$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa File: 4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa (raw, json) Hash identifier: A7pYhje2WCcu16Q1S+g8v/c+DB6m9Ar3mag5unMTBjo= Subject key identifier: DE:75:57:F7:B2:DD:47:34:FB:A7:28:B5:04:5F:83:F0:5E:84:6E:EE Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584964B10D6AD73F8B37A11F8640 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa Signing time: Wed 02 Apr 2025 14:31:24 +0000 ROA not before: Wed 02 Apr 2025 14:31:24 +0000 ROA not after: Tue 01 Jul 2025 14:31:24 +0000 asID: 16570 IP address blocks: 164.153.167.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:b1:0d:6a:d7:3f:8b:37:a1:1f:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Apr 2 14:31:24 2025 GMT Not After : Jul 1 14:31:24 2025 GMT Subject: CN=cd77c93f-8a01-4ea5-8a0c-f69e16e9b1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:fe:03:53:d8:af:6d:df:73:c6:cf:a8:cf: 88:de:15:29:be:0b:f6:70:70:7d:de:f4:9c:5d:05: 4d:7c:1d:64:36:bd:3e:d8:fb:df:65:8b:24:fc:94: f2:4e:2a:d4:ba:bb:bf:87:c5:6c:65:28:7c:e5:62: e5:b9:78:71:6b:37:1c:c8:52:60:5d:65:71:72:d7: 61:db:25:20:62:2c:0e:3e:d3:f5:b3:43:40:f2:f4: 7e:e6:38:db:14:52:63:32:0d:b2:14:47:69:8a:12: 45:06:33:50:07:23:24:ce:6c:f0:c0:ab:51:89:76: 7b:29:80:87:ec:6b:85:73:3e:25:51:af:43:32:2c: f0:31:db:f1:a2:75:43:14:61:87:f0:5f:b8:d5:ce: 1f:ec:7d:3f:63:a4:16:7e:6d:c2:5f:68:2b:d3:34: fe:69:22:a4:20:ce:26:35:a1:17:f7:ae:c4:6f:8d: 21:e4:1c:59:7d:ed:2a:80:23:eb:fc:c3:23:08:67: 80:c3:94:88:4e:ac:27:4c:71:03:72:c9:3a:fb:0e: 9f:a0:c6:91:ea:40:a9:4c:bb:5a:aa:1c:8f:83:ef: 75:52:9f:f1:56:28:50:90:ed:59:e4:6e:04:b3:13: 66:3b:6a:44:d3:27:af:b7:53:0c:a3:7f:a4:94:ca: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:75:57:F7:B2:DD:47:34:FB:A7:28:B5:04:5F:83:F0:5E:84:6E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:f7:b5:50:3f:fe:22:4e:2a:ba:4d:41:79:c7:37:71:51:bc: 2a:7f:b5:5c:1a:c1:e6:56:f1:7c:22:c7:53:20:76:18:8b:d1: 26:5c:6c:0a:a2:78:f0:1d:f8:0f:dd:1f:5a:46:e8:02:87:7b: 19:df:9e:5f:50:82:3a:00:26:77:46:3d:17:29:ea:65:a2:a6: 07:44:a0:92:24:94:21:37:48:63:04:9b:ae:f5:7b:40:d2:60: 26:e8:26:aa:a1:36:2b:e7:b1:c1:8b:1b:36:16:ff:10:7a:30: 3e:80:c7:ab:ea:6e:5d:fe:12:46:66:74:e1:02:04:fc:6e:1a: 20:cf:b6:4a:3b:8b:41:d2:db:bb:d2:7a:93:72:15:2f:b2:85: 9f:cd:dc:56:ad:d8:ab:64:6e:35:73:cc:5f:0f:60:25:17:8d: 84:6a:92:dd:a7:c2:79:9f:b5:f5:bd:d8:04:5d:4b:19:41:e0: ed:d3:5c:50:94:c4:53:1f:b1:bb:f7:8a:64:fc:c8:8f:1d:e6: 8b:02:96:91:43:59:83:d8:f1:79:bc:28:97:ed:3b:f4:60:0f: 2a:8a:cf:a5:6d:15:09:a9:cd:8c:df:c4:ba:33:c8:21:b2:af: 4d:43:8f:1f:69:f6:77:35:3b:88:a6:07:18:0f:e1:9f:bb:04: 55:93:38:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElksQ1q1z+LN6EfhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDQwMjE0MzEyNFoXDTI1MDcwMTE0MzEyNFowLzEtMCsGA1UEAxMk Y2Q3N2M5M2YtOGEwMS00ZWE1LThhMGMtZjY5ZTE2ZTliMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrz+A1PYr23fc8bPqM+I3hUpvgv2cHB93vSc XQVNfB1kNr0+2PvfZYsk/JTyTirUuru/h8VsZSh85WLluXhxazccyFJgXWVxctdh 2yUgYiwOPtP1s0NA8vR+5jjbFFJjMg2yFEdpihJFBjNQByMkzmzwwKtRiXZ7KYCH 7GuFcz4lUa9DMizwMdvxonVDFGGH8F+41c4f7H0/Y6QWfm3CX2gr0zT+aSKkIM4m NaEX967Eb40h5BxZfe0qgCPr/MMjCGeAw5SITqwnTHEDcsk6+w6foMaR6kCpTLta qhyPg+91Up/xVihQkO1Z5G4EsxNmO2pE0yevt1MMo3+klMoQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN51V/ey3Uc0+6cotQRfg/BehG7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvNGI1MjFiMWMtOWJmOC0z Mjk2LTk0NDItMGUzNmYxZjVjYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKv3tVA//iJOKrpNQXnHN3FRvCp/tVwaweZW8Xwix1MgdhiL0SZcbAqi ePAd+A/dH1pG6AKHexnfnl9QgjoAJndGPRcp6mWipgdEoJIklCE3SGMEm671e0DS YCboJqqhNivnscGLGzYW/xB6MD6Ax6vqbl3+EkZmdOECBPxuGiDPtko7i0HS27vS epNyFS+yhZ/N3Fat2KtkbjVzzF8PYCUXjYRqkt2nwnmftfW92ARdSxlB4O3TXFCU xFMfsbv3imT8yI8d5osClpFDWYPY8Xm8KJftO/RgDyqKz6VtFQmpzYzfxLozyCGy r01Djx9p9nc1O4imBxgP4Z+7BFWTOI8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:03:19 2025 by rpki-client