$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/975cc63a-2024-3ebe-b16e-c7a1d805a3bf.roa File: 975cc63a-2024-3ebe-b16e-c7a1d805a3bf.roa (raw, json) Hash identifier: +scmQf6MW3ryIgdYhTo77Zx7o10/NLKGJgQeibfl5zs= Subject key identifier: 60:98:21:67:C4:F7:C0:AC:4B:99:0D:44:AF:C9:B7:70:15:F9:25:59 Certificate issuer: /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08 Certificate serial: 010D0C9F4328584913AC1FB53BD0E4A572AE6700 Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/975cc63a-2024-3ebe-b16e-c7a1d805a3bf.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 397142 IP address blocks: 167.94.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1f:b5:3b:d0:e4:a5:72:ae:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=7109d931-b9ab-4e19-bcb6-fd29fd41dc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:1f:dd:8b:f8:13:e8:a1:b4:b6:0a:d9:98: 01:c9:6c:80:12:66:59:83:0f:56:f4:e2:a5:cd:17: 24:df:ec:f4:bd:46:3e:a2:82:60:1e:b9:fe:ab:aa: 20:50:d7:41:ca:8f:a5:93:51:3e:89:69:58:6d:45: d2:b4:d2:ec:a1:ec:3d:32:f9:18:05:93:bb:11:91: 40:7d:c7:98:89:dc:c7:5d:b8:18:19:ed:c9:fe:fa: 9d:fd:7c:29:e1:63:ca:29:77:48:a4:cf:d0:71:8c: 98:e4:89:78:5b:dd:a0:60:94:ad:fc:e5:ca:63:01: fe:e3:64:6a:f8:da:56:76:39:20:cf:a1:cf:5c:85: 27:fa:52:a6:5c:d1:86:99:8a:77:11:ee:08:b3:06: bc:e3:c9:f0:06:fe:7e:91:14:04:97:20:4d:66:c8: e7:7f:3d:e7:07:8f:b9:32:b8:8b:40:55:24:5c:fa: 74:ec:f5:76:1d:16:ad:39:71:33:59:81:46:9b:73: bc:b2:86:c1:8c:f1:76:ce:b2:90:f0:44:a7:dd:64: 9e:8a:c9:4b:6c:4c:da:54:9b:f8:ef:7c:5b:c4:a1: ca:d9:98:ad:b1:87:03:a0:76:0c:8a:df:91:92:cf: 79:1c:4c:8c:c1:a5:e2:ec:6b:28:07:e4:ed:24:bd: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:98:21:67:C4:F7:C0:AC:4B:99:0D:44:AF:C9:B7:70:15:F9:25:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/975cc63a-2024-3ebe-b16e-c7a1d805a3bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl X509v3 Authority Key Identifier: keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer sbgp-ipAddrBlock: critical IPv4: 167.94.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ed:ab:b7:d3:09:9e:c8:91:32:d0:5b:b9:4c:3c:72:0a:29: fd:21:d2:82:77:20:1e:96:8b:f4:ac:a1:65:8d:4e:f0:10:42: 1c:3a:b8:22:5d:55:54:5a:72:e7:ab:58:a6:d7:88:1c:37:e9: 20:e2:ee:c0:52:24:63:eb:5a:0a:83:e7:50:e5:60:35:6b:19: aa:0b:36:46:d2:99:15:66:d1:4e:35:59:d1:3b:6e:cd:8f:69: a1:37:3b:07:ad:8e:67:1a:c4:ac:92:df:89:b1:b8:ce:5b:5c: 43:48:56:ab:15:9e:e6:4e:78:7b:9c:2f:3a:78:f8:2e:07:63: 61:6b:5e:67:1c:3a:f1:cf:c2:04:77:42:fc:c3:49:93:2d:68: a1:c5:ca:6f:3d:26:b5:1c:3b:4b:41:f9:2a:40:2f:f1:30:a9: fa:ce:8a:b9:29:9a:af:3c:b6:a1:a4:c0:0c:1d:13:f4:76:d2: f0:0c:63:ce:91:de:43:9e:7b:f3:61:45:03:ee:3d:de:b5:fb: 9b:c0:84:87:84:92:ba:08:64:c9:18:7c:3d:38:41:19:8a:6e: 30:cb:95:b1:5b:5f:9d:1e:ed:65:1f:4c:29:fa:20:5e:25:44: 86:aa:db:69:c5:5a:94:0e:65:5d:7e:4c:31:bb:1f:9a:06:67: 9b:29:55:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB+1O9DkpXKuZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI0YTQwZjYtMjNiYS00YWRmLWEyYTUtNDJlMmZmZjQy YzA4MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NzEwOWQ5MzEtYjlhYi00ZTE5LWJjYjYtZmQyOWZkNDFkYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA214f3Yv4E+ihtLYK2ZgByWyAEmZZgw9W9OKl zRck3+z0vUY+ooJgHrn+q6ogUNdByo+lk1E+iWlYbUXStNLsoew9MvkYBZO7EZFA fceYidzHXbgYGe3J/vqd/Xwp4WPKKXdIpM/QcYyY5Il4W92gYJSt/OXKYwH+42Rq +NpWdjkgz6HPXIUn+lKmXNGGmYp3Ee4Iswa848nwBv5+kRQElyBNZsjnfz3nB4+5 MriLQFUkXPp07PV2HRatOXEzWYFGm3O8sobBjPF2zrKQ8ESn3WSeislLbEzaVJv4 73xbxKHK2ZitsYcDoHYMit+Rks95HEyMwaXi7GsoB+TtJL25IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCYIWfE98CsS5kNRK/Jt3AV+SVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjRh NDBmNi0yM2JhLTRhZGYtYTJhNS00MmUyZmZmNDJjMDgvOTc1Y2M2M2EtMjAyNC0z ZWJlLWIxNmUtYzdhMWQ4MDVhM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzI0YTQwZjYtMjNiYS00YWRmLWEy YTUtNDJlMmZmZjQyYzA4L2MyNGE0MGY2LTIzYmEtNGFkZi1hMmE1LTQyZTJmZmY0 MmMwOC5jcmwwHwYDVR0jBBgwFoAU+OS4V02pk1smacY6Sg/HueNR+QwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjRhNDBmNi0yM2JhLTRhZGYtYTJhNS00MmUy ZmZmNDJjMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp16wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLtq7fTCZ7IkTLQW7lMPHIKKf0h0oJ3IB6Wi/SsoWWNTvAQQhw6uCJd VVRacuerWKbXiBw36SDi7sBSJGPrWgqD51DlYDVrGaoLNkbSmRVm0U41WdE7bs2P aaE3OwetjmcaxKyS34mxuM5bXENIVqsVnuZOeHucLzp4+C4HY2FrXmccOvHPwgR3 QvzDSZMtaKHFym89JrUcO0tB+SpAL/EwqfrOirkpmq88tqGkwAwdE/R20vAMY86R 3kOee/NhRQPuPd61+5vAhIeEkroIZMkYfD04QRmKbjDLlbFbX50e7WUfTCn6IF4l RIaq22nFWpQOZV1+TDG7H5oGZ5spVdE= -----END CERTIFICATE-----Generated at Sat Apr 12 01:55:33 2025 by rpki-client