$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa File: d611f183-fce4-35e3-8186-2b1b64150e12.roa (raw, json) Hash identifier: dzygx9YZ7uoN8x4LC3AxQkHq0I5vxB/jgitiw22QxZ8= Subject key identifier: 01:8E:BB:AB:9B:32:C5:54:CB:D6:FC:B0:83:6B:95:CC:3B:47:11:09 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F43285849BDDA2A973DD309CCB0E50980 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 399275 IP address blocks: 167.253.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2a:97:3d:d3:09:cc:b0:e5:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=1ff77467-a766-4e38-ba45-366028e113e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e8:d9:2b:b5:53:d7:a4:45:f5:d8:24:d1:93: e5:2b:fd:bd:75:c3:3e:e1:f6:df:8f:f3:87:23:00: 4b:02:c7:5c:84:65:48:f7:35:bc:49:1d:23:4c:35: 71:78:2d:c4:8a:82:fb:4a:26:92:5f:65:d5:21:7a: dc:16:8d:d2:5e:71:dd:a8:af:d5:80:8a:49:f4:9f: 34:8b:b2:9a:8e:24:28:83:b7:52:65:ad:5d:c9:32: 6d:d4:53:3e:8d:26:3d:95:99:73:5a:6f:2f:96:4d: 0c:39:31:fe:c2:64:bc:c3:b6:9e:22:6b:7e:29:3a: 68:92:8d:20:07:53:34:e4:32:97:2f:4f:c8:68:2b: 02:f0:fe:94:df:a4:74:28:0a:08:8e:f5:b4:c0:bb: 66:ca:32:7d:a7:83:ac:5c:85:e5:f8:87:ae:f1:07: 22:d8:ea:c3:f0:5d:30:3a:81:90:8b:91:47:90:a2: fb:e7:4b:83:5d:7b:56:a7:35:54:14:a1:f4:7e:11: f8:ab:ec:c5:ed:a0:48:fb:6a:d5:cf:f9:38:8d:01: e9:f5:9a:e0:d7:14:87:20:91:bc:49:3e:4a:c5:9c: e5:e7:f2:95:03:b0:48:7f:a5:2e:e3:42:3f:53:57: 2a:9d:cc:a5:06:a8:89:a9:0c:22:ae:18:2a:bc:bb: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:BB:AB:9B:32:C5:54:CB:D6:FC:B0:83:6B:95:CC:3B:47:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:01:70:37:83:83:17:14:f7:94:47:65:96:5a:36:a4:2e:12: ab:4d:87:f7:55:63:7c:06:db:0e:b6:39:ce:c2:09:bc:c3:7d: 3e:a9:0e:13:10:ca:60:80:bf:c4:89:a8:22:85:a4:38:d3:7c: 07:0b:ee:42:b0:ee:5a:c8:e6:6c:1d:60:61:a8:74:a5:ef:5c: 13:ad:43:62:48:81:2b:6e:de:55:44:85:61:03:61:da:e8:f5: 16:79:95:e2:a4:5b:9f:17:28:90:6a:e3:07:cd:2a:24:39:9b: cd:b2:ae:b9:ad:14:51:b4:83:72:c9:eb:16:f9:cb:75:dd:c3: a4:16:cf:1b:8f:1e:17:25:e0:6a:44:12:7f:a8:fb:21:4a:20: 7b:6d:79:d8:85:cd:65:3e:f9:00:59:1b:51:87:1a:e6:51:66: 88:6a:22:1c:c5:33:48:4c:e5:97:2e:44:f4:b0:1d:91:65:ca: 8b:31:dd:5e:d1:ac:4e:54:33:2e:36:76:eb:4b:97:2a:dc:4b: c7:61:13:d6:22:62:55:9e:24:c3:f7:3d:0a:2a:05:45:aa:bb: a9:ee:80:3d:64:17:87:fa:ef:33:c8:37:40:c0:7b:03:d8:c0: 2e:f7:3a:eb:dc:cc:71:b5:40:9b:e8:0f:74:b1:e5:3c:3d:ba: 8d:87:51:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iqXPdMJzLDlCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MWZmNzc0NjctYTc2Ni00ZTM4LWJhNDUtMzY2MDI4ZTExM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjejZK7VT16RF9dgk0ZPlK/29dcM+4fbfj/OH IwBLAsdchGVI9zW8SR0jTDVxeC3EioL7SiaSX2XVIXrcFo3SXnHdqK/VgIpJ9J80 i7KajiQog7dSZa1dyTJt1FM+jSY9lZlzWm8vlk0MOTH+wmS8w7aeImt+KTpoko0g B1M05DKXL0/IaCsC8P6U36R0KAoIjvW0wLtmyjJ9p4OsXIXl+Ieu8Qci2OrD8F0w OoGQi5FHkKL750uDXXtWpzVUFKH0fhH4q+zF7aBI+2rVz/k4jQHp9Zrg1xSHIJG8 ST5KxZzl5/KVA7BIf6Uu40I/U1cqncylBqiJqQwirhgqvLvVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGOu6ubMsVUy9b8sINrlcw7RxEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvZDYxMWYxODMtZmNlNC0z NWUzLTgxODYtMmIxYjY0MTUwZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkBcDeDgxcU95RHZZZaNqQuEqtNh/dVY3wG2w62Oc7CCbzDfT6pDhMQ ymCAv8SJqCKFpDjTfAcL7kKw7lrI5mwdYGGodKXvXBOtQ2JIgStu3lVEhWEDYdro 9RZ5leKkW58XKJBq4wfNKiQ5m82yrrmtFFG0g3LJ6xb5y3Xdw6QWzxuPHhcl4GpE En+o+yFKIHttediFzWU++QBZG1GHGuZRZohqIhzFM0hM5ZcuRPSwHZFlyosx3V7R rE5UMy42dutLlyrcS8dhE9YiYlWeJMP3PQoqBUWqu6nugD1kF4f67zPIN0DAewPY wC73OuvczHG1QJvoD3Sx5Tw9uo2HUUs= -----END CERTIFICATE-----Generated at Sat May 10 11:46:49 2025 by rpki-client