$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/9238c788-3440-3868-8f50-60ef4c2a437d.roa File: 9238c788-3440-3868-8f50-60ef4c2a437d.roa (raw, json) Hash identifier: FRyxI0IpiWd+yTAzMq/+fsiNeP4THkG29fdSfuuDLMM= Subject key identifier: DA:91:8C:54:46:44:45:83:D8:4B:0C:3B:75:90:9A:4A:0E:27:88:14 Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F43285849D594F230ADAE63BA6F898E00 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/9238c788-3440-3868-8f50-60ef4c2a437d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 23278 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f2:30:ad:ae:63:ba:6f:89:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=f8fa4f9d-3813-4692-ba78-67f721740021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:51:2f:ff:7b:f7:a8:39:3b:fc:f6:63:e8:03: f3:66:52:e5:d9:5b:63:65:7d:95:54:cb:2d:d6:1f: 39:59:e6:b8:d0:ac:6f:a3:fb:63:12:13:a1:16:f4: e2:8e:c4:5b:4a:2f:0f:17:d5:49:6a:20:56:0d:49: 27:36:08:06:08:60:f3:ba:db:c8:4d:ac:ca:67:d7: 66:20:34:0a:89:d4:73:47:ee:e5:87:5f:ea:06:ec: b1:0a:f3:34:08:5e:49:d8:bd:bd:1a:b8:73:23:76: 68:d8:cb:e6:78:c0:61:1b:7b:1b:84:b4:74:1f:59: 8a:ad:40:b5:86:c4:c1:4a:ff:e8:8c:00:28:26:86: d1:c0:df:e2:1c:80:68:48:cf:13:27:2a:b4:55:28: 6f:49:08:2d:ea:6a:09:7b:6c:cd:21:c1:b9:5d:1e: 94:bc:dd:64:db:40:55:91:a9:4a:c0:15:58:db:7f: 68:d1:8f:d7:33:43:e3:85:6a:7d:7d:0d:a4:90:56: ae:bc:7e:7a:6a:34:d0:8f:8b:96:bd:04:84:4f:78: db:07:4f:de:77:38:40:f9:0e:d9:66:82:51:78:79: 6c:79:1a:df:17:b5:d8:a4:ac:02:79:a6:dc:b4:d2: 80:60:fd:f0:52:17:3a:c6:c3:b8:c4:da:34:dd:d6: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:8C:54:46:44:45:83:D8:4B:0C:3B:75:90:9A:4A:0E:27:88:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/9238c788-3440-3868-8f50-60ef4c2a437d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:dc:43:57:09:c0:ba:4f:04:a8:96:f2:70:c0:cf:d4:fd:22: 64:35:03:37:39:2f:d7:93:5c:06:a9:7d:77:61:10:af:54:ed: b8:d2:3a:9e:e1:95:f7:9f:7c:77:3a:a1:e4:c4:ec:2c:6f:7e: a3:65:64:f9:60:8c:ab:93:5a:33:30:2a:a6:ad:dc:c3:16:f8: 34:b5:5d:50:58:db:0c:a5:b2:c7:df:e3:41:22:02:ad:ef:b0: 00:6b:82:1b:ee:9a:e6:b1:2c:77:9e:41:b7:1f:96:b5:20:e1: ec:d5:4f:07:6c:fc:74:31:6d:13:48:87:a1:56:4f:47:85:51: 55:b6:39:0b:20:b6:8f:9b:a9:d3:b5:86:60:5f:20:4b:d7:29: f1:da:ba:e3:a4:43:db:b0:26:57:ff:9f:6f:f9:f8:75:43:25: c9:8b:e1:23:ff:60:b2:fc:72:6d:9b:22:38:49:18:e2:4f:5e: 29:fd:c3:e9:cc:4f:f7:b1:68:19:ae:96:cf:19:b4:10:4e:6c: f3:90:94:41:10:2f:61:6a:27:9d:63:a6:30:81:92:e1:fd:a9: 9f:f3:7f:bd:3b:ea:ee:f2:7f:38:3e:7f:45:86:5c:c8:26:a6: 8c:a3:05:22:dd:54:f4:01:71:17:b5:bb:e9:1b:98:31:da:3b: 3c:0f:a3:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPIwra5jum+JjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjhmYTRmOWQtMzgxMy00NjkyLWJhNzgtNjdmNzIxNzQwMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVEv/3v3qDk7/PZj6APzZlLl2VtjZX2VVMst 1h85Wea40Kxvo/tjEhOhFvTijsRbSi8PF9VJaiBWDUknNggGCGDzutvITazKZ9dm IDQKidRzR+7lh1/qBuyxCvM0CF5J2L29GrhzI3Zo2MvmeMBhG3sbhLR0H1mKrUC1 hsTBSv/ojAAoJobRwN/iHIBoSM8TJyq0VShvSQgt6moJe2zNIcG5XR6UvN1k20BV kalKwBVY239o0Y/XM0PjhWp9fQ2kkFauvH56ajTQj4uWvQSET3jbB0/edzhA+Q7Z ZoJReHlseRrfF7XYpKwCeabctNKAYP3wUhc6xsO4xNo03dYaoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqRjFRGREWD2EsMO3WQmkoOJ4gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvOTIzOGM3ODgtMzQ0MC0z ODY4LThmNTAtNjBlZjRjMmE0MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXcQ1cJwLpPBKiW8nDAz9T9ImQ1Azc5L9eTXAapfXdhEK9U7bjSOp7h lfeffHc6oeTE7CxvfqNlZPlgjKuTWjMwKqat3MMW+DS1XVBY2wylssff40EiAq3v sABrghvumuaxLHeeQbcflrUg4ezVTwds/HQxbRNIh6FWT0eFUVW2OQsgto+bqdO1 hmBfIEvXKfHauuOkQ9uwJlf/n2/5+HVDJcmL4SP/YLL8cm2bIjhJGOJPXin9w+nM T/exaBmuls8ZtBBObPOQlEEQL2FqJ51jpjCBkuH9qZ/zf7076u7yfzg+f0WGXMgm poyjBSLdVPQBcRe1u+kbmDHaOzwPo6o= -----END CERTIFICATE-----Generated at Tue Jul 1 00:30:19 2025 by rpki-client