$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7951ccae-b199-3691-8338-2c0303a4d96d.roa File: 7951ccae-b199-3691-8338-2c0303a4d96d.roa (raw, json) Hash identifier: VXmsMMHqIms/8nOYl1dpfGYewpm0GYfUDk7JToGrdyc= Subject key identifier: 7F:41:16:76:50:49:D3:1F:39:2E:DB:97:26:1C:BE:D6:01:AB:B0:D6 Certificate issuer: /CN=7aebe767-bae5-4599-9f64-207d0268f48c Certificate serial: 010D0C9F43285848BBBB867E1B00ABBD6AC63000 Authority key identifier: B6:65:27:7C:E0:48:B4:D3:52:CC:88:47:97:6D:0A:57:BB:78:65:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7951ccae-b199-3691-8338-2c0303a4d96d.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 8796 IP address blocks: 23.166.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:86:7e:1b:00:ab:bd:6a:c6:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aebe767-bae5-4599-9f64-207d0268f48c Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=1ae684fc-3895-447e-8f51-ba281a980b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:a3:6f:24:42:7c:c8:4d:1d:15:10:cd:f0: e3:94:5c:c3:4c:de:cb:28:65:9a:7a:dd:e4:00:46: d3:f5:9b:e0:7d:6e:e9:81:e3:9d:36:ef:e8:63:54: 97:75:45:61:94:8d:ad:71:97:e1:13:65:d1:c3:04: 8c:31:24:80:6d:71:d9:fc:7d:e9:22:34:8e:96:1d: 80:44:49:0a:54:d8:3c:f2:b9:f5:c3:13:3c:68:5d: ac:bc:8e:f4:7b:2b:21:3b:df:fa:4f:b0:3a:35:5c: cc:b3:6c:77:cd:b2:f8:92:dc:ad:5a:3c:fb:89:ad: ff:d6:04:60:5e:0e:70:1a:b7:90:2e:7e:81:3b:82: 68:3d:76:7e:a8:f7:67:83:c3:0a:1e:97:c7:0c:dd: 55:53:34:5f:fc:ad:9c:99:57:70:5f:43:0b:75:eb: 9e:2d:8c:5e:4c:69:dc:45:67:91:77:79:b5:93:7e: ae:a3:1f:60:e7:65:5c:84:8a:65:ef:d1:74:cb:82: b8:12:70:c7:55:1a:0c:1a:b8:2e:80:c9:3e:95:ba: d8:de:2d:12:e0:99:ba:09:67:ce:d0:5d:cc:55:2e: 0b:57:1d:a4:58:06:77:61:da:4e:f1:8c:1c:8c:00: 52:a3:48:82:3a:5b:05:77:0a:88:dd:99:e0:60:9d: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:16:76:50:49:D3:1F:39:2E:DB:97:26:1C:BE:D6:01:AB:B0:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7951ccae-b199-3691-8338-2c0303a4d96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.crl X509v3 Authority Key Identifier: keyid:B6:65:27:7C:E0:48:B4:D3:52:CC:88:47:97:6D:0A:57:BB:78:65:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer sbgp-ipAddrBlock: critical IPv4: 23.166.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:38:e5:5f:2a:80:ea:df:09:fa:a3:5b:d8:a4:02:1f:fd:f9: e0:a2:63:a1:74:73:fa:b6:ac:67:88:25:01:46:84:4b:01:7b: f9:fe:40:9c:f5:ce:be:e0:51:7c:f3:64:41:a0:42:9c:e7:f1: 55:ee:6b:00:0f:1b:fd:dd:76:3d:d4:1c:dc:6c:21:5c:3c:a9: dd:f1:05:bd:f0:07:f7:05:17:71:05:07:df:98:f6:7d:61:8c: a9:ce:ad:c1:9b:b3:28:0f:8f:25:f7:bd:a1:c6:fd:fc:3e:ce: 97:b9:16:01:2f:f1:85:a0:1a:63:73:a8:d4:94:af:94:b1:17: c0:b6:06:fe:7a:0f:c1:2e:d0:48:c7:d8:de:c7:97:66:83:a9: ef:79:35:41:9d:a5:ad:82:2d:5d:94:b8:b7:a6:e2:87:b2:f7: 85:bd:de:dd:87:94:2d:b2:f1:56:94:cf:b6:c9:ee:8b:64:9e: 41:de:d4:77:5a:55:a2:ec:57:fc:55:63:18:7a:da:ff:93:ca: f7:eb:8c:df:16:c6:fd:ec:e7:a5:af:5f:97:5c:bb:72:71:bd: ee:86:0a:40:1d:c1:2e:37:b2:c7:80:c8:db:bf:54:41:23:e2: 9d:f2:76:ef:dc:5a:8c:a8:2a:a6:84:9c:3c:da:09:70:79:5c: e6:ec:cf:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4Z+GwCrvWrGMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FlYmU3NjctYmFlNS00NTk5LTlmNjQtMjA3ZDAyNjhm NDhjMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MWFlNjg0ZmMtMzg5NS00NDdlLThmNTEtYmEyODFhOTgwYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6GjbyRCfMhNHRUQzfDjlFzDTN7LKGWaet3k AEbT9ZvgfW7pgeOdNu/oY1SXdUVhlI2tcZfhE2XRwwSMMSSAbXHZ/H3pIjSOlh2A REkKVNg88rn1wxM8aF2svI70eyshO9/6T7A6NVzMs2x3zbL4ktytWjz7ia3/1gRg Xg5wGreQLn6BO4JoPXZ+qPdng8MKHpfHDN1VUzRf/K2cmVdwX0MLdeueLYxeTGnc RWeRd3m1k36uox9g52VchIpl79F0y4K4EnDHVRoMGrgugMk+lbrY3i0S4Jm6CWfO 0F3MVS4LVx2kWAZ3YdpO8YwcjABSo0iCOlsFdwqI3ZngYJ0TDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9BFnZQSdMfOS7blyYcvtYBq7DWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YWVi ZTc2Ny1iYWU1LTQ1OTktOWY2NC0yMDdkMDI2OGY0OGMvNzk1MWNjYWUtYjE5OS0z NjkxLTgzMzgtMmMwMzAzYTRkOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2FlYmU3NjctYmFlNS00NTk5LTlm NjQtMjA3ZDAyNjhmNDhjLzdhZWJlNzY3LWJhZTUtNDU5OS05ZjY0LTIwN2QwMjY4 ZjQ4Yy5jcmwwHwYDVR0jBBgwFoAUtmUnfOBItNNSzIhHl20KV7t4ZXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YWViZTc2Ny1iYWU1LTQ1OTktOWY2NC0yMDdk MDI2OGY0OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6aoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk45V8qgOrfCfqjW9ikAh/9+eCiY6F0c/q2rGeIJQFGhEsBe/n+QJz1 zr7gUXzzZEGgQpzn8VXuawAPG/3ddj3UHNxsIVw8qd3xBb3wB/cFF3EFB9+Y9n1h jKnOrcGbsygPjyX3vaHG/fw+zpe5FgEv8YWgGmNzqNSUr5SxF8C2Bv56D8Eu0EjH 2N7Hl2aDqe95NUGdpa2CLV2UuLem4oey94W93t2HlC2y8VaUz7bJ7otknkHe1Hda VaLsV/xVYxh62v+TyvfrjN8Wxv3s56WvX5dcu3Jxve6GCkAdwS43sseAyNu/VEEj 4p3ydu/cWoyoKqaEnDzaCXB5XObszyA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:02 2025 by rpki-client