$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa File: 9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json) Hash identifier: qcWzL+b8I2J6QlE/lNscDI8wZHZ93iddkvwiU8gyc2o= Subject key identifier: 7F:0E:6E:EF:83:F0:34:4D:96:5C:57:C0:E9:E3:F8:A5:F2:A4:27:68 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F43285849CBCF9D4DB9FDAF6CF06916C0 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 397666 IP address blocks: 167.253.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9d:4d:b9:fd:af:6c:f0:69:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=7ec47dd2-ca96-4797-9689-6e378795ef69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:55:ba:20:5e:b9:23:24:14:5b:31:32:4c: ea:a8:44:0d:72:68:4a:30:43:a5:90:cb:b1:0c:75: 56:08:48:b6:19:77:36:7b:e2:8a:a0:9b:ac:58:82: 9d:51:97:3f:d2:00:33:16:0c:fb:1f:7f:17:73:f0: e7:b1:dc:ab:f1:52:fe:43:fc:4a:03:36:6e:c6:bc: 05:44:a2:38:27:60:d9:51:fa:ec:f0:25:67:d8:fe: 5f:31:9e:54:03:72:4a:22:6b:41:93:39:2a:c5:89: ba:7b:9e:53:16:ba:97:46:1a:a8:f2:9f:5c:47:17: 29:6c:b8:4d:88:b6:21:27:87:7a:72:7a:d0:be:ee: 1c:89:e4:a3:25:db:a0:23:a8:6f:ad:4a:cf:b7:22: b7:5e:e9:f5:e0:3b:ab:24:b0:a5:3d:88:5c:84:a3: 30:06:f4:9d:20:33:9f:e2:c7:c9:d1:ff:c2:48:25: 50:9f:6b:73:c3:f4:dc:0d:80:3a:7d:bb:64:08:9e: 76:83:85:18:4e:b1:d3:6e:16:6c:40:91:a3:46:0c: 66:0e:2f:1f:07:bb:e0:66:72:5e:96:a1:07:9c:81: 05:76:fd:2d:74:dd:f9:01:1e:ce:b3:5f:33:f4:23: fb:ca:8d:c5:02:9d:4a:a1:de:40:e2:47:78:bd:e8: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0E:6E:EF:83:F0:34:4D:96:5C:57:C0:E9:E3:F8:A5:F2:A4:27:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:cc:21:e8:86:7c:3e:69:0c:60:43:66:cb:2d:37:e4:8a:dc: e6:61:3b:a3:61:8f:26:b4:f8:25:97:64:e2:e6:86:d1:95:05: 97:90:9b:6c:fa:30:20:54:28:a4:77:f9:b6:59:47:65:3c:2d: 98:52:83:5e:21:06:6a:ea:73:8e:e2:c6:f7:d0:31:a3:fd:c4: 1f:7f:2d:ba:49:07:ed:94:ec:e4:90:63:2a:85:9c:b5:5c:59: 1d:14:92:59:ec:f1:da:cf:8c:ad:6a:3f:41:77:08:76:2f:28: 59:ec:ee:ae:85:9f:da:50:69:3f:d0:2f:17:7c:ab:d3:03:e2: 7d:4d:37:dd:97:e2:4b:6e:e6:5a:1a:a4:eb:7b:67:60:bb:b4: f6:02:f1:9c:33:76:5d:dc:9f:ed:51:1e:9c:4c:81:bb:08:1d: 0f:ed:62:c3:fb:74:65:b1:26:de:3e:9a:cf:34:1d:b4:6a:c1: 0c:b2:26:8c:9b:7d:ae:0c:67:11:80:4c:dc:8e:fe:2c:11:88: fc:d6:38:95:43:bc:f1:f4:3c:c3:2e:58:d7:0b:38:e6:f1:a9: 24:c3:86:a4:92:70:14:31:d6:97:2a:6f:10:79:4b:cf:b5:d3: 21:2f:c2:7e:1f:48:d5:6e:50:dc:39:01:e0:ab:f0:38:89:71: 1a:43:0a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz51Nuf2vbPBpFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk N2VjNDdkZDItY2E5Ni00Nzk3LTk2ODktNmUzNzg3OTVlZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8BVuiBeuSMkFFsxMkzqqEQNcmhKMEOlkMux DHVWCEi2GXc2e+KKoJusWIKdUZc/0gAzFgz7H38Xc/Dnsdyr8VL+Q/xKAzZuxrwF RKI4J2DZUfrs8CVn2P5fMZ5UA3JKImtBkzkqxYm6e55TFrqXRhqo8p9cRxcpbLhN iLYhJ4d6cnrQvu4cieSjJdugI6hvrUrPtyK3Xun14DurJLClPYhchKMwBvSdIDOf 4sfJ0f/CSCVQn2tzw/TcDYA6fbtkCJ52g4UYTrHTbhZsQJGjRgxmDi8fB7vgZnJe lqEHnIEFdv0tdN35AR7Os18z9CP7yo3FAp1Kod5A4kd4vegClQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8Obu+D8DRNllxXwOnj+KXypCdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvOWEzODM3YzEtY2EyMS0z OWJlLTkyMmItZTdhZGVhYjI5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbMIeiGfD5pDGBDZsstN+SK3OZhO6Nhjya0+CWXZOLmhtGVBZeQm2z6 MCBUKKR3+bZZR2U8LZhSg14hBmrqc47ixvfQMaP9xB9/LbpJB+2U7OSQYyqFnLVc WR0Uklns8drPjK1qP0F3CHYvKFns7q6Fn9pQaT/QLxd8q9MD4n1NN92X4ktu5loa pOt7Z2C7tPYC8Zwzdl3cn+1RHpxMgbsIHQ/tYsP7dGWxJt4+ms80HbRqwQyyJoyb fa4MZxGATNyO/iwRiPzWOJVDvPH0PMMuWNcLOObxqSTDhqSScBQx1pcqbxB5S8+1 0yEvwn4fSNVuUNw5AeCr8DiJcRpDCvA= -----END CERTIFICATE-----Generated at Mon May 12 18:28:15 2025 by rpki-client