5GDExSGicQiRWXQ2rs3FgF4USMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvM2NmM2JiZDgtZjEzYy0z MjEwLWEzMWYtZTYyYTI5MTdlYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkjbpBcwtmffRdx/aeEIrJ28zH7BLIc/uWQWGy0hARWdRn27CB3YU9E T/+75cYEDcGvGGwcnObdrnQqrL75V5O8V7PtLpYBG8uJhOlN9XcVfily1ZDrhL8x EYpnT8sSgc3z0oLQHpK5slaTg2Hq3DnZHNc8VTUdvc/aT9AlmqqcWS17Egaiwf7r Ocdz3Zgo985KOEhcwMWF/3LKENCDcZrWWe3zcZBOlaqdtcDku8NpMky3enIKKeXR RE/CbJdsy/kcNt4tCtKWc8247MbMFE7+5+cIqGKASj92C0ICfe30GidiOZ7skcyM pIPqEBpkOptOGla2BIYYS1IZIYoKgJQ= -----END CERTIFICATE-----Generated at Sat Apr 5 13:14:09 2025 by rpki-client