$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/9b94ec72-f88a-3af6-8f00-5724de141d6d.roa File: 9b94ec72-f88a-3af6-8f00-5724de141d6d.roa (raw, json) Hash identifier: AR1rCdczSS4bYcUNX9+JCv5CULnszBGye7yLOUKgiFU= Subject key identifier: 47:8F:6D:77:ED:53:74:E9:BC:BD:92:72:7C:6E:75:02:F5:CE:46:34 Certificate issuer: /CN=69233f52-8a17-4eb0-ae6a-62c861686718 Certificate serial: 010D0C9F43285849F9DFDFC11DE4FD27C1928B20 Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/9b94ec72-f88a-3af6-8f00-5724de141d6d.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 7018 IP address blocks: 167.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:df:c1:1d:e4:fd:27:c1:92:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=7eaf02aa-5bbf-4c84-a63d-af112c3b56ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1c:48:fa:cb:cf:e6:00:b9:b9:34:f9:7e:a9: fe:fd:60:4a:2e:b4:e5:ff:1c:a8:12:c8:88:26:08: 5f:1f:5b:5f:99:62:70:dd:2f:08:94:3c:fe:ef:cf: d6:e1:f1:e4:a8:1f:33:71:40:da:f0:c0:0f:fd:47: 61:0f:51:dd:96:90:68:aa:88:31:92:32:bd:20:34: 0a:5a:46:92:f1:2b:70:20:0d:c9:06:44:9b:f2:83: ec:08:82:0f:36:2b:97:11:bf:fe:0e:42:7f:8e:73: b3:c2:85:cf:c5:ee:65:2e:14:97:7e:8c:fa:2f:de: f5:ad:49:34:18:eb:13:e9:60:62:06:7b:a6:48:e1: 66:fd:09:16:a0:0b:3b:a0:3a:02:3a:0b:dd:30:60: c3:72:97:06:1a:20:99:65:b1:21:10:2b:69:c8:c3: 5c:80:a3:7d:c5:19:a4:b3:15:20:97:87:41:8c:0e: bf:32:27:9c:33:23:75:2e:44:53:f7:12:21:0e:aa: 95:ba:b1:f7:3a:c4:e0:44:95:b6:14:89:ae:e3:23: 94:b7:21:2c:ad:b4:22:da:d4:90:72:f6:9f:dc:40: 72:14:bd:dd:43:88:00:77:5f:48:79:84:7a:98:27: ac:1f:ea:de:84:86:7b:3c:a9:7c:58:03:92:56:55: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:6D:77:ED:53:74:E9:BC:BD:92:72:7C:6E:75:02:F5:CE:46:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/9b94ec72-f88a-3af6-8f00-5724de141d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl X509v3 Authority Key Identifier: keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer sbgp-ipAddrBlock: critical IPv4: 167.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:14:5c:dc:62:cc:64:73:a9:9f:a1:5e:f0:fb:46:5c:53:c8: e1:0e:4c:55:a3:c4:30:1a:9c:a3:cc:f9:22:2d:22:f2:ba:cf: 80:29:d3:6c:c7:c3:cd:30:ef:b9:bc:ce:ef:41:fe:45:7c:f2: 30:7c:71:21:82:0e:06:53:56:f7:45:ac:19:fe:4e:8d:ec:a8: 8f:94:d1:5f:61:c2:dc:2b:eb:67:bf:c0:fd:5d:f3:fc:09:b1: 51:b5:42:4b:6b:4e:23:ca:20:40:24:c7:e9:d3:c0:e6:8c:02: 94:8a:22:36:38:5d:50:f8:2e:6f:d0:fb:ac:02:d4:5e:17:a8: 65:34:49:87:19:e7:73:35:62:8b:f2:15:28:06:83:17:ff:77: 6e:59:75:7c:4f:a6:9c:d7:8e:83:90:3a:eb:ca:5e:2b:ea:0d: 0b:83:fc:db:c4:5b:c0:4b:d3:af:50:99:95:00:12:32:05:02: d0:aa:4d:7a:ed:09:5f:68:91:13:9b:42:bb:15:1d:64:66:db: 1a:46:ec:9c:f2:bd:42:ec:37:75:65:ee:69:44:84:b2:94:eb: 11:b0:a5:b0:93:92:5c:d7:e0:e7:fd:0d:3c:90:25:bd:1f:72: c1:8f:f9:81:2c:4b:08:9d:9f:e7:a4:05:33:67:7d:e1:e0:21: cd:dc:ea:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539/BHeT9J8GSiyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkyMzNmNTItOGExNy00ZWIwLWFlNmEtNjJjODYxNjg2 NzE4MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk N2VhZjAyYWEtNWJiZi00Yzg0LWE2M2QtYWYxMTJjM2I1NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRxI+svP5gC5uTT5fqn+/WBKLrTl/xyoEsiI JghfH1tfmWJw3S8IlDz+78/W4fHkqB8zcUDa8MAP/UdhD1HdlpBoqogxkjK9IDQK WkaS8StwIA3JBkSb8oPsCIIPNiuXEb/+DkJ/jnOzwoXPxe5lLhSXfoz6L971rUk0 GOsT6WBiBnumSOFm/QkWoAs7oDoCOgvdMGDDcpcGGiCZZbEhECtpyMNcgKN9xRmk sxUgl4dBjA6/MiecMyN1LkRT9xIhDqqVurH3OsTgRJW2FImu4yOUtyEsrbQi2tSQ cvaf3EByFL3dQ4gAd19IeYR6mCesH+rehIZ7PKl8WAOSVlXmYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEePbXftU3TpvL2ScnxudQL1zkY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTIz M2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2ODY3MTgvOWI5NGVjNzItZjg4YS0z YWY2LThmMDAtNTcyNGRlMTQxZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjkyMzNmNTItOGExNy00ZWIwLWFl NmEtNjJjODYxNjg2NzE4LzY5MjMzZjUyLThhMTctNGViMC1hZTZhLTYyYzg2MTY4 NjcxOC5jcmwwHwYDVR0jBBgwFoAUeQC6dQ2pfMdSLyY/q+/zjvOEgVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4 NjE2ODY3MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUUXNxizGRzqZ+hXvD7RlxTyOEOTFWjxDAanKPM+SItIvK6z4Ap02zH w80w77m8zu9B/kV88jB8cSGCDgZTVvdFrBn+To3sqI+U0V9hwtwr62e/wP1d8/wJ sVG1QktrTiPKIEAkx+nTwOaMApSKIjY4XVD4Lm/Q+6wC1F4XqGU0SYcZ53M1Yovy FSgGgxf/d25ZdXxPppzXjoOQOuvKXivqDQuD/NvEW8BL069QmZUAEjIFAtCqTXrt CV9okRObQrsVHWRm2xpG7JzyvULsN3Vl7mlEhLKU6xGwpbCTklzX4Of9DTyQJb0f csGP+YEsSwidn+ekBTNnfeHgIc3c6rY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:54:00 2025 by rpki-client