$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa File: 352d2a14-7375-334b-9c60-edebec362279.roa (raw, json) Hash identifier: wrJTZQC/Gm5neojeOJ7TWLYJS+gsyg+vlM6ahY3e7KU= Subject key identifier: B5:AD:C9:FB:C5:10:CF:0C:38:08:29:AF:31:76:CB:F3:D9:63:77:9C Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584A7D16014BFC928A074C9CFE80 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 399275 IP address blocks: 167.253.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:01:4b:fc:92:8a:07:4c:9c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=a3e0d0e3-b907-4b72-8f3c-4d0660010232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:51:2e:af:f0:fd:f7:5a:39:0c:95:6f:c9: ab:0a:cf:ef:4d:ef:f3:8e:65:77:5e:10:b1:0c:96: c3:c5:ba:66:bb:4e:bb:b9:38:ab:b7:7b:41:2a:33: fb:f7:99:3c:95:8e:33:b8:70:9f:be:2b:c3:aa:15: 53:9d:11:24:60:f6:17:45:ed:d7:f5:35:cb:c3:88: b8:5b:94:dd:5d:47:9d:7e:9b:74:fa:0f:d4:b1:70: 23:f1:8c:6a:a1:a3:2e:66:9c:fb:69:ac:54:30:bb: 80:05:45:f8:c1:20:2b:ba:b3:d3:35:89:f5:25:ca: e4:de:80:4d:bb:e7:d9:4f:44:91:52:9f:22:17:41: 1f:68:75:22:3b:e2:6f:5d:b4:a8:96:13:94:c0:ea: 24:1b:64:0c:ca:af:4c:53:4f:44:64:1e:0d:62:01: 4c:89:ae:db:db:3c:cc:9c:b6:20:16:f6:5d:97:54: 5f:99:09:a5:4e:3f:93:69:77:b8:37:56:a7:76:9e: 43:7b:bb:5e:84:01:f7:e5:37:42:05:f3:80:20:38: 46:bb:c3:96:3d:a1:80:f1:fa:a9:19:a2:bc:c2:57: 98:86:40:3d:be:77:03:1d:1a:7b:5b:36:47:3e:0d: 14:79:26:5f:35:31:32:3c:7c:88:b2:ca:31:ff:d0: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:C9:FB:C5:10:CF:0C:38:08:29:AF:31:76:CB:F3:D9:63:77:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:18:78:54:6f:a0:e7:d3:78:86:8d:a9:03:aa:c4:29:49:cd: 93:02:9a:4c:f7:93:35:a0:8d:ae:f2:6e:f4:b8:21:2d:1d:59: 2a:b9:47:23:5d:86:78:21:2c:ec:cf:39:a4:3c:72:eb:d8:ac: b4:76:39:d3:b9:d0:63:7d:03:c4:2a:19:b1:a7:fd:0f:dd:10: 5b:b5:21:2a:f9:35:08:a0:77:1e:20:55:b6:c3:07:3a:e0:0f: 79:ff:d9:06:53:b1:a2:4b:22:b5:ae:77:70:a2:24:9e:c4:97: 06:7f:39:38:4b:fe:ae:20:f0:b0:b2:79:43:52:72:96:8d:92: 2d:2d:74:bd:6d:2c:8c:7b:b5:33:e2:58:b7:f4:7b:a8:cf:78: e2:76:15:13:b4:62:39:d1:f8:4d:a1:ca:31:a3:ae:8d:12:84: 0b:d6:c6:a4:c8:33:07:19:3b:3b:69:35:16:d8:aa:4f:c7:d0: 15:c7:d6:d1:44:80:4a:d2:b7:d9:a8:3d:d9:c0:41:f5:1e:01: 2f:f6:9e:e9:f0:c7:85:8a:24:06:67:f2:82:63:de:a3:4c:87: 5b:08:c7:01:7e:79:33:6c:1b:b2:92:17:57:3c:36:72:3a:b4: 79:b3:51:61:f6:46:7b:e5:de:0c:2c:0d:9b:61:0c:8e:69:b1: 1b:6d:e4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgFL/JKKB0yc/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YTNlMGQwZTMtYjkwNy00YjcyLThmM2MtNGQwNjYwMDEwMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl11RLq/w/fdaOQyVb8mrCs/vTe/zjmV3XhCx DJbDxbpmu067uTirt3tBKjP795k8lY4zuHCfvivDqhVTnREkYPYXRe3X9TXLw4i4 W5TdXUedfpt0+g/UsXAj8YxqoaMuZpz7aaxUMLuABUX4wSArurPTNYn1Jcrk3oBN u+fZT0SRUp8iF0EfaHUiO+JvXbSolhOUwOokG2QMyq9MU09EZB4NYgFMia7b2zzM nLYgFvZdl1RfmQmlTj+TaXe4N1andp5De7tehAH35TdCBfOAIDhGu8OWPaGA8fqp GaK8wleYhkA9vncDHRp7WzZHPg0UeSZfNTEyPHyIssox/9DGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWtyfvFEM8MOAgprzF2y/PZY3ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMzUyZDJhMTQtNzM3NS0z MzRiLTljNjAtZWRlYmVjMzYyMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEYeFRvoOfTeIaNqQOqxClJzZMCmkz3kzWgja7ybvS4IS0dWSq5RyNd hnghLOzPOaQ8cuvYrLR2OdO50GN9A8QqGbGn/Q/dEFu1ISr5NQigdx4gVbbDBzrg D3n/2QZTsaJLIrWud3CiJJ7ElwZ/OThL/q4g8LCyeUNScpaNki0tdL1tLIx7tTPi WLf0e6jPeOJ2FRO0YjnR+E2hyjGjro0ShAvWxqTIMwcZOztpNRbYqk/H0BXH1tFE gErSt9moPdnAQfUeAS/2nunwx4WKJAZn8oJj3qNMh1sIxwF+eTNsG7KSF1c8NnI6 tHmzUWH2Rnvl3gwsDZthDI5psRtt5LY= -----END CERTIFICATE-----Generated at Thu Jul 31 22:59:31 2025 by rpki-client