$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa File: f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa (raw, json) Hash identifier: zh6TbqF/rgKmsbTwmaeeyw+SWLdKtScdT3qb1O6brq0= Subject key identifier: 06:62:93:A1:07:FB:72:0C:E9:6C:DB:BD:31:8B:9F:BA:D0:74:59:9E Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D5127F0AA208040A3A00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 167.94.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:12:7f:0a:a2:08:04:0a:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=a203da44-458d-4e08-a230-996dc3fd8139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:5d:d3:45:4e:54:ad:81:d7:44:2b:3e:60: 3b:40:f5:4d:d4:32:d0:7c:cf:1c:e7:43:d1:d3:1f: ef:7e:36:30:65:e6:58:cd:53:2a:d5:a3:c2:20:de: 9f:63:2e:c9:6b:f7:c3:e8:88:d8:83:94:d1:3a:fb: e6:eb:ee:67:94:0f:17:cf:75:54:80:bd:21:ca:9c: fc:cb:ef:0c:bc:fb:d2:8d:fe:b9:44:1d:24:cf:ed: eb:56:17:c5:35:17:21:65:21:aa:53:fb:16:e9:3d: 16:b6:61:ce:40:f7:95:de:ca:d0:98:3b:32:92:4e: 2e:41:09:8c:9c:c6:59:be:8d:24:84:5a:cd:e2:72: 1f:21:3e:8a:4a:ec:0b:b3:75:42:e5:c6:0f:76:df: c6:a5:db:93:1a:ca:39:0d:92:04:24:e7:fe:5e:22: 02:9b:e5:53:33:49:75:bd:59:4d:fc:81:8e:c6:d3: af:0a:0b:d8:f9:23:78:a6:9b:8f:87:7c:c8:e8:58: 27:59:15:35:6e:d6:da:c5:21:69:7b:a6:cc:79:a7: 52:43:2d:49:b1:3a:a2:64:d5:69:46:11:b9:77:25: 7f:12:b6:e4:0e:e7:49:b8:64:a8:81:2c:38:1a:73: 23:cc:0b:ce:7f:6d:c0:46:c9:ee:0f:e8:5b:20:b9: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:62:93:A1:07:FB:72:0C:E9:6C:DB:BD:31:8B:9F:BA:D0:74:59:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3b:15:0e:29:68:1e:ea:7a:b7:e9:89:70:55:29:34:c1:36: d6:c3:84:32:38:97:5d:23:20:13:bd:47:b8:5b:c5:9c:ae:cd: 12:ec:12:f4:a9:bd:40:3b:e5:80:e1:89:aa:94:33:00:e0:b3: 75:f2:9a:09:66:03:e8:76:79:cc:96:e1:40:0c:f7:af:a0:cf: 60:03:70:cc:e1:a8:57:f7:ce:6c:1f:89:d2:64:ae:08:c6:bb: fb:fa:b4:94:4f:d1:16:25:9a:fe:22:03:ee:a3:49:6f:a6:a9: 23:3e:fa:22:ff:b8:d9:bd:f4:c4:87:0c:d8:bf:0d:8e:75:83: b0:50:c8:1a:3f:f2:7e:ae:94:59:ed:e0:e3:ba:6e:08:5f:9d: 6a:47:f8:3f:d6:3f:18:57:38:a9:b7:2d:44:8a:20:25:11:89: 6c:e6:bb:56:39:e2:ea:2e:49:00:7d:9e:1b:43:6c:12:08:77: 98:98:d8:38:d9:2e:87:da:51:bc:ee:75:a3:db:b5:25:e7:94: 24:cd:58:04:dd:8c:50:ea:58:21:46:ac:58:47:6b:ce:99:b1: 9f:bc:a0:55:a0:eb:24:9a:08:4b:1e:d4:be:05:ba:76:64:a4: 48:a9:2b:ce:47:6e:29:61:2a:c2:cf:d4:c8:d6:1e:a8:4a:ac: 72:a9:7e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidUSfwqiCAQKOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YTIwM2RhNDQtNDU4ZC00ZTA4LWEyMzAtOTk2ZGMzZmQ4MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRpd00VOVK2B10QrPmA7QPVN1DLQfM8c50PR 0x/vfjYwZeZYzVMq1aPCIN6fYy7Ja/fD6IjYg5TROvvm6+5nlA8Xz3VUgL0hypz8 y+8MvPvSjf65RB0kz+3rVhfFNRchZSGqU/sW6T0WtmHOQPeV3srQmDsykk4uQQmM nMZZvo0khFrN4nIfIT6KSuwLs3VC5cYPdt/GpduTGso5DZIEJOf+XiICm+VTM0l1 vVlN/IGOxtOvCgvY+SN4ppuPh3zI6FgnWRU1btbaxSFpe6bMeadSQy1JsTqiZNVp RhG5dyV/ErbkDudJuGSogSw4GnMjzAvOf23ARsnuD+hbILlYlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZik6EH+3IM6WzbvTGLn7rQdFmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjgzNWFiZTItNzIwNC0z YzY2LTk4YTYtOGM3ZDIwNjljNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD07FQ4paB7qerfpiXBVKTTBNtbDhDI4l10jIBO9R7hbxZyuzRLsEvSp vUA75YDhiaqUMwDgs3XymglmA+h2ecyW4UAM96+gz2ADcMzhqFf3zmwfidJkrgjG u/v6tJRP0RYlmv4iA+6jSW+mqSM++iL/uNm99MSHDNi/DY51g7BQyBo/8n6ulFnt 4OO6bghfnWpH+D/WPxhXOKm3LUSKICURiWzmu1Y54uouSQB9nhtDbBIId5iY2DjZ LofaUbzudaPbtSXnlCTNWATdjFDqWCFGrFhHa86ZsZ+8oFWg6ySaCEse1L4FunZk pEipK85HbilhKsLP1MjWHqhKrHKpfsM= -----END CERTIFICATE-----Generated at Sun May 11 03:58:52 2025 by rpki-client