$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa File: 7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa (raw, json) Hash identifier: Ry1KoNkPkquSEhBSqeoaPdCJga0zv5N+ZXPOAQHrdgs= Subject key identifier: 8C:B7:71:C9:5E:A2:52:1F:73:A8:1A:D8:02:A8:79:5F:DF:01:A2:0F Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285848DEA12086B33530F84D2A7B60 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 399275 IP address blocks: 167.253.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:20:86:b3:35:30:f8:4d:2a:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=5f06393c-55ee-4dba-a770-e43889821a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:c9:63:3a:17:90:29:41:b6:51:08:c0:4d: 88:33:a3:a6:c4:00:19:a9:ac:48:75:32:c7:57:ed: 86:77:14:f6:f7:fc:40:56:97:ad:5a:e5:84:36:87: e3:b9:06:8c:76:c6:db:b7:04:46:57:5f:44:a2:b2: da:e6:cd:7d:2b:a8:1e:4c:8a:ea:08:df:f0:58:eb: 6b:6f:68:5a:9f:32:d1:c1:f2:d1:c0:86:15:ff:f0: 87:6a:2a:34:5e:06:af:e7:7c:10:72:d0:90:15:38: a1:b0:48:03:ba:7a:d4:b6:7d:88:ec:22:61:0a:c9: fe:0a:66:7e:2a:f9:30:bd:e3:7b:27:6a:96:86:1f: b8:c8:cb:8b:eb:0f:6f:a4:19:ba:89:19:7e:88:8c: 36:eb:45:82:87:18:b2:b1:58:2b:d6:84:7b:bc:a3: cc:aa:1c:d5:92:76:b2:3f:5f:f8:c9:c4:78:6e:94: fd:a6:12:58:02:9d:dd:4c:40:3e:73:07:71:5e:21: a2:cd:e4:49:d9:1c:93:d6:1d:1d:30:fa:19:1e:e2: 7c:10:99:d9:b6:b2:2b:3f:70:4f:a7:3a:43:8f:9f: a5:97:d7:36:6d:44:fa:52:25:3e:48:95:27:78:78: 97:e6:9e:c1:bc:56:8a:36:31:38:9e:b7:83:b3:14: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B7:71:C9:5E:A2:52:1F:73:A8:1A:D8:02:A8:79:5F:DF:01:A2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7d:28:5e:36:ed:47:60:14:0c:58:75:ed:25:b9:d0:ee:35: a6:5f:1c:96:49:04:da:c9:be:82:e9:93:cc:dd:1a:e5:97:6a: 36:f4:52:ac:45:57:55:94:9d:e8:8a:1b:2f:cf:02:9b:ca:2e: 30:34:88:08:50:d0:b0:38:ef:56:b8:56:b8:35:ce:42:d7:a1: c3:2d:c4:79:0a:16:ca:70:eb:50:53:b2:ef:b8:06:19:95:b3: 53:f3:ed:ad:ff:0e:d6:c9:6c:29:0e:03:7d:ff:e9:b6:b1:85: 27:f5:f5:28:cb:99:5d:fa:c8:3c:9a:e6:5e:3d:0d:97:a6:28: 9b:72:cd:8a:f6:d9:3d:24:f0:ad:f1:f0:07:89:d5:e5:a9:93: 8a:4e:d6:e7:a9:c3:9b:81:fe:f5:8d:22:b3:43:42:11:d5:0c: 4c:b8:3a:05:17:ec:06:2e:e2:0e:5f:db:9d:f5:77:18:76:5b: 12:d5:a4:71:d6:64:6e:d5:4e:9d:21:42:fd:e6:7e:9f:14:0b: d1:25:8f:5f:22:c7:05:c3:f3:f4:44:b0:1a:b4:00:57:d6:3c: 63:a6:e7:14:62:e9:24:c6:cd:d8:19:17:31:2b:34:8d:85:8d: d1:dc:f1:f4:b8:ad:87:27:ce:fe:91:86:59:ac:67:e9:40:8f: 74:ea:e5:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSCGszUw+E0qe2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NWYwNjM5M2MtNTVlZS00ZGJhLWE3NzAtZTQzODg5ODIxYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzJYzoXkClBtlEIwE2IM6OmxAAZqaxIdTLH V+2GdxT29/xAVpetWuWENofjuQaMdsbbtwRGV19EorLa5s19K6geTIrqCN/wWOtr b2hanzLRwfLRwIYV//CHaio0Xgav53wQctCQFTihsEgDunrUtn2I7CJhCsn+CmZ+ KvkwveN7J2qWhh+4yMuL6w9vpBm6iRl+iIw260WChxiysVgr1oR7vKPMqhzVknay P1/4ycR4bpT9phJYAp3dTEA+cwdxXiGizeRJ2RyT1h0dMPoZHuJ8EJnZtrIrP3BP pzpDj5+ll9c2bUT6UiU+SJUneHiX5p7BvFaKNjE4nreDsxSJpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy3ccleolIfc6ga2AKoeV/fAaIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvN2U5Y2ZlYjctNDg0OC0z N2E2LWEzMTctNjBiZmRlZDdiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB9KF427UdgFAxYde0ludDuNaZfHJZJBNrJvoLpk8zdGuWXajb0UqxF V1WUneiKGy/PApvKLjA0iAhQ0LA471a4Vrg1zkLXocMtxHkKFspw61BTsu+4BhmV s1Pz7a3/DtbJbCkOA33/6baxhSf19SjLmV36yDya5l49DZemKJtyzYr22T0k8K3x 8AeJ1eWpk4pO1uepw5uB/vWNIrNDQhHVDEy4OgUX7AYu4g5f2531dxh2WxLVpHHW ZG7VTp0hQv3mfp8UC9Elj18ixwXD8/REsBq0AFfWPGOm5xRi6STGzdgZFzErNI2F jdHc8fS4rYcnzv6RhlmsZ+lAj3Tq5eU= -----END CERTIFICATE-----Generated at Sat Apr 12 18:34:36 2025 by rpki-client