$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/de905eb9-9d74-3759-ad32-eb480df12852.roa File: de905eb9-9d74-3759-ad32-eb480df12852.roa (raw, json) Hash identifier: A+CbtSOr77e5DWECPqsAc9hqv4y0szJXU3sBKk0Yzoo= Subject key identifier: AA:3B:EC:21:05:DC:34:57:87:51:78:BD:28:39:CB:74:37:26:F0:54 Certificate issuer: /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Certificate serial: 010D0C9F432858499C59E1AD00BBC2A4DF245E40 Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/de905eb9-9d74-3759-ad32-eb480df12852.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 401388 IP address blocks: 167.253.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e1:ad:00:bb:c2:a4:df:24:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=736960b9-6d1e-4ff6-a76f-22889263b3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:b7:25:f0:78:be:50:e8:ff:a0:e3:fb:c1: 0d:ca:a6:28:b3:16:d9:28:98:0a:0f:9f:1b:43:a7: a5:ff:d9:ce:2e:20:6a:e0:14:d6:96:d4:07:65:32: 3a:71:06:42:21:11:66:5b:c8:fc:03:89:2f:2d:26: 35:d0:85:a3:c1:b9:d8:62:65:fa:b0:71:fd:fd:4d: c6:6e:19:5f:15:e7:c7:20:a2:77:1b:52:2e:a9:0c: 79:58:91:0e:dd:a8:9f:10:f8:63:9f:81:9d:78:86: 09:4a:ca:a9:81:91:d1:ce:4d:3c:ba:d5:ac:4d:18: 11:7d:00:4c:63:cb:6d:14:22:54:f6:44:85:f8:ce: b4:35:45:a1:f8:7c:58:eb:0e:5a:05:a1:b6:cd:fd: fd:11:b8:00:b9:a0:59:4f:8a:45:67:b3:10:d8:af: 17:0e:ff:a9:eb:59:fd:b4:b4:b8:b8:b8:3d:c5:4a: 5d:0b:67:61:51:1a:89:5d:a8:45:c8:dc:37:1d:c0: 91:b7:48:43:32:d3:85:58:53:16:8b:36:90:04:37: 79:50:5c:e0:3f:0b:69:dd:46:5a:90:3b:20:4f:21: 1c:5d:22:15:c1:fa:16:ad:a9:6c:0d:5e:77:06:42: 7c:df:6c:e3:97:17:10:34:f9:2a:f4:18:3c:06:a0: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3B:EC:21:05:DC:34:57:87:51:78:BD:28:39:CB:74:37:26:F0:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/de905eb9-9d74-3759-ad32-eb480df12852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl X509v3 Authority Key Identifier: keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ab:6a:9a:de:ed:c7:47:51:e3:ec:0a:96:2c:c2:9c:d5:77: 04:bd:1e:0e:25:d8:ce:c8:05:84:ab:8a:a1:de:7d:66:a6:8b: 4e:a6:73:ce:63:9f:f6:e4:77:7a:86:d4:05:1e:d7:3c:c0:1f: e6:78:7b:4d:35:1a:23:2b:fc:66:3f:18:45:ee:dc:41:6f:67: 7d:db:99:5a:95:fa:32:1f:ac:05:30:4e:10:b1:0d:3b:a0:d9: 24:dd:52:36:39:f8:0f:b4:8f:38:44:fb:86:3b:76:bd:bb:6d: 4a:fb:21:f2:68:51:4b:95:9b:6f:c0:63:f7:9c:a2:b4:56:42: bf:2d:99:9f:85:a6:44:2a:cd:e1:68:e5:7e:ad:7d:f9:22:86: 7d:96:42:62:8f:e9:2a:b2:50:91:fa:aa:b1:3f:33:92:25:2e: 91:05:46:80:e5:71:98:9a:7b:be:f2:12:db:e6:4d:65:e5:10: d4:c2:66:35:4b:ca:a5:34:17:5b:48:38:84:f4:68:d4:99:2e: d7:aa:d8:39:52:66:31:2d:97:da:70:d6:67:d9:1c:ed:15:53: f4:02:e0:11:10:f3:72:c8:83:23:3f:03:70:a8:fb:09:f3:19: 23:ea:b1:76:b1:6c:07:fa:8c:29:1f:54:18:da:82:9f:fc:8b: f4:ed:8e:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeGtALvCpN8kXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFh M2IyMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NzM2OTYwYjktNmQxZS00ZmY2LWE3NmYtMjI4ODkyNjNiM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z+3JfB4vlDo/6Dj+8ENyqYosxbZKJgKD58b Q6el/9nOLiBq4BTWltQHZTI6cQZCIRFmW8j8A4kvLSY10IWjwbnYYmX6sHH9/U3G bhlfFefHIKJ3G1IuqQx5WJEO3aifEPhjn4GdeIYJSsqpgZHRzk08utWsTRgRfQBM Y8ttFCJU9kSF+M60NUWh+HxY6w5aBaG2zf39EbgAuaBZT4pFZ7MQ2K8XDv+p61n9 tLS4uLg9xUpdC2dhURqJXahFyNw3HcCRt0hDMtOFWFMWizaQBDd5UFzgPwtp3UZa kDsgTyEcXSIVwfoWralsDV53BkJ832zjlxcQNPkq9Bg8BqAB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo77CEF3DRXh1F4vSg5y3Q3JvBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2 NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvZGU5MDVlYjktOWQ3NC0z NzU5LWFkMzItZWI0ODBkZjEyODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VlNjcwZjMtODRkNi00YTc3LTg2 YzItOGM2YmM2YmFhM2IyLzdlZTY3MGYzLTg0ZDYtNGE3Ny04NmMyLThjNmJjNmJh YTNiMi5jcmwwHwYDVR0jBBgwFoAUrwnL1Uo9IE0VflMFECB/IUi/lFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZi YzZiYWEzYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWrapre7cdHUePsCpYswpzVdwS9Hg4l2M7IBYSriqHefWami06mc85j n/bkd3qG1AUe1zzAH+Z4e001GiMr/GY/GEXu3EFvZ33bmVqV+jIfrAUwThCxDTug 2STdUjY5+A+0jzhE+4Y7dr27bUr7IfJoUUuVm2/AY/ecorRWQr8tmZ+FpkQqzeFo 5X6tffkihn2WQmKP6SqyUJH6qrE/M5IlLpEFRoDlcZiae77yEtvmTWXlENTCZjVL yqU0F1tIOIT0aNSZLteq2DlSZjEtl9pw1mfZHO0VU/QC4BEQ83LIgyM/A3Co+wnz GSPqsXaxbAf6jCkfVBjagp/8i/Ttjn4= -----END CERTIFICATE-----Generated at Sun May 11 01:34:26 2025 by rpki-client