$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa File: d5c5e304-938b-3145-b72c-bc916e50e0c5.roa (raw, json) Hash identifier: jtazBkjlNjf8mdbelRQBI5d5Rpu7JVN9LCuWjtmsAQM= Subject key identifier: 6C:6B:B2:2E:E9:6C:CA:93:60:BC:EE:D2:E3:67:FD:81:09:F1:83:13 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F43285848EC969A6F4C5FE43162B44980 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 397666 IP address blocks: 167.253.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:9a:6f:4c:5f:e4:31:62:b4:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=fe3cbb2e-632e-4bb5-b817-7d204487594b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:82:1c:51:af:3f:66:0a:4d:91:e3:ca:4a: d3:f3:cb:40:23:41:5d:0d:6a:eb:8f:aa:ba:a4:c0: d6:4c:ec:d0:8b:62:fd:3a:e1:f9:1f:9d:bd:47:c2: 53:d7:1e:b7:96:7e:76:bd:ff:ca:1c:3d:97:98:06: 56:b1:89:05:d9:24:96:8b:44:8f:1f:ac:11:c1:99: b4:40:87:e1:1b:e9:01:3f:4a:61:7b:9e:b8:ea:14: b3:20:a1:2d:35:ff:92:2f:e6:19:52:66:3a:69:bc: 66:c8:9a:9c:fb:7b:d0:8d:9b:75:97:0d:b5:59:76: 38:58:56:39:b5:c7:99:07:0d:a6:db:33:25:e9:4e: bd:f6:07:65:19:71:16:57:e2:3a:d6:21:49:2c:08: aa:74:13:a8:34:f2:d3:0d:0c:48:fd:6d:94:7e:fd: a0:fd:5f:a8:7a:1a:64:9f:e4:0b:2b:d2:81:df:53: b9:47:e0:6c:b8:00:ad:37:bd:b2:c8:44:a3:19:82: ed:26:71:74:16:f1:bc:fc:c4:b1:59:c8:24:f2:c4: 37:08:3d:de:c4:c5:29:97:ce:a3:c5:60:f1:f7:98: dc:5d:59:71:d2:65:cb:3a:a9:2f:9f:bb:7a:d8:24: 80:50:39:23:c2:d0:cd:31:34:59:79:9d:f4:44:05: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:B2:2E:E9:6C:CA:93:60:BC:EE:D2:E3:67:FD:81:09:F1:83:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:83:a7:c1:bf:2f:78:75:47:4f:ed:b1:6c:ba:e6:61:44:e6: 7f:d5:a7:50:74:82:10:72:9d:68:b0:b2:57:1b:fd:33:20:93: 3d:32:a3:a8:79:c2:e4:0f:92:9a:2b:c7:3a:9b:89:4f:3a:05: 59:65:b1:a1:7d:f4:11:2d:40:c0:b3:2d:4f:0f:5c:a0:3e:7e: 39:47:fe:5d:9a:06:7c:fd:91:16:25:31:e2:f5:08:12:15:1d: 1b:a0:b5:e4:c9:4e:73:eb:a6:45:36:87:63:7f:81:76:d9:d5: 39:89:8a:d7:29:24:cf:41:73:d8:f7:54:2f:18:d3:fc:29:23: 45:fe:7c:3a:fc:57:38:fb:98:68:43:41:75:41:00:7e:e7:dc: 2b:b7:ea:9e:73:61:05:32:da:ec:a4:54:93:fa:18:2e:b6:b5: 58:27:15:41:ca:97:e9:e2:3b:60:4a:ab:67:75:b0:1b:f5:9d: 9c:ce:e6:43:95:d6:aa:f4:f7:45:5f:b5:ef:39:72:72:ef:db: 24:5c:f4:64:8b:72:b2:5a:1b:63:14:5e:2f:bc:72:6d:a3:71: 66:57:2a:2c:cf:f4:35:0e:a6:ce:ac:2c:0f:23:ad:7a:09:ff: 0a:4f:60:a9:5e:52:7d:6e:28:97:ba:c5:9f:59:a0:9a:69:0d: 5e:f7:1f:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslppvTF/kMWK0SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmUzY2JiMmUtNjMyZS00YmI1LWI4MTctN2QyMDQ0ODc1OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H6CHFGvP2YKTZHjykrT88tAI0FdDWrrj6q6 pMDWTOzQi2L9OuH5H529R8JT1x63ln52vf/KHD2XmAZWsYkF2SSWi0SPH6wRwZm0 QIfhG+kBP0phe5646hSzIKEtNf+SL+YZUmY6abxmyJqc+3vQjZt1lw21WXY4WFY5 tceZBw2m2zMl6U699gdlGXEWV+I61iFJLAiqdBOoNPLTDQxI/W2Ufv2g/V+oehpk n+QLK9KB31O5R+BsuACtN72yyESjGYLtJnF0FvG8/MSxWcgk8sQ3CD3exMUpl86j xWDx95jcXVlx0mXLOqkvn7t62CSAUDkjwtDNMTRZeZ30RAUsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxrsi7pbMqTYLzu0uNn/YEJ8YMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDVjNWUzMDQtOTM4Yi0z MTQ1LWI3MmMtYmM5MTZlNTBlMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyDp8G/L3h1R0/tsWy65mFE5n/Vp1B0ghBynWiwslcb/TMgkz0yo6h5 wuQPkporxzqbiU86BVllsaF99BEtQMCzLU8PXKA+fjlH/l2aBnz9kRYlMeL1CBIV HRugteTJTnPrpkU2h2N/gXbZ1TmJitcpJM9Bc9j3VC8Y0/wpI0X+fDr8Vzj7mGhD QXVBAH7n3Cu36p5zYQUy2uykVJP6GC62tVgnFUHKl+niO2BKq2d1sBv1nZzO5kOV 1qr090Vfte85cnLv2yRc9GSLcrJaG2MUXi+8cm2jcWZXKizP9DUOps6sLA8jrXoJ /wpPYKleUn1uKJe6xZ9ZoJppDV73H4U= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:04 2025 by rpki-client