$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa File: 4a3559bb-abec-3940-a565-ccc20c2855b0.roa (raw, json) Hash identifier: hPZYcHzaLnYG6W7FBRn/7K03O9vszyiElpc0EA5AxpM= Subject key identifier: 18:14:FE:D2:7B:BF:87:86:E9:CB:4F:AF:2E:8B:35:72:46:11:2D:C6 Certificate issuer: /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a Certificate serial: 010D0C9F43285849C20A1C6258DEAA9CB2900D00 Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 36352 IP address blocks: 167.253.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1c:62:58:de:aa:9c:b2:90:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=e21b0091-9168-4ff2-8fc6-f96ede72b7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:54:b7:68:28:67:0b:8a:5a:40:5e:36:67: 4d:32:20:4d:a7:1f:3a:5e:96:e7:64:b2:a7:f8:10: 91:65:bf:20:98:e9:96:24:02:4a:c1:66:f6:9e:98: 2e:fa:6b:0c:e4:16:92:55:4a:40:75:67:46:34:0c: a2:04:54:45:8d:53:aa:24:62:9c:e1:ec:a0:48:fb: 16:45:bc:0e:bc:99:71:da:89:cc:9b:92:17:26:25: 7e:ea:37:d7:e1:37:be:1e:0c:ff:6c:94:78:7d:7a: b5:6a:cf:42:54:85:8f:38:9c:2a:1d:be:42:d9:c4: ef:f5:de:8a:60:7f:d2:8b:6d:f6:54:34:25:77:16: 85:cd:6a:60:71:e4:26:cd:2e:de:ff:a8:12:8d:b2: 0e:0a:96:d7:8a:d6:c7:91:ae:65:09:0a:ce:07:2f: f1:a3:87:8b:17:2b:70:f7:af:8a:fb:89:ba:c0:83: fd:49:17:26:33:cd:7a:d9:de:18:f9:97:12:03:81: f1:e6:3d:c8:6d:44:3f:a3:0d:df:f2:11:b5:d0:c4: 77:08:66:be:09:6d:a7:46:a7:f2:13:01:db:b4:ec: 06:d7:e8:23:5d:8d:97:71:b8:2f:9a:56:3a:22:1c: 0d:4b:82:bc:df:2d:d9:a2:86:64:1c:20:9b:88:0a: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:14:FE:D2:7B:BF:87:86:E9:CB:4F:AF:2E:8B:35:72:46:11:2D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/4a3559bb-abec-3940-a565-ccc20c2855b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl X509v3 Authority Key Identifier: keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:80:0e:00:8c:bd:64:12:26:30:94:20:e4:a6:95:bd:0e:d3: 2d:a9:56:cf:6f:84:81:a0:3e:13:6d:e5:67:15:63:80:31:0f: 1c:02:0c:bc:7a:81:4b:7f:9b:5b:34:33:32:1b:97:92:18:3a: f2:37:90:2e:e8:af:1c:ec:28:d4:7f:2e:3e:65:5e:37:09:b6: 11:0c:3c:54:58:d5:55:bf:e3:84:15:93:f7:95:0f:3a:b3:51: 8f:b5:95:d5:fd:ed:02:9d:36:66:7e:d1:ab:fe:0d:09:64:29: 6a:5d:19:f7:d8:d2:3d:7c:94:64:1c:f9:07:5c:01:fa:09:b9: 05:74:48:bd:56:4b:4e:08:8e:f0:ee:19:b4:c2:af:0d:61:86: 80:27:42:18:5b:df:b2:54:1d:a4:36:5e:87:70:89:cc:9c:65: 90:00:0c:9e:9b:b3:4a:4a:1d:fb:14:fa:11:b6:63:ae:43:ba: 5c:77:0f:95:a5:ad:99:7d:0d:10:d9:5d:f4:98:8b:c9:ce:37: dd:ec:da:29:b5:1a:a4:db:1a:d0:62:fe:0c:20:56:f9:11:3a: 2c:c1:b9:41:b5:de:26:4c:ee:c2:2c:58:47:5d:26:99:c9:fe: 48:24:b7:e7:ab:05:a2:11:a8:bd:ff:b5:9f:d7:99:57:2e:54: 84:e3:0f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChxiWN6qnLKQDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyNmI2YWMtMzU4NS00MDFmLWIyYTgtMWMwYzFkYmU0 ODlhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZTIxYjAwOTEtOTE2OC00ZmYyLThmYzYtZjk2ZWRlNzJiN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8dUt2goZwuKWkBeNmdNMiBNpx86XpbnZLKn +BCRZb8gmOmWJAJKwWb2npgu+msM5BaSVUpAdWdGNAyiBFRFjVOqJGKc4eygSPsW RbwOvJlx2onMm5IXJiV+6jfX4Te+Hgz/bJR4fXq1as9CVIWPOJwqHb5C2cTv9d6K YH/Si232VDQldxaFzWpgceQmzS7e/6gSjbIOCpbXitbHka5lCQrOBy/xo4eLFytw 96+K+4m6wIP9SRcmM8162d4Y+ZcSA4Hx5j3IbUQ/ow3f8hG10MR3CGa+CW2nRqfy EwHbtOwG1+gjXY2XcbgvmlY6IhwNS4K83y3ZooZkHCCbiAqNswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgU/tJ7v4eG6ctPry6LNXJGES3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTI2 YjZhYy0zNTg1LTQwMWYtYjJhOC0xYzBjMWRiZTQ4OWEvNGEzNTU5YmItYWJlYy0z OTQwLWE1NjUtY2NjMjBjMjg1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTEyNmI2YWMtMzU4NS00MDFmLWIy YTgtMWMwYzFkYmU0ODlhLzExMjZiNmFjLTM1ODUtNDAxZi1iMmE4LTFjMGMxZGJl NDg5YS5jcmwwHwYDVR0jBBgwFoAU8WmeDhHmnDDff7S+0TcUT7nV1yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTI2YjZhYy0zNTg1LTQwMWYtYjJhOC0xYzBj MWRiZTQ4OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWADgCMvWQSJjCUIOSmlb0O0y2pVs9vhIGgPhNt5WcVY4AxDxwCDLx6 gUt/m1s0MzIbl5IYOvI3kC7orxzsKNR/Lj5lXjcJthEMPFRY1VW/44QVk/eVDzqz UY+1ldX97QKdNmZ+0av+DQlkKWpdGffY0j18lGQc+QdcAfoJuQV0SL1WS04IjvDu GbTCrw1hhoAnQhhb37JUHaQ2XodwicycZZAADJ6bs0pKHfsU+hG2Y65Dulx3D5Wl rZl9DRDZXfSYi8nON93s2im1GqTbGtBi/gwgVvkROizBuUG13iZM7sIsWEddJpnJ /kgkt+erBaIRqL3/tZ/XmVcuVITjD8o= -----END CERTIFICATE-----Generated at Wed May 7 16:50:21 2025 by rpki-client