$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa File: 366115b5-c36e-3002-98be-5414f7a238fe.roa (raw, json) Hash identifier: VWekSde61AhEuic+Dundr8eUVPiuSDyOIQbyDUc+G18= Subject key identifier: E3:F8:3B:3D:EB:C3:0F:E7:59:C7:D3:1D:CE:74:B0:AB:BD:19:98:B8 Certificate issuer: /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Certificate serial: 010D0C9F43285849F17FB806151EC5AAF6496FC0 Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 167.94.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b8:06:15:1e:c5:aa:f6:49:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=e239ec52-a400-4733-ad2c-8dd11b3bf123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:f5:2d:ac:02:2b:ac:e8:60:bf:12:f9:92: 2b:05:18:67:05:1c:53:f1:a8:d2:27:b3:3c:c2:13: a8:7c:28:58:0e:f0:09:be:97:e6:55:de:a9:23:61: 5e:b3:71:2c:ed:3e:f8:f7:f0:c9:93:e3:c8:e5:d1: 54:56:6f:7c:24:71:71:28:dd:f9:40:5b:25:22:c0: 21:f3:e8:d3:95:9f:02:5f:3e:3d:ab:67:9e:2d:0f: db:f8:e0:a2:e5:62:5e:ce:2f:7a:9a:39:55:ba:19: 55:3a:d2:20:bd:d6:da:e0:9f:d4:19:5e:e8:74:9a: 38:b2:32:89:88:94:c9:7d:87:d9:54:3e:46:c1:c3: dd:98:fc:d7:92:64:90:48:9f:52:e4:90:17:98:28: 99:c5:35:e1:54:a3:08:9a:70:83:4a:38:bb:b0:0d: 7e:93:95:b5:65:df:96:9a:01:1d:65:c7:c2:d0:af: 1a:2b:61:c6:e4:e5:f3:79:3f:ed:2d:fa:9f:6d:94: 16:2b:d5:8c:e6:59:f4:40:d8:f2:b5:1e:b3:db:82: 0b:8c:e5:56:be:6e:a5:e6:53:7e:2e:fd:c9:5d:34: 81:9c:07:d8:d9:71:d5:e2:b2:99:25:fe:f9:5c:16: 8a:d0:2e:d6:18:84:96:72:81:80:da:bd:9d:a2:b8: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:3B:3D:EB:C3:0F:E7:59:C7:D3:1D:CE:74:B0:AB:BD:19:98:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl X509v3 Authority Key Identifier: keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer sbgp-ipAddrBlock: critical IPv4: 167.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4f:b7:69:f5:96:de:16:b1:ce:b8:eb:18:90:77:8d:c7:08: 32:b4:2f:6f:4c:6e:25:99:9e:88:41:8a:e6:e2:15:8e:fc:6f: ab:1f:54:99:41:a3:9f:de:4c:bc:09:04:92:2e:ad:6d:04:50: 97:cc:92:50:61:4a:79:2e:ad:07:90:5c:69:b4:c3:17:6f:e7: c8:66:66:c9:0a:da:52:e7:64:aa:d4:8b:4d:91:77:d7:9f:42: 21:e6:fd:fc:c2:9c:c8:74:ac:24:de:51:92:dd:ea:aa:1f:59: b2:23:e0:d8:0e:3a:81:dd:b8:67:78:fc:fa:a5:e8:76:c3:a9: 6a:82:1f:6a:37:8e:f2:e7:15:31:22:68:19:10:b7:de:b3:8d: 7d:76:66:d7:69:44:91:c5:bf:bd:df:2b:6f:be:ae:34:f4:53: a2:67:1b:c8:df:a6:eb:80:42:bc:60:66:3e:2e:f7:ee:03:03: 33:63:fa:a6:39:4d:45:04:03:9a:85:7a:88:d2:c8:be:c3:36: 0d:7f:c2:d5:b1:6a:48:af:4a:8d:94:5b:4c:28:a1:33:03:1f: f6:28:f3:d8:c8:15:80:b9:a0:a5:b1:cc:b3:2a:16:84:97:57: dd:8a:4b:18:4a:4b:11:26:3d:07:64:50:b2:58:18:ef:a9:9d: e8:72:6e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7gGFR7FqvZJb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA3ODQ4YTEtMDFlNS00MTI0LWFjNWYtOGQ5OGEzYWJh YTBkMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTIzOWVjNTItYTQwMC00NzMzLWFkMmMtOGRkMTFiM2JmMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1L1LawCK6zoYL8S+ZIrBRhnBRxT8ajSJ7M8 whOofChYDvAJvpfmVd6pI2Fes3Es7T749/DJk+PI5dFUVm98JHFxKN35QFslIsAh 8+jTlZ8CXz49q2eeLQ/b+OCi5WJezi96mjlVuhlVOtIgvdba4J/UGV7odJo4sjKJ iJTJfYfZVD5GwcPdmPzXkmSQSJ9S5JAXmCiZxTXhVKMImnCDSji7sA1+k5W1Zd+W mgEdZcfC0K8aK2HG5OXzeT/tLfqfbZQWK9WM5ln0QNjytR6z24ILjOVWvm6l5lN+ Lv3JXTSBnAfY2XHV4rKZJf75XBaK0C7WGISWcoGA2r2dorhYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP4Oz3rww/nWcfTHc50sKu9GZi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4 NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4YTNhYmFhMGQvMzY2MTE1YjUtYzM2ZS0z MDAyLTk4YmUtNTQxNGY3YTIzOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzA3ODQ4YTEtMDFlNS00MTI0LWFj NWYtOGQ5OGEzYWJhYTBkLzMwNzg0OGExLTAxZTUtNDEyNC1hYzVmLThkOThhM2Fi YWEwZC5jcmwwHwYDVR0jBBgwFoAUVmEF5XhZ4A7Vaq4KnNWTnbo1yEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4 YTNhYmFhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtPt2n1lt4Wsc646xiQd43HCDK0L29MbiWZnohBiubiFY78b6sfVJlB o5/eTLwJBJIurW0EUJfMklBhSnkurQeQXGm0wxdv58hmZskK2lLnZKrUi02Rd9ef QiHm/fzCnMh0rCTeUZLd6qofWbIj4NgOOoHduGd4/Pql6HbDqWqCH2o3jvLnFTEi aBkQt96zjX12ZtdpRJHFv73fK2++rjT0U6JnG8jfpuuAQrxgZj4u9+4DAzNj+qY5 TUUEA5qFeojSyL7DNg1/wtWxakivSo2UW0wooTMDH/Yo89jIFYC5oKWxzLMqFoSX V92KSxhKSxEmPQdkULJYGO+pnehybms= -----END CERTIFICATE-----Generated at Mon Jun 30 19:32:40 2025 by rpki-client