$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/48b9666b-36c4-317b-bac6-fce0c51c7a87.roa File: 48b9666b-36c4-317b-bac6-fce0c51c7a87.roa (raw, json) Hash identifier: QJhYLL09lSKA4OX5FNEuJztYJ2FCr0OfctYuBl15bxk= Subject key identifier: 57:4F:75:CA:D1:A4:87:BF:52:AF:99:F3:1B:0A:92:C8:EB:E0:4B:6C Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Certificate serial: 010D0C9F432858489BA0A6CAD510221C72CAC580 Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/48b9666b-36c4-317b-bac6-fce0c51c7a87.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 6079 IP address blocks: 167.253.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a6:ca:d5:10:22:1c:72:ca:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=60e5b687-7d8d-425f-8c2f-7e5c2a6944f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:d3:58:f6:71:dd:0f:d8:71:a6:dc:4f:f5: 82:13:f7:7f:9d:42:60:a1:4c:4d:ae:5d:8a:35:11: 81:77:91:3b:4d:7e:ba:b5:88:02:0e:00:66:7a:62: a0:55:4c:de:82:52:ed:61:6a:a9:c8:bf:12:1e:14: 42:1c:02:53:30:bf:b4:43:49:8c:03:05:3a:2a:57: fa:f1:15:e1:c4:07:e4:68:b2:ff:f2:a3:e7:4d:92: e7:65:31:e2:ec:58:8a:c3:2f:09:c3:f3:04:5c:07: c1:28:8c:4f:15:20:46:b1:8c:99:ae:b7:d2:e9:a9: e7:84:f5:f7:27:22:da:3d:53:b7:32:76:4c:d2:f1: 5a:87:be:3d:4e:18:a5:24:81:55:fd:27:d8:27:c8: a5:c9:23:ee:e1:90:8d:ff:97:5e:7c:2e:d9:31:fc: 7d:8f:9c:19:98:a6:e1:d4:fc:69:a6:1f:0e:e6:31: 38:8f:5d:db:6c:eb:bf:70:23:de:39:63:f0:e9:1f: df:1a:82:50:a2:fe:61:d6:bc:25:5f:2a:3a:32:5a: 21:d7:26:50:fe:7f:33:2e:c6:c4:e2:a5:a1:f6:9d: e6:e0:ef:fa:7c:be:9b:52:0b:a4:09:f7:f2:b9:fe: 6e:ae:7d:3b:b3:95:27:bf:ef:e2:6a:24:37:36:36: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4F:75:CA:D1:A4:87:BF:52:AF:99:F3:1B:0A:92:C8:EB:E0:4B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/48b9666b-36c4-317b-bac6-fce0c51c7a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl X509v3 Authority Key Identifier: keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fd:88:1a:de:3b:9e:2d:b4:ba:f9:1c:03:d3:fc:b3:c3:b8: 6c:a0:c4:36:58:c2:1c:5e:d1:f8:c7:56:05:b8:9d:d1:cd:fb: ea:96:bf:34:8a:5a:fb:a2:29:eb:2a:04:56:40:77:e2:48:88: 76:5d:50:52:2e:de:69:f8:2c:aa:a9:7d:44:f9:30:e9:84:ea: 92:49:b8:40:2d:f4:71:47:ec:99:e1:52:32:71:90:62:ff:62: f8:95:d4:95:0e:91:7f:a8:1d:0e:8f:a7:39:2a:64:6c:84:06: ae:69:75:51:fc:b1:a9:a7:be:c3:f6:de:78:e1:bb:1f:21:71: 4a:e0:54:83:5c:68:f2:7f:23:68:1f:54:f3:8b:56:36:b8:d6: 19:d0:66:f3:ac:3c:b1:bf:f9:ae:c2:59:79:8e:71:81:3c:17: d0:80:51:a6:9c:9e:16:bf:96:b8:d6:fe:3e:c4:59:d0:9d:8b: e0:68:72:62:fb:bc:f8:4c:ed:d4:b8:92:77:63:77:3b:8e:4e: ea:a8:c5:a6:f1:82:78:d2:38:1e:8b:2f:43:71:2b:74:ec:c4: c2:da:2e:0f:66:d9:84:96:38:6a:53:56:e5:cc:06:3c:7e:b9: 40:2c:e2:ed:bd:3f:69:a0:d8:f8:ba:98:64:a8:e4:bd:4a:4d: 21:3f:f7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKbK1RAiHHLKxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl ODRhMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk NjBlNWI2ODctN2Q4ZC00MjVmLThjMmYtN2U1YzJhNjk0NGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX7TWPZx3Q/YcabcT/WCE/d/nUJgoUxNrl2K NRGBd5E7TX66tYgCDgBmemKgVUzeglLtYWqpyL8SHhRCHAJTML+0Q0mMAwU6Klf6 8RXhxAfkaLL/8qPnTZLnZTHi7FiKwy8Jw/MEXAfBKIxPFSBGsYyZrrfS6annhPX3 JyLaPVO3MnZM0vFah749ThilJIFV/SfYJ8ilySPu4ZCN/5defC7ZMfx9j5wZmKbh 1Pxpph8O5jE4j13bbOu/cCPeOWPw6R/fGoJQov5h1rwlXyo6Mloh1yZQ/n8zLsbE 4qWh9p3m4O/6fL6bUgukCffyuf5urn07s5Unv+/iaiQ3NjZALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdPdcrRpIe/Uq+Z8xsKksjr4EtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNDhiOTY2NmItMzZjNC0z MTdiLWJhYzYtZmNlMGM1MWM3YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4 ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL9iBreO54ttLr5HAPT/LPDuGygxDZYwhxe0fjHVgW4ndHN++qWvzSK WvuiKesqBFZAd+JIiHZdUFIu3mn4LKqpfUT5MOmE6pJJuEAt9HFH7JnhUjJxkGL/ YviV1JUOkX+oHQ6PpzkqZGyEBq5pdVH8samnvsP23njhux8hcUrgVINcaPJ/I2gf VPOLVja41hnQZvOsPLG/+a7CWXmOcYE8F9CAUaacnha/lrjW/j7EWdCdi+BocmL7 vPhM7dS4kndjdzuOTuqoxabxgnjSOB6LL0NxK3TsxMLaLg9m2YSWOGpTVuXMBjx+ uUAs4u29P2mg2Pi6mGSo5L1KTSE/90k= -----END CERTIFICATE-----Generated at Fri Apr 4 19:12:30 2025 by rpki-client