$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa File: 270e83cd-3da3-324a-a778-d4c20816c3ca.roa (raw, json) Hash identifier: 4nUhtlJ9fHeJd1Pb5HyEDyGqR0kCp17tKyFnx9Rus44= Subject key identifier: 56:64:A4:39:ED:0C:A2:57:99:D4:4C:EE:F0:18:3C:43:13:C3:F3:14 Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F43285848F65BECBD63776B839D0CCFC0 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 32775 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ec:bd:63:77:6b:83:9d:0c:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=71e9824d-50b7-438d-b8c2-c3f91b75c8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:87:11:2f:68:6e:30:7f:e5:c0:07:55:0b:08: 0c:93:85:a7:2a:5c:8b:81:87:03:2c:02:e8:97:46: 1b:2a:4c:9d:69:ac:69:72:df:2a:bb:5b:fe:22:c4: 78:3b:10:fb:b8:ce:a5:c7:d9:55:5b:11:6f:54:bf: 34:5d:bc:0e:26:ac:f9:a3:9f:71:6e:bb:5f:04:1d: ab:72:4b:cd:2e:e9:bc:cb:ff:f6:c5:85:91:fc:c9: 7a:09:a5:d6:d9:4c:32:ca:82:75:f5:12:f1:58:99: ca:c5:62:fe:8d:e3:da:66:21:ac:87:73:1e:01:a6: 31:3e:22:65:70:88:1d:83:c5:10:ed:5e:37:0a:53: e9:dc:bf:8b:23:d0:9b:6a:3c:8f:c2:d0:51:dc:3b: 10:40:c1:eb:a4:87:2f:1b:51:42:d0:8c:99:c7:17: 37:5a:66:5f:a0:24:6b:1c:d3:3f:d6:00:27:ab:40: d6:1d:77:8e:25:94:c3:3d:8d:5e:e4:ee:0b:b6:14: cb:27:cc:84:25:b4:32:98:58:ec:66:ad:a9:93:20: 87:d3:55:61:95:0c:e4:4f:9e:bd:53:cc:38:1a:87: c6:05:c2:7f:9e:a6:ce:a8:97:a4:28:b9:57:49:2d: f9:a6:31:a5:35:3a:f7:61:41:82:31:b6:7f:f3:73: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:64:A4:39:ED:0C:A2:57:99:D4:4C:EE:F0:18:3C:43:13:C3:F3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:28:3a:12:4e:83:81:da:d3:8f:dd:24:fb:16:c3:0c:c8:83: 37:cb:5c:20:b4:03:1b:f9:92:15:3d:a0:7d:01:30:c5:63:3e: d1:4c:c9:2c:de:f5:3e:e0:56:5b:bc:14:5f:6c:9e:25:09:4a: dc:61:e0:e4:dc:92:5b:d9:29:2d:b5:92:bd:cd:42:93:c8:56: 57:c8:af:7f:c3:37:1f:79:11:4f:70:b1:19:1a:1f:d2:37:a7: 70:7a:c6:df:69:64:cd:80:f6:d7:56:a9:69:8e:58:56:30:fc: f8:54:37:0a:6e:43:3b:1a:d1:6d:89:a1:b9:ea:1e:82:61:08: 51:58:62:7b:23:59:0c:fc:64:20:b9:20:2c:9e:1b:9c:2f:79: 50:39:0e:70:ef:c1:62:1f:e6:47:84:5c:ae:44:70:e7:2c:87: 0e:43:8b:2c:28:80:26:69:89:08:50:3d:e4:a4:f7:a5:b0:26: aa:6f:03:7a:b2:d4:ed:3f:ae:c9:08:16:7c:af:87:3f:e4:cb: 9e:16:af:00:55:4f:32:b0:3d:52:5f:ee:f7:c7:aa:79:e9:51: 26:5f:2c:a8:9b:86:b7:69:47:69:54:53:80:4e:38:44:25:5c: a6:dc:fe:89:11:cb:61:11:29:4f:46:ac:1e:b4:54:88:57:f6: 6a:25:08:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+y9Y3drg50Mz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NzFlOTgyNGQtNTBiNy00MzhkLWI4YzItYzNmOTFiNzVjOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ocRL2huMH/lwAdVCwgMk4WnKlyLgYcDLALo l0YbKkydaaxpct8qu1v+IsR4OxD7uM6lx9lVWxFvVL80XbwOJqz5o59xbrtfBB2r ckvNLum8y//2xYWR/Ml6CaXW2UwyyoJ19RLxWJnKxWL+jePaZiGsh3MeAaYxPiJl cIgdg8UQ7V43ClPp3L+LI9CbajyPwtBR3DsQQMHrpIcvG1FC0IyZxxc3WmZfoCRr HNM/1gAnq0DWHXeOJZTDPY1e5O4LthTLJ8yEJbQymFjsZq2pkyCH01VhlQzkT569 U8w4GofGBcJ/nqbOqJekKLlXSS35pjGlNTr3YUGCMbZ/83NDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZkpDntDKJXmdRM7vAYPEMTw/MUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvMjcwZTgzY2QtM2RhMy0z MjRhLWE3NzgtZDRjMjA4MTZjM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEoOhJOg4Ha04/dJPsWwwzIgzfLXCC0Axv5khU9oH0BMMVjPtFMySze 9T7gVlu8FF9sniUJStxh4OTcklvZKS21kr3NQpPIVlfIr3/DNx95EU9wsRkaH9I3 p3B6xt9pZM2A9tdWqWmOWFYw/PhUNwpuQzsa0W2JobnqHoJhCFFYYnsjWQz8ZCC5 ICyeG5wveVA5DnDvwWIf5keEXK5EcOcshw5DiywogCZpiQhQPeSk96WwJqpvA3qy 1O0/rskIFnyvhz/ky54WrwBVTzKwPVJf7vfHqnnpUSZfLKibhrdpR2lUU4BOOEQl XKbc/okRy2ERKU9GrB60VIhX9molCNg= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:28 2025 by rpki-client