$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa File: 6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa (raw, json) Hash identifier: uVa7d5LftLA6woLYTVNBkuMXlC1go3jW16B0ufw3kAU= Subject key identifier: 5E:8F:E7:17:4B:A1:AE:6A:05:95:94:44:9C:46:22:F2:04:7A:70:8C Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285848BE863476AFEE5CB15FCC2600 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 399275 IP address blocks: 167.253.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:34:76:af:ee:5c:b1:5f:cc:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=61107f22-3285-41ca-86c7-6e7210a21727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:58:4c:50:cb:d8:86:66:6e:e8:dc:a6:6b: 8f:3a:4a:70:8a:1b:5b:93:31:94:59:b6:d4:0d:f4: 44:e8:9f:9e:aa:e2:01:32:72:d8:cb:6f:5d:2e:30: 65:3b:8a:a4:b5:75:3c:ae:65:11:0d:d4:4e:c8:f9: 45:dd:21:a8:b7:86:36:bb:8b:20:ad:f3:2f:3c:57: be:55:38:52:7e:fb:97:a9:95:99:a9:55:35:f5:c2: 95:0d:2e:cc:8c:c5:86:3e:7a:8b:d7:e1:e2:cf:f9: 56:41:ee:a4:d8:63:61:07:4b:a6:da:42:9b:b7:16: 80:4d:2b:9e:e3:44:bb:eb:d8:40:56:c4:1d:cc:2f: d4:a6:d2:0c:85:71:0d:d4:6f:ab:aa:fa:42:06:4d: 36:89:e0:e7:f9:56:7a:d8:82:06:33:6a:c8:ba:a4: 94:96:62:fb:e2:ee:11:b0:39:50:b9:4e:e3:a6:ea: 93:e2:b6:55:fe:a3:42:d8:84:e8:9d:9e:88:dc:3e: 42:e8:68:7d:1b:02:6a:fd:05:a9:84:d0:35:00:e2: 43:0f:75:9d:f8:b9:3d:99:d1:d2:e5:15:17:d2:c2: 6f:7d:bc:27:66:c3:e2:83:52:54:2e:74:6e:0c:fe: 30:a4:a0:ac:5a:aa:f2:20:8b:2f:ca:fb:d1:ef:4e: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:E7:17:4B:A1:AE:6A:05:95:94:44:9C:46:22:F2:04:7A:70:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:46:ba:64:0c:77:ff:47:d2:ef:11:4d:c0:4b:24:e7:d9:f5: 76:16:89:8e:5c:59:e6:08:05:70:70:48:e1:d4:0e:ac:cd:f5: 1d:69:58:e1:09:e0:19:e7:6e:f8:8d:52:1c:a5:1d:62:bd:af: c8:da:00:64:3e:07:82:e6:da:cb:8a:bd:d6:e3:3b:a9:f7:08: 89:6d:26:e6:6d:9c:c4:dc:e2:ed:ad:ce:87:04:9d:0d:f5:c4: fd:dd:89:e7:2d:0c:4f:df:3f:d1:21:09:be:bc:28:3b:66:21: 0c:b7:5f:a7:50:5b:0d:46:0d:5e:25:b4:f2:fb:2a:41:b0:bd: 88:62:d9:8f:c2:06:bd:85:a2:91:b0:20:7c:14:c4:fa:6c:c4: d6:df:57:e3:e6:e2:09:f9:93:70:46:e6:2e:fc:20:99:2d:6d: a3:3a:5f:6b:c6:04:f9:14:4a:c3:01:42:9c:f1:ce:0b:10:e7: c4:99:19:57:1d:1d:eb:23:b0:ed:86:da:35:3b:b5:32:08:b6: 0d:8c:69:0a:f2:0a:83:ef:ee:56:63:8d:a7:e4:00:10:aa:d5: ec:1a:00:2b:ce:fa:5f:df:75:97:1e:09:0f:07:ed:33:49:c7: 41:4a:da:c6:c5:05:ec:c9:a4:4d:0d:e1:f4:97:d3:34:26:4f: 96:be:28:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjR2r+5csV/MJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NjExMDdmMjItMzI4NS00MWNhLTg2YzctNmU3MjEwYTIxNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3chYTFDL2IZmbujcpmuPOkpwihtbkzGUWbbU DfRE6J+equIBMnLYy29dLjBlO4qktXU8rmURDdROyPlF3SGot4Y2u4sgrfMvPFe+ VThSfvuXqZWZqVU19cKVDS7MjMWGPnqL1+Hiz/lWQe6k2GNhB0um2kKbtxaATSue 40S769hAVsQdzC/UptIMhXEN1G+rqvpCBk02ieDn+VZ62IIGM2rIuqSUlmL74u4R sDlQuU7jpuqT4rZV/qNC2ITonZ6I3D5C6Gh9GwJq/QWphNA1AOJDD3Wd+Lk9mdHS 5RUX0sJvfbwnZsPig1JULnRuDP4wpKCsWqryIIsvyvvR706HwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6P5xdLoa5qBZWURJxGIvIEenCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvNmM2OWE1NGItNWJiMC0z NTc4LTk1ZmQtYTQxNzJlZjU5ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBGumQMd/9H0u8RTcBLJOfZ9XYWiY5cWeYIBXBwSOHUDqzN9R1pWOEJ 4BnnbviNUhylHWK9r8jaAGQ+B4Lm2suKvdbjO6n3CIltJuZtnMTc4u2tzocEnQ31 xP3diectDE/fP9EhCb68KDtmIQy3X6dQWw1GDV4ltPL7KkGwvYhi2Y/CBr2FopGw IHwUxPpsxNbfV+Pm4gn5k3BG5i78IJktbaM6X2vGBPkUSsMBQpzxzgsQ58SZGVcd HesjsO2G2jU7tTIItg2MaQryCoPv7lZjjafkABCq1ewaACvO+l/fdZceCQ8H7TNJ x0FK2sbFBezJpE0N4fSX0zQmT5a+KNI= -----END CERTIFICATE-----Generated at Sat Apr 12 18:34:35 2025 by rpki-client