$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa File: 7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (raw, json) Hash identifier: toqPiIcU2ooYwXLXVvA6QCRsLn4WYRUbTpRNDpo68Ko= Subject key identifier: 6D:36:73:31:1C:54:A7:19:7E:22:19:76:FA:2F:8C:1C:63:31:66:D9 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F43285848F22BE43057E3550196323380 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 996 IP address blocks: 167.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e4:30:57:e3:55:01:96:32:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=89f89477-cc6d-44f6-bf41-f4e4e31d25ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:b4:14:2c:be:a0:fb:1d:1e:bc:71:80:f7: 5d:25:43:f1:75:3b:54:7b:fe:4c:e6:ec:e1:51:3b: ce:45:a8:a2:91:b9:17:3e:ee:f0:28:79:1b:33:a8: 15:b0:fe:3f:b3:a9:fb:19:b2:6f:23:68:d5:b0:05: fd:1f:41:16:c7:d8:37:3e:68:3c:1c:3f:6d:df:bb: 38:95:a3:81:0a:4a:7f:c0:31:76:61:74:42:1a:00: 68:ca:de:18:59:e1:e6:58:35:ca:b0:20:64:86:a0: 76:d9:4a:77:86:3a:86:5b:c5:f8:54:5c:f1:26:b0: d8:63:f6:77:7f:3e:ef:22:34:e0:70:3a:69:ef:15: f3:b8:87:61:58:c0:b5:c9:bf:73:d2:44:c3:fd:ae: a7:9c:76:9d:3d:36:ab:06:ff:c4:77:a9:a9:7c:14: 3a:61:c2:d1:5e:83:d0:19:fd:a2:1a:66:3d:c4:1d: 98:02:66:9f:34:04:46:26:67:16:c5:0d:4d:21:ad: 43:e9:7f:77:01:9b:a1:8f:b7:2f:a2:d9:b2:cc:f1: 46:fe:9b:4b:50:c3:0d:fe:ed:86:f3:7f:93:1f:27: 28:ba:ea:21:61:75:e3:29:ff:26:76:4e:6c:f2:6f: ef:d3:e1:28:68:5a:16:93:c1:12:df:d7:67:16:49: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:36:73:31:1C:54:A7:19:7E:22:19:76:FA:2F:8C:1C:63:31:66:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9a:50:fb:15:c4:76:61:b5:2f:d9:bf:5c:d9:36:e6:e5:89: 9b:2f:13:e7:ab:61:75:82:7b:79:ca:4b:48:a4:c2:10:75:58: 1f:7c:2a:47:61:5c:be:77:06:ef:4e:80:29:16:2a:06:e1:53: ca:52:80:2c:e9:7a:7f:2a:08:db:10:d9:b0:68:d7:ef:28:0c: d7:83:0d:46:42:17:37:f4:b6:8c:c4:da:e2:70:e2:3c:51:76: b8:0f:48:b4:d9:9e:5a:5b:c9:22:9d:50:93:fb:3f:1b:6c:32: 1f:92:b2:4b:6f:9f:56:e5:9d:d0:ed:65:10:6e:e9:1f:51:e8: ab:0f:af:14:b8:53:aa:05:8e:72:8e:69:c1:55:32:f3:50:71: e2:bc:fd:f4:0d:4d:f2:ed:30:f5:6a:09:22:a7:93:db:56:22: 54:fd:b7:78:bf:9b:f1:3d:09:db:5e:9c:38:23:c2:86:0a:a4: 15:33:4d:be:75:b4:42:49:26:4d:78:a3:e0:29:75:25:1c:61: c0:46:b4:46:a6:d9:fd:5b:40:41:83:08:9c:5e:5d:d1:d8:17: 8f:50:a8:dd:72:ed:07:ff:77:d6:91:2e:5a:49:1b:4c:0a:ea: 16:ab:0d:c3:dc:d3:ab:79:86:12:28:d3:aa:33:16:4e:1e:a3: 2d:25:ca:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+QwV+NVAZYyM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ODlmODk0NzctY2M2ZC00NGY2LWJmNDEtZjRlNGUzMWQyNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNe0FCy+oPsdHrxxgPddJUPxdTtUe/5M5uzh UTvORaiikbkXPu7wKHkbM6gVsP4/s6n7GbJvI2jVsAX9H0EWx9g3Pmg8HD9t37s4 laOBCkp/wDF2YXRCGgBoyt4YWeHmWDXKsCBkhqB22Up3hjqGW8X4VFzxJrDYY/Z3 fz7vIjTgcDpp7xXzuIdhWMC1yb9z0kTD/a6nnHadPTarBv/Ed6mpfBQ6YcLRXoPQ Gf2iGmY9xB2YAmafNARGJmcWxQ1NIa1D6X93AZuhj7cvotmyzPFG/ptLUMMN/u2G 83+THycouuohYXXjKf8mdk5s8m/v0+EoaFoWk8ES39dnFkneUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG02czEcVKcZfiIZdvovjBxjMWbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvN2RmYTYyYjctZDNiMS0z YmQxLTkyNDYtMzFiMDBmMDNkODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKaUPsVxHZhtS/Zv1zZNubliZsvE+erYXWCe3nKS0ikwhB1WB98Kkdh XL53Bu9OgCkWKgbhU8pSgCzpen8qCNsQ2bBo1+8oDNeDDUZCFzf0tozE2uJw4jxR drgPSLTZnlpbySKdUJP7PxtsMh+Ssktvn1blndDtZRBu6R9R6KsPrxS4U6oFjnKO acFVMvNQceK8/fQNTfLtMPVqCSKnk9tWIlT9t3i/m/E9CdtenDgjwoYKpBUzTb51 tEJJJk14o+ApdSUcYcBGtEam2f1bQEGDCJxeXdHYF49QqN1y7Qf/d9aRLlpJG0wK 6harDcPc06t5hhIo06ozFk4eoy0lyo0= -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:26 2025 by rpki-client