$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7758bdee-f27e-3fe3-8549-992578523e6b.roa File: 7758bdee-f27e-3fe3-8549-992578523e6b.roa (raw, json) Hash identifier: RLgxx30jXhLuKZcz41iHCMKFdlNPxbWfExgVhHVuo4o= Subject key identifier: 05:AC:54:32:F2:3D:7D:19:12:E3:C6:09:D9:91:C5:14:BF:54:26:64 Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Certificate serial: 010D0C9F43285849350EAE3DCB9FB8CDB29DEA40 Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7758bdee-f27e-3fe3-8549-992578523e6b.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 167.253.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ae:3d:cb:9f:b8:cd:b2:9d:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=47d999f6-3da8-4c28-a672-1432836eaa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:8c:16:d9:51:e1:a0:14:33:3c:4b:00:6a: 42:2e:cf:5a:c8:bd:85:de:7a:6f:79:ef:9d:79:93: 12:39:a1:3c:8b:e6:72:75:9e:50:26:7c:4a:ff:97: 41:ff:f4:d6:a0:d9:d6:82:cf:ac:aa:63:f1:83:29: ba:c2:e6:70:bb:0b:32:bb:ec:69:89:27:4a:f5:1a: 42:16:44:1d:b1:76:20:f3:d0:6d:b4:5c:88:94:36: 11:2c:1f:41:2a:38:04:27:79:85:c1:0d:81:97:28: 12:56:fb:e8:66:f3:25:15:9f:f0:2d:38:b7:0f:d1: e3:d5:d0:98:52:72:74:8e:61:4a:83:be:b2:7e:8e: 4c:0b:d4:7c:7b:4b:41:76:1c:e7:e3:5f:bc:02:73: af:4d:dd:af:f8:f3:67:0c:d0:70:c3:a8:72:42:29: 6d:75:c0:13:f9:81:47:5c:d7:34:5c:53:8c:0a:ae: 3d:8b:14:6b:04:9a:92:3f:b6:f1:e4:a0:dd:e1:d5: 68:8d:66:d4:aa:69:76:f9:b4:f2:20:78:6e:a0:ec: 39:02:3b:cf:bf:26:51:cc:dc:81:5b:9e:47:b6:d1: 6a:9d:82:fb:42:b5:dd:9f:19:bf:d0:02:fa:f2:97: 04:93:9d:98:9d:b8:e8:e8:54:02:aa:b6:f5:b5:5e: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:54:32:F2:3D:7D:19:12:E3:C6:09:D9:91:C5:14:BF:54:26:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7758bdee-f27e-3fe3-8549-992578523e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl X509v3 Authority Key Identifier: keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer sbgp-ipAddrBlock: critical IPv4: 167.253.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:41:cf:35:62:af:46:de:38:ae:69:e9:01:af:7d:52:a6:3b: bb:b6:3d:31:46:50:71:f3:f7:6c:64:d6:c1:5d:a4:bb:6c:b7: 98:7e:d6:a9:f2:f5:ea:02:6d:45:1d:25:24:36:21:7e:81:e5: 23:97:88:88:ee:4e:aa:25:80:1c:e0:f8:6f:b9:00:ec:42:4a: dd:0e:03:72:a2:eb:4f:93:85:0f:96:70:12:14:b5:43:22:55: 58:0c:b7:6a:7f:b9:93:6b:a8:a7:5a:44:71:36:a3:f5:5f:07: a3:bd:a5:2f:68:f1:47:ce:2f:3d:e0:ca:78:da:8c:e5:c3:c4: c2:b3:34:32:1e:1f:d6:44:9d:44:a8:f1:51:a2:13:ce:b7:52: b0:87:d6:e0:7c:c7:20:59:c4:de:75:26:66:8d:07:53:d6:49: 31:c1:f7:c4:a4:55:56:79:70:6b:78:ce:73:f0:38:23:3a:b6: 13:7a:0e:c7:59:ca:94:86:b5:c8:21:98:8b:9c:1c:e6:b7:0b: 77:e3:ed:7c:fb:fa:f9:70:b9:15:df:b0:83:25:cb:48:a0:6e: 8c:0c:6d:79:51:18:17:7f:e2:aa:a1:69:45:da:6f:d5:2f:75: 8f:1c:70:f9:df:c7:9c:ad:8c:c7:17:46:09:40:bb:1a:79:23: f4:4f:0c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dq49y5+4zbKd6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2 NzE3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NDdkOTk5ZjYtM2RhOC00YzI4LWE2NzItMTQzMjgzNmVhYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXGMFtlR4aAUMzxLAGpCLs9ayL2F3npvee+d eZMSOaE8i+ZydZ5QJnxK/5dB//TWoNnWgs+sqmPxgym6wuZwuwsyu+xpiSdK9RpC FkQdsXYg89BttFyIlDYRLB9BKjgEJ3mFwQ2BlygSVvvoZvMlFZ/wLTi3D9Hj1dCY UnJ0jmFKg76yfo5MC9R8e0tBdhzn41+8AnOvTd2v+PNnDNBww6hyQiltdcAT+YFH XNc0XFOMCq49ixRrBJqSP7bx5KDd4dVojWbUqml2+bTyIHhuoOw5AjvPvyZRzNyB W55HttFqnYL7QrXdnxm/0AL68pcEk52Ynbjo6FQCqrb1tV6ZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWsVDLyPX0ZEuPGCdmRxRS/VCZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvNzc1OGJkZWUtZjI3ZS0z ZmUzLTg1NDktOTkyNTc4NTIzZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxBzzVir0beOK5p6QGvfVKmO7u2PTFGUHHz92xk1sFdpLtst5h+1qny 9eoCbUUdJSQ2IX6B5SOXiIjuTqolgBzg+G+5AOxCSt0OA3Ki60+ThQ+WcBIUtUMi VVgMt2p/uZNrqKdaRHE2o/VfB6O9pS9o8UfOLz3gynjajOXDxMKzNDIeH9ZEnUSo 8VGiE863UrCH1uB8xyBZxN51JmaNB1PWSTHB98SkVVZ5cGt4znPwOCM6thN6DsdZ ypSGtcghmIucHOa3C3fj7Xz7+vlwuRXfsIMly0igbowMbXlRGBd/4qqhaUXab9Uv dY8ccPnfx5ytjMcXRglAuxp5I/RPDII= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:13 2025 by rpki-client