$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa File: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (raw, json) Hash identifier: cXJhsqEJdDIsdBf1QslyhsZVXQKdfanxnmRvB/76cUQ= Subject key identifier: CE:66:14:7B:E9:4A:44:9A:22:15:6A:2C:02:EF:11:87:30:6F:7B:79 Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F432858491ED6E1C3343B3DBCA114D600 Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 36197 IP address blocks: 168.100.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e1:c3:34:3b:3d:bc:a1:14:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=5173da7c-a458-4037-964b-13a230f9a8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:72:22:48:4d:6e:40:a4:74:fa:c8:eb:68: 91:a0:3e:76:76:1e:bd:f9:98:70:b7:2a:4c:c4:db: a0:60:3c:80:6c:f2:2c:47:eb:a4:7d:bd:b5:e9:86: f8:e8:ff:2e:ec:3b:61:2a:50:34:bc:85:d0:38:12: 6b:90:e2:32:c6:21:11:79:26:10:c0:13:33:73:84: b1:7f:44:40:45:d6:df:a2:9a:dd:59:f1:c5:20:00: 44:dc:dd:9e:7f:72:08:21:e6:89:b5:10:1d:5b:d9: bf:a3:ce:4f:ee:c2:f8:7d:f1:06:d0:b9:9e:70:21: f1:23:2a:ae:ae:49:19:27:71:d1:4c:27:f8:d8:45: d6:39:f4:a1:e0:2b:07:83:01:6c:75:1e:d5:72:ba: bb:e6:d7:58:06:9d:47:5d:fa:8a:36:0b:2a:0c:a3: 14:9b:c9:54:65:78:e8:03:8a:e1:92:0a:be:ee:6c: 1b:d0:fd:3f:0d:5e:b2:90:89:47:06:d8:b5:b0:5e: 99:f1:61:79:51:c6:ec:1d:cd:25:94:22:6f:9b:7e: 3d:4e:fe:13:2d:55:60:79:99:d4:3f:b1:fd:1f:ad: 6a:1e:8a:54:4a:29:d7:52:db:d3:6e:f1:65:d0:25: d9:1a:d9:6c:bf:32:80:19:95:c4:6f:c2:b7:6d:df: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:66:14:7B:E9:4A:44:9A:22:15:6A:2C:02:EF:11:87:30:6F:7B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: 168.100.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c1:82:03:bc:bd:b2:e5:13:59:b8:0f:f9:12:d4:6e:45:53: 27:a1:9d:34:67:bb:07:92:fa:cb:4a:1a:8e:05:5b:14:4a:c0: bc:59:6b:d9:12:9b:4f:d8:92:08:a5:e5:8a:ad:5a:63:b1:50: 02:2e:50:68:d5:31:91:9b:64:b3:4a:50:94:16:e7:ca:c9:43: 92:d6:ae:a6:c2:77:bf:bb:7e:d0:e6:56:6f:b1:7d:73:28:35: 23:26:59:a0:4d:8d:8e:a7:fe:6b:59:bf:6e:96:20:22:99:ce: f5:be:01:ec:59:8a:4d:98:35:ef:63:6b:f0:ee:87:1c:23:e3: f5:80:10:b6:93:1f:b8:cd:33:6f:b3:02:eb:d7:b1:85:50:c5: 92:62:79:f6:56:e0:d4:06:67:8d:ac:24:2f:1d:14:d5:f0:2b: 3b:c3:46:d1:33:94:f7:68:ec:f5:ae:fe:01:13:53:5e:ae:08: ab:94:c5:62:11:66:ac:24:0c:e4:09:91:42:64:97:eb:a2:cd: 76:5e:ff:b0:2d:fa:b1:f0:eb:74:4f:1b:98:1c:cc:0d:0d:6a: 1b:4b:0e:05:0a:2c:77:db:ba:13:6f:2a:80:3b:73:ee:75:03: be:ab:93:ca:ef:95:b5:41:4b:4d:ee:a7:02:bc:fc:41:a5:1e: 45:5e:0e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uHDNDs9vKEU1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTE3M2RhN2MtYTQ1OC00MDM3LTk2NGItMTNhMjMwZjlhOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYJyIkhNbkCkdPrI62iRoD52dh69+ZhwtypM xNugYDyAbPIsR+ukfb216Yb46P8u7DthKlA0vIXQOBJrkOIyxiEReSYQwBMzc4Sx f0RARdbfoprdWfHFIABE3N2ef3IIIeaJtRAdW9m/o85P7sL4ffEG0LmecCHxIyqu rkkZJ3HRTCf42EXWOfSh4CsHgwFsdR7Vcrq75tdYBp1HXfqKNgsqDKMUm8lUZXjo A4rhkgq+7mwb0P0/DV6ykIlHBti1sF6Z8WF5UcbsHc0llCJvm349Tv4TLVVgeZnU P7H9H61qHopUSinXUtvTbvFl0CXZGtlsvzKAGZXEb8K3bd8KPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5mFHvpSkSaIhVqLALvEYcwb3t5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvY2M3ZDE4ZDgtODMzZC0z MTkxLWFmYTEtYmRjMDhkZmEzYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3BggO8vbLlE1m4D/kS1G5FUyehnTRnuweS+stKGo4FWxRKwLxZa9kS m0/Ykgil5YqtWmOxUAIuUGjVMZGbZLNKUJQW58rJQ5LWrqbCd7+7ftDmVm+xfXMo NSMmWaBNjY6n/mtZv26WICKZzvW+AexZik2YNe9ja/Duhxwj4/WAELaTH7jNM2+z AuvXsYVQxZJiefZW4NQGZ42sJC8dFNXwKzvDRtEzlPdo7PWu/gETU16uCKuUxWIR ZqwkDOQJkUJkl+uizXZe/7At+rHw63RPG5gczA0NahtLDgUKLHfbuhNvKoA7c+51 A76rk8rvlbVBS03upwK8/EGlHkVeDiA= -----END CERTIFICATE-----Generated at Sat Apr 12 00:20:59 2025 by rpki-client