$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa File: a54a8459-0e0e-3ac7-a09c-54965f63560e.roa (raw, json) Hash identifier: SuXzUWQFeuAVZZ7JaUW5saPrDDzN5MolQG3KK3BY4tY= Subject key identifier: F6:BF:7B:00:99:23:85:09:B6:73:03:01:62:CA:F8:8F:C9:F2:DA:FC Certificate issuer: /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Certificate serial: 010D0C9F43285849B5DFCB9FC89F284F1446CC46 Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa Signing time: Thu 01 May 2025 16:26:03 +0000 ROA not before: Thu 01 May 2025 16:26:03 +0000 ROA not after: Wed 30 Jul 2025 16:26:03 +0000 asID: 30562 IP address blocks: 168.100.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:df:cb:9f:c8:9f:28:4f:14:46:cc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Validity Not Before: May 1 16:26:03 2025 GMT Not After : Jul 30 16:26:03 2025 GMT Subject: CN=eb562c6c-1197-4723-b076-a048d9ad3e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:24:8b:f9:0a:d4:53:1e:e6:f8:ef:53:20: e1:9a:cd:70:7f:b5:b2:5b:80:90:00:e6:20:1b:dd: f0:df:2d:44:2b:6f:52:83:17:e1:d9:45:e9:9c:8d: 50:35:05:a9:da:d8:e3:b3:8e:bd:ed:82:f2:1a:9a: db:a4:32:24:d2:69:43:07:54:0a:2c:95:4a:8b:f8: ea:df:53:54:8c:12:33:d3:62:ed:f6:04:d5:5a:1c: ba:86:6e:c1:3f:08:e7:a9:21:b9:82:d2:39:d1:b2: 6e:f1:1e:01:27:d4:71:5c:a5:7d:7c:e9:8d:0a:21: d1:2b:4c:14:b5:99:e8:45:bc:18:0c:a6:cc:5c:fa: c5:0f:c5:a6:1d:93:26:ab:5b:0f:6e:51:b8:27:04: a4:06:63:51:c4:11:f3:46:52:47:f0:72:19:a3:92: e7:ce:92:35:6d:39:0f:55:8a:02:dd:7f:28:5c:ca: 23:ae:7e:e4:ca:63:86:12:d6:78:50:cd:6c:b5:15: b8:3a:9c:36:02:bb:cb:93:ca:8c:96:67:48:12:bb: 1d:2b:43:e1:b1:9d:c1:7f:ce:53:19:e1:60:12:ab: b0:8d:75:c6:8f:fd:34:9a:6a:cd:5a:e3:e5:16:72: b3:0b:42:56:d7:7f:ed:49:41:2f:fa:ef:68:68:0d: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BF:7B:00:99:23:85:09:B6:73:03:01:62:CA:F8:8F:C9:F2:DA:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl X509v3 Authority Key Identifier: keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer sbgp-ipAddrBlock: critical IPv4: 168.100.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b7:bb:c2:cc:5d:05:1c:be:f1:6f:8d:55:83:7c:3d:59:27: 36:09:73:6f:3b:73:64:ff:63:c6:1c:83:b6:45:ad:ad:a3:cf: 47:e8:c2:83:cc:1b:ec:b1:0c:c8:84:2f:d3:c5:9f:d5:fc:ce: e0:09:8f:a0:b0:fd:95:48:b2:6d:4a:e3:d3:76:c5:58:5a:8e: 31:2e:8a:ad:f0:6a:aa:f0:35:9c:84:5d:75:eb:9f:bf:15:b3: be:3e:0b:44:6a:ac:9c:90:24:c2:cf:f0:98:bd:89:a2:e1:9c: 11:eb:ff:67:f5:83:69:b0:02:10:21:b3:0e:f0:ec:a7:ab:66: c6:0a:8c:2b:e3:5d:34:b3:23:9d:0e:3b:5b:31:2d:46:f6:e2: d0:4b:b7:b5:1f:b9:28:0b:82:d2:18:46:3a:ed:43:3d:1c:34: 16:62:ea:70:c3:38:10:28:d9:cd:e7:76:83:eb:18:a8:0a:2f: fd:c5:7a:97:b0:e8:7f:0b:7f:26:f1:d7:2a:35:55:4c:62:c4: af:a6:b9:6a:89:be:bb:94:a0:eb:7e:e5:41:e7:a6:16:1e:0a: d4:34:9d:0c:d5:dc:66:e8:ad:e6:78:bc:17:32:42:57:fc:42: 91:eb:73:55:d5:98:a3:33:c9:1e:17:e3:94:f4:79:c1:18:f6: 5d:8b:f8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm138ufyJ8oTxRGzEYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiYTNlMTUtM2ZlMS00NjM0LThlM2ItODM4ZTlmMmFl NjQ3MB4XDTI1MDUwMTE2MjYwM1oXDTI1MDczMDE2MjYwM1owLzEtMCsGA1UEAxMk ZWI1NjJjNmMtMTE5Ny00NzIzLWIwNzYtYTA0OGQ5YWQzZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcEki/kK1FMe5vjvUyDhms1wf7WyW4CQAOYg G93w3y1EK29Sgxfh2UXpnI1QNQWp2tjjs4697YLyGprbpDIk0mlDB1QKLJVKi/jq 31NUjBIz02Lt9gTVWhy6hm7BPwjnqSG5gtI50bJu8R4BJ9RxXKV9fOmNCiHRK0wU tZnoRbwYDKbMXPrFD8WmHZMmq1sPblG4JwSkBmNRxBHzRlJH8HIZo5LnzpI1bTkP VYoC3X8oXMojrn7kymOGEtZ4UM1stRW4Opw2ArvLk8qMlmdIErsdK0PhsZ3Bf85T GeFgEquwjXXGj/00mmrNWuPlFnKzC0JW13/tSUEv+u9oaA3X/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa/ewCZI4UJtnMDAWLK+I/J8tr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJh M2UxNS0zZmUxLTQ2MzQtOGUzYi04MzhlOWYyYWU2NDcvYTU0YTg0NTktMGUwZS0z YWM3LWEwOWMtNTQ5NjVmNjM1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZiYTNlMTUtM2ZlMS00NjM0LThl M2ItODM4ZTlmMmFlNjQ3L2NmYmEzZTE1LTNmZTEtNDYzNC04ZTNiLTgzOGU5ZjJh ZTY0Ny5jcmwwHwYDVR0jBBgwFoAUF4osSiJcdbt6e/SwjjBRtyARNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJhM2UxNS0zZmUxLTQ2MzQtOGUzYi04Mzhl OWYyYWU2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD23u8LMXQUcvvFvjVWDfD1ZJzYJc287c2T/Y8Ycg7ZFra2jz0fowoPM G+yxDMiEL9PFn9X8zuAJj6Cw/ZVIsm1K49N2xVhajjEuiq3waqrwNZyEXXXrn78V s74+C0RqrJyQJMLP8Ji9iaLhnBHr/2f1g2mwAhAhsw7w7KerZsYKjCvjXTSzI50O O1sxLUb24tBLt7UfuSgLgtIYRjrtQz0cNBZi6nDDOBAo2c3ndoPrGKgKL/3Fepew 6H8Lfybx1yo1VUxixK+muWqJvruUoOt+5UHnphYeCtQ0nQzV3GboreZ4vBcyQlf8 QpHrc1XVmKMzyR4X45T0ecEY9l2L+J8= -----END CERTIFICATE-----Generated at Mon May 5 14:32:27 2025 by rpki-client