$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa File: 0bac6c3d-c4d0-3185-9107-292db0efe582.roa (raw, json) Hash identifier: ADVenEPrvTI1KRYIYZO/zxJa8zuyt3OBMJTmnTp7/ok= Subject key identifier: D0:34:A0:DB:6E:7B:C7:03:7A:B8:C5:6D:4E:51:67:1D:19:49:D6:8A Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Certificate serial: 010D0C9F43285848AF2B827A9B3DE1AF73AAC380 Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 397898 IP address blocks: 67.159.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:82:7a:9b:3d:e1:af:73:aa:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=51bf9afc-ab15-4a33-85ee-6cbf5fb540c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:8f:95:3a:ac:72:de:cd:d6:e5:a5:79:aa: 57:5f:46:41:72:cd:cd:8f:c9:fb:64:9a:62:24:ae: 3f:36:0e:d0:39:98:58:a9:a7:a8:a0:e6:fb:33:87: 6e:99:b0:7a:2e:e6:b6:3c:6f:5c:44:15:f5:dd:29: db:f9:b2:de:5f:45:aa:2a:de:3d:dd:df:81:01:c5: d0:5a:14:fa:f3:3f:98:4e:23:97:2d:91:df:47:6a: fb:9d:89:24:12:9c:17:6f:f2:c3:dc:5f:fa:49:f1: 60:6d:e0:05:62:ae:8f:0c:e2:2a:aa:60:e7:8c:26: 87:51:55:a2:27:74:a7:bc:18:3a:13:cf:19:9f:57: 33:77:51:db:ce:e1:15:6a:9b:ac:73:09:56:2d:1f: 01:a4:61:db:c3:c5:fd:0b:0f:5e:a7:da:11:bb:85: 97:de:45:1c:bc:de:e4:00:0e:a7:27:51:ce:6e:fe: 8a:5f:a5:2f:ec:0e:72:55:0a:53:33:5c:44:82:f3: f8:97:ed:1c:b4:ea:5b:0e:7c:2f:d2:da:41:7e:43: e4:8a:45:cd:83:7f:4b:1d:6a:76:49:f2:5f:20:83: 24:18:13:69:9c:ba:5d:97:06:3e:df:38:16:8c:dc: 40:e0:23:79:71:db:66:0e:60:48:f6:62:d6:48:07: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:A0:DB:6E:7B:C7:03:7A:B8:C5:6D:4E:51:67:1D:19:49:D6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/0bac6c3d-c4d0-3185-9107-292db0efe582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl X509v3 Authority Key Identifier: keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer sbgp-ipAddrBlock: critical IPv4: 67.159.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:13:8a:67:39:9b:64:01:5c:c6:61:4e:1a:05:6c:10:a0:c2: 8d:f0:be:48:b2:80:f8:86:b3:12:43:86:0b:57:aa:24:87:a0: 71:ea:a0:d2:91:de:6a:3a:cc:11:7b:23:77:10:f3:20:19:4c: df:66:b8:9a:17:5b:7d:2c:1b:27:e5:3b:af:c5:82:9d:55:f9: 4d:ed:1b:03:e5:5e:8c:21:7f:24:b9:80:96:a5:cb:3d:82:5f: d0:e6:2f:a4:a3:55:55:6f:67:67:3f:d5:51:79:5c:b3:4d:0b: 44:4d:f9:8e:8a:4d:0c:6d:7a:61:67:50:f3:f2:6c:63:10:0e: 75:da:87:47:31:4f:0c:18:ce:bc:58:f1:74:b1:60:58:dd:5b: 85:01:84:d4:64:23:1d:68:ee:00:f7:21:64:24:6d:a9:19:47: 6f:2d:ad:cd:20:41:bc:7e:ef:c5:ef:11:5d:19:92:b0:43:5b: 77:8e:1d:f1:2e:11:56:66:70:7d:bc:29:a4:c1:40:c2:4d:a3: 70:0e:54:79:b3:f1:32:bd:8d:2b:26:e7:23:bb:81:3c:02:b1: 27:4e:35:0b:6d:53:d4:9b:8f:a0:b6:67:77:74:a8:32:5b:7b: 53:6f:9c:37:4d:ba:c5:ec:d9:da:b5:ae:94:3d:06:50:9c:cf: 88:fa:c9:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4J6mz3hr3Oqw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJmM2FmYjEtMmJmNC00NzE2LTkwM2ItMjlkZmExZTg4 MTc2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NTFiZjlhZmMtYWIxNS00YTMzLTg1ZWUtNmNiZjVmYjU0MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++PlTqsct7N1uWleapXX0ZBcs3Nj8n7ZJpi JK4/Ng7QOZhYqaeooOb7M4dumbB6Lua2PG9cRBX13Snb+bLeX0WqKt493d+BAcXQ WhT68z+YTiOXLZHfR2r7nYkkEpwXb/LD3F/6SfFgbeAFYq6PDOIqqmDnjCaHUVWi J3SnvBg6E88Zn1czd1HbzuEVapuscwlWLR8BpGHbw8X9Cw9ep9oRu4WX3kUcvN7k AA6nJ1HObv6KX6Uv7A5yVQpTM1xEgvP4l+0ctOpbDnwv0tpBfkPkikXNg39LHWp2 SfJfIIMkGBNpnLpdlwY+3zgWjNxA4CN5cdtmDmBI9mLWSAdqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA0oNtue8cDerjFbU5RZx0ZSdaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYz YWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRmYTFlODgxNzYvMGJhYzZjM2QtYzRkMC0z MTg1LTkxMDctMjkyZGIwZWZlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzJmM2FmYjEtMmJmNC00NzE2LTkw M2ItMjlkZmExZTg4MTc2L2MyZjNhZmIxLTJiZjQtNDcxNi05MDNiLTI5ZGZhMWU4 ODE3Ni5jcmwwHwYDVR0jBBgwFoAUa1BZ6Q1zBxnfTw0LwaPk2KTTppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMmYzYWZiMS0yYmY0LTQ3MTYtOTAzYi0yOWRm YTFlODgxNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKETimc5m2QBXMZhThoFbBCgwo3wvkiygPiGsxJDhgtXqiSHoHHqoNKR 3mo6zBF7I3cQ8yAZTN9muJoXW30sGyflO6/Fgp1V+U3tGwPlXowhfyS5gJalyz2C X9DmL6SjVVVvZ2c/1VF5XLNNC0RN+Y6KTQxtemFnUPPybGMQDnXah0cxTwwYzrxY 8XSxYFjdW4UBhNRkIx1o7gD3IWQkbakZR28trc0gQbx+78XvEV0ZkrBDW3eOHfEu EVZmcH28KaTBQMJNo3AOVHmz8TK9jSsm5yO7gTwCsSdONQttU9Sbj6C2Z3d0qDJb e1NvnDdNusXs2dq1rpQ9BlCcz4j6ydI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:50:40 2025 by rpki-client