$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa File: 7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa (raw, json) Hash identifier: oO0wqR6mHBaR+YZargMAvI4gPH9q5ecFK1DPWezWyKc= Subject key identifier: 2C:F8:D3:42:76:AB:E9:56:15:F3:9B:62:44:0C:41:59:C8:91:BE:1F Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285849BDDA2A8557EB7770305FAE80 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 399275 IP address blocks: 167.253.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2a:85:57:eb:77:70:30:5f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=3a65f985-3451-42b8-a516-a01ccde83683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:c0:79:08:ee:61:61:54:2e:a5:20:cc:b2: 43:48:10:97:c7:da:4d:68:cb:fd:a1:c2:c5:fd:a9: 27:5a:26:86:c1:3a:26:3e:e5:79:84:76:5c:60:9a: a8:45:ea:51:21:69:2b:e6:f6:27:f1:e4:67:e1:f5: 52:a6:d3:b8:25:a4:92:68:c4:26:a2:5a:7d:7c:dc: df:b7:7f:11:07:f8:72:ff:1f:e4:70:10:78:96:91: 9a:db:54:77:f9:bf:9a:f4:af:11:f7:8d:e1:ac:2d: 94:f2:02:cb:f7:e1:2c:88:5b:bb:a0:0e:d0:18:fc: 60:a5:29:3a:6b:3c:66:5c:81:94:2c:d1:eb:22:d8: 8d:c3:ed:10:40:4e:b4:aa:46:e9:50:a4:f4:d4:51: 31:0d:4c:c2:3c:fc:fb:8d:a0:93:c5:9c:72:a7:ad: 1f:b6:de:d9:d4:ff:55:f2:fc:79:6b:39:a1:54:a4: b9:4f:23:d9:cd:83:4c:84:69:bf:bf:84:92:c4:69: ba:ff:69:e5:d3:2c:0d:74:0e:ab:4b:64:9f:b0:a5: dc:1f:53:87:86:56:93:4e:c0:ec:a4:13:b5:00:3d: 5b:5e:d8:e7:3e:47:0b:0e:8e:d0:54:f6:c0:37:20: 0b:79:b2:ec:da:2b:45:09:d4:93:71:31:08:a4:f8: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:D3:42:76:AB:E9:56:15:F3:9B:62:44:0C:41:59:C8:91:BE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ea:ec:75:63:c1:42:6e:c9:45:66:35:3c:df:74:5c:5b:4f: 7d:de:90:c6:ad:1d:6a:f7:75:4d:40:66:cc:fb:21:9e:57:6e: 13:7c:18:58:5d:fc:a6:58:28:5a:1b:60:5a:3d:5d:c4:3a:6b: b2:bb:38:5f:29:e7:83:b7:9f:3b:40:43:8d:3d:9b:98:2b:6e: c3:8e:5b:63:f0:aa:04:f1:0a:dd:b1:cf:aa:67:7d:84:2d:e1: 4e:4d:07:51:d6:1b:be:e3:99:33:05:b2:78:8b:ab:2d:90:7a: e3:8a:f1:43:61:d5:cd:39:f0:af:da:47:de:42:4d:55:16:32: 77:75:6f:7c:4b:89:b6:3c:ad:cc:41:38:61:e1:09:71:af:ea: ed:0d:74:26:61:8f:5c:69:0e:a4:fc:08:f1:93:ba:d0:0f:9f: 99:df:75:db:99:e1:98:f1:8c:d6:2f:1f:09:0d:47:30:f5:62: 72:70:e1:ec:e0:eb:40:d8:a9:67:46:1b:f2:48:c1:27:d6:67: 0c:33:1b:dd:94:bf:fe:27:68:64:20:37:72:c0:f1:1c:e1:2f: 96:6c:2c:b8:63:ed:e2:1d:83:c9:de:90:6a:b5:1d:ff:c1:4a: 95:03:95:95:96:55:65:4c:ad:71:b4:d7:fe:a7:d7:fd:ba:c8: bf:85:e9:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iqFV+t3cDBfroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk M2E2NWY5ODUtMzQ1MS00MmI4LWE1MTYtYTAxY2NkZTgzNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRzAeQjuYWFULqUgzLJDSBCXx9pNaMv9ocLF /aknWiaGwTomPuV5hHZcYJqoRepRIWkr5vYn8eRn4fVSptO4JaSSaMQmolp9fNzf t38RB/hy/x/kcBB4lpGa21R3+b+a9K8R943hrC2U8gLL9+EsiFu7oA7QGPxgpSk6 azxmXIGULNHrItiNw+0QQE60qkbpUKT01FExDUzCPPz7jaCTxZxyp60ftt7Z1P9V 8vx5azmhVKS5TyPZzYNMhGm/v4SSxGm6/2nl0ywNdA6rS2SfsKXcH1OHhlaTTsDs pBO1AD1bXtjnPkcLDo7QVPbANyALebLs2itFCdSTcTEIpPibiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCz400J2q+lWFfObYkQMQVnIkb4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvN2U5Y2ZlYjctNDg0OC0z N2E2LWEzMTctNjBiZmRlZDdiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7q7HVjwUJuyUVmNTzfdFxbT33ekMatHWr3dU1AZsz7IZ5XbhN8GFhd /KZYKFobYFo9XcQ6a7K7OF8p54O3nztAQ409m5grbsOOW2PwqgTxCt2xz6pnfYQt 4U5NB1HWG77jmTMFsniLqy2QeuOK8UNh1c058K/aR95CTVUWMnd1b3xLibY8rcxB OGHhCXGv6u0NdCZhj1xpDqT8CPGTutAPn5nfdduZ4ZjxjNYvHwkNRzD1YnJw4ezg 60DYqWdGG/JIwSfWZwwzG92Uv/4naGQgN3LA8RzhL5ZsLLhj7eIdg8nekGq1Hf/B SpUDlZWWVWVMrXG01/6n1/26yL+F6cY= -----END CERTIFICATE-----Generated at Sat May 10 12:25:09 2025 by rpki-client