$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa File: b592519b-2458-3376-88aa-1a85ad209d0e.roa (raw, json) Hash identifier: FGDzu/ww3zWm9KgXmo9o5eCUGDzCahB2tWOa0Y2bUsk= Subject key identifier: 0D:0D:94:F5:5A:C8:70:DF:ED:BD:FA:A4:36:3E:AA:F1:8E:B7:2E:1D Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F43285848F65BEC8AFC6572FC00DDCA80 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 11185 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ec:8a:fc:65:72:fc:00:dd:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b549b051-5f83-44bb-a6e4-805de6f799f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:2c:51:8c:34:bc:7a:db:71:b8:15:9b:3a: a3:3d:e9:0b:d8:39:5c:cb:12:9c:5a:8f:36:89:06: 2e:00:1a:06:b0:d1:c5:94:56:39:cb:76:46:dc:80: 5d:2f:d6:ee:3a:ee:06:a5:76:15:31:35:35:60:78: 96:fa:80:c7:ec:4c:7e:4d:52:cf:31:a1:9a:ae:f9: ad:e5:b8:68:ce:4d:19:06:14:a2:02:58:31:7a:aa: 98:f0:06:a4:fc:b5:4e:d6:60:7c:c0:ed:cb:1c:f1: ec:0f:ac:c9:0b:8a:29:fe:3e:ca:8e:53:9d:db:27: 24:91:85:04:90:38:a0:d3:f0:97:b4:c7:21:00:7e: 75:df:07:0b:7f:70:44:0a:85:a1:0d:d9:12:74:33: a4:4f:31:51:49:d0:66:e4:32:38:e8:06:05:95:3a: 1c:df:70:3c:eb:08:61:6d:2f:1e:74:6b:5c:ba:48: fb:fb:71:9e:fb:0a:cb:87:7c:fd:fc:fd:c6:21:df: bf:a8:a1:6a:a2:7c:b3:8b:b2:e8:d9:75:8f:a6:88: 51:bd:9e:ca:32:22:c7:1f:56:47:d5:e6:9f:01:42: e8:bf:10:de:a3:67:db:d5:28:d2:22:95:1c:df:07: 40:c0:17:13:49:36:9d:6b:d1:6f:7a:4c:38:72:f4: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0D:94:F5:5A:C8:70:DF:ED:BD:FA:A4:36:3E:AA:F1:8E:B7:2E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:73:6e:75:e9:4d:ac:63:9a:d6:97:6d:fe:a1:f3:fa:17:d8: ac:9c:a2:ca:c3:53:81:d4:49:1c:5d:12:65:45:8d:a5:55:e8: 83:ec:25:53:cf:34:01:7f:9c:44:37:ac:26:35:d2:30:83:08: 37:67:0b:c9:3f:83:14:43:0d:e2:c4:82:43:e8:33:26:1d:2c: cf:88:d6:19:15:10:4d:21:47:1b:f1:fe:da:de:b8:3d:91:bf: 94:07:9c:b9:ce:f7:43:ed:c2:8e:6f:93:82:e8:0d:fd:3a:20: 3d:cb:b3:d6:0e:9b:2b:0d:24:71:e1:13:02:d9:3e:d2:d3:d0: 92:f3:06:40:5a:dc:74:53:dd:91:3b:b9:b3:bc:8a:5d:97:5b: f9:e7:51:e2:32:be:55:cf:41:22:97:82:f1:1f:59:bf:ca:ad: 9c:5e:42:b8:a5:5a:fc:46:b8:d0:0b:5e:bb:12:2b:a6:e2:cb: ba:1f:44:ae:d8:72:53:f7:74:0a:1e:25:7c:51:bb:dc:4a:6d: ff:e2:b2:8c:4d:c6:36:6d:38:ad:5e:75:23:e8:4d:f7:1d:31: 8a:4c:52:96:e4:1e:a7:61:15:30:2e:87:5a:08:e9:04:fb:ea: 03:42:23:c7:5c:3b:5d:40:ec:cf:03:c7:2f:1f:25:61:1c:77: fd:38:46:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+yK/GVy/ADdyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YjU0OWIwNTEtNWY4My00NGJiLWE2ZTQtODA1ZGU2Zjc5OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmUsUYw0vHrbcbgVmzqjPekL2DlcyxKcWo82 iQYuABoGsNHFlFY5y3ZG3IBdL9buOu4GpXYVMTU1YHiW+oDH7Ex+TVLPMaGarvmt 5bhozk0ZBhSiAlgxeqqY8Aak/LVO1mB8wO3LHPHsD6zJC4op/j7KjlOd2yckkYUE kDig0/CXtMchAH513wcLf3BECoWhDdkSdDOkTzFRSdBm5DI46AYFlToc33A86whh bS8edGtcukj7+3Ge+wrLh3z9/P3GId+/qKFqonyzi7Lo2XWPpohRvZ7KMiLHH1ZH 1eafAULovxDeo2fb1SjSIpUc3wdAwBcTSTada9Fvekw4cvT1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0NlPVayHDf7b36pDY+qvGOty4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvYjU5MjUxOWItMjQ1OC0z Mzc2LTg4YWEtMWE4NWFkMjA5ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxzbnXpTaxjmtaXbf6h8/oX2KycosrDU4HUSRxdEmVFjaVV6IPsJVPP NAF/nEQ3rCY10jCDCDdnC8k/gxRDDeLEgkPoMyYdLM+I1hkVEE0hRxvx/treuD2R v5QHnLnO90Ptwo5vk4LoDf06ID3Ls9YOmysNJHHhEwLZPtLT0JLzBkBa3HRT3ZE7 ubO8il2XW/nnUeIyvlXPQSKXgvEfWb/KrZxeQrilWvxGuNALXrsSK6biy7ofRK7Y clP3dAoeJXxRu9xKbf/isoxNxjZtOK1edSPoTfcdMYpMUpbkHqdhFTAuh1oI6QT7 6gNCI8dcO11A7M8Dxy8fJWEcd/04Rp4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:25 2025 by rpki-client