$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef6c745d-9cd8-3572-a9e1-5a8bac53fca7.roa File: ef6c745d-9cd8-3572-a9e1-5a8bac53fca7.roa (raw, json) Hash identifier: qbcIpiY/P4voJ2saTYP/T9/pCSHXzIPcprGvNQwAt18= Subject key identifier: 4E:2C:EF:93:4A:AE:32:52:1D:EB:3B:1D:A1:E4:A8:58:E7:53:50:19 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C439C463F6FA6443E6B6A0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef6c745d-9cd8-3572-a9e1-5a8bac53fca7.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 167.82.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:39:c4:63:f6:fa:64:43:e6:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=533b24db-8e2f-417f-ab47-e8c0df68b455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:d4:58:36:de:19:60:42:b7:9d:02:9c:db: 94:b4:67:44:27:de:63:00:a9:7c:3e:f0:15:f6:f1: 5a:00:3c:3b:88:40:b6:39:db:20:6e:fe:18:1c:71: 8a:23:26:23:39:10:42:fb:0e:5d:5b:ed:e8:4c:20: 17:7b:9d:96:d6:d2:15:31:53:f3:0a:9e:35:cf:95: 10:82:82:66:fa:7d:48:e3:34:0c:78:50:fa:14:41: 81:ee:09:f9:c6:ad:95:32:71:ce:2f:36:f6:f6:a2: 60:f5:15:c9:97:89:66:7f:b3:ca:47:38:8d:92:2d: 3e:5e:53:87:61:d8:57:f7:bc:0a:82:a8:7a:50:86: 68:1c:9d:04:73:27:62:0c:d6:34:e0:88:de:33:42: 18:57:f3:de:ff:62:9e:bf:02:04:28:e5:a3:f7:db: 62:7a:51:1b:c2:19:c9:2a:d9:5d:82:cc:9c:17:d8: b5:33:fb:bf:f5:6a:5e:40:3a:a3:84:f1:dc:3f:47: 12:62:eb:fe:fb:9f:21:6f:2c:01:fc:65:92:4a:7f: 45:e8:7a:49:92:9c:27:c1:d2:0c:e0:4b:7e:ae:19: 18:00:04:67:fe:14:ee:0e:0e:5d:ce:3e:d1:a7:6d: 0b:c7:ec:ac:63:f3:f3:8d:17:30:b8:0b:62:98:31: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2C:EF:93:4A:AE:32:52:1D:EB:3B:1D:A1:E4:A8:58:E7:53:50:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef6c745d-9cd8-3572-a9e1-5a8bac53fca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 167.82.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:88:bc:df:d1:f7:19:26:02:f1:9b:65:47:62:26:78:f3:e8: cc:03:49:0f:f5:eb:a3:7c:8c:98:6c:02:2d:ef:9e:25:73:aa: 82:b1:1f:b6:83:52:3f:8d:62:55:c9:4f:44:7e:20:8c:fe:3c: 53:ef:ba:92:3b:53:7d:b8:9e:61:fa:11:99:67:4e:03:66:8a: 23:1f:5d:38:ee:ab:a3:96:65:ff:8e:f0:74:34:89:21:57:17: 58:0d:d2:ae:6b:f8:a9:ce:74:d3:8f:4a:0d:43:6a:fd:2f:59: 39:5f:62:a6:96:c8:97:07:44:1d:0c:71:44:a9:a9:78:dd:2c: 4b:cd:87:68:75:f4:f3:2d:f7:23:a6:87:09:a6:75:02:1f:49: 06:dd:9b:c4:96:42:b6:4b:75:7f:5b:3c:bb:db:04:1a:00:1a: b1:3c:7b:e8:3a:ee:b4:1f:3e:19:0e:93:fd:8f:0e:68:c5:64: e1:68:51:e2:46:d6:0d:dd:89:2b:de:d8:a1:d8:f6:59:27:53: 63:c4:d3:84:70:22:8c:8e:45:df:c7:3f:eb:1e:a4:10:82:6d: 06:28:8a:20:c6:66:b6:64:4f:c6:22:2f:42:00:3a:af:ab:2d: f4:22:67:ed:48:93:2d:44:e8:2e:25:cd:4a:74:a7:d2:5a:84: b9:ae:df:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDnEY/b6ZEPmtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTMzYjI0ZGItOGUyZi00MTdmLWFiNDctZThjMGRmNjhiNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdvUWDbeGWBCt50CnNuUtGdEJ95jAKl8PvAV 9vFaADw7iEC2Odsgbv4YHHGKIyYjORBC+w5dW+3oTCAXe52W1tIVMVPzCp41z5UQ goJm+n1I4zQMeFD6FEGB7gn5xq2VMnHOLzb29qJg9RXJl4lmf7PKRziNki0+XlOH YdhX97wKgqh6UIZoHJ0EcydiDNY04IjeM0IYV/Pe/2KevwIEKOWj99tielEbwhnJ KtldgsycF9i1M/u/9WpeQDqjhPHcP0cSYuv++58hbywB/GWSSn9F6HpJkpwnwdIM 4Et+rhkYAARn/hTuDg5dzj7Rp20Lx+ysY/PzjRcwuAtimDFUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4s75NKrjJSHes7HaHkqFjnU1AZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZWY2Yzc0NWQtOWNkOC0z NTcyLWE5ZTEtNWE4YmFjNTNmY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1KCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmIvN/R9xkmAvGbZUdiJnjz6MwDSQ/166N8jJhsAi3vniVzqoKxH7aD Uj+NYlXJT0R+IIz+PFPvupI7U324nmH6EZlnTgNmiiMfXTjuq6OWZf+O8HQ0iSFX F1gN0q5r+KnOdNOPSg1Dav0vWTlfYqaWyJcHRB0McUSpqXjdLEvNh2h19PMt9yOm hwmmdQIfSQbdm8SWQrZLdX9bPLvbBBoAGrE8e+g67rQfPhkOk/2PDmjFZOFoUeJG 1g3diSve2KHY9lknU2PE04RwIoyORd/HP+sepBCCbQYoiiDGZrZkT8YiL0IAOq+r LfQiZ+1Iky1E6C4lzUp0p9JahLmu3xE= -----END CERTIFICATE-----Generated at Thu Apr 3 02:56:51 2025 by rpki-client