$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa File: cc14649a-e604-33da-b145-eed98529505d.roa (raw, json) Hash identifier: fKypcfSVZxBMl4Q6R1Eye0WnMjgMouCkhn+Uyl9xQIU= Subject key identifier: 41:94:0A:E3:8F:58:15:66:0C:C2:2D:39:D9:08:B2:37:4E:49:5D:BB Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F432858498A3464185D547C0D5B724000 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 395494 IP address blocks: 167.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:64:18:5d:54:7c:0d:5b:72:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=e3632c3e-792f-4606-b995-aefcfc808f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:9c:77:c4:37:d5:b5:79:1e:e0:58:d7:5b: e8:de:87:d5:61:81:d0:3a:15:7a:2d:03:86:1b:db: b0:a2:75:55:3b:11:b5:ff:ef:0e:67:3a:c8:1f:12: c5:a3:ee:19:04:81:2f:d1:06:cf:18:02:a7:12:fc: 2b:38:65:3e:e0:34:94:ea:8a:c2:1a:e6:5e:ae:f9: 71:0a:c6:b0:82:e2:a0:eb:31:4e:23:80:2b:10:26: 30:da:c0:c3:9e:d3:dc:36:78:31:9c:48:de:91:c5: 7d:77:4a:2d:78:0b:27:eb:94:7c:d4:80:3c:85:da: 60:f3:db:16:d5:da:97:c5:c3:3c:12:29:d1:2b:46: f7:e8:d6:42:52:6a:e5:12:38:fa:2e:42:c5:fe:bd: 91:c5:2b:6b:cc:82:bc:0e:95:f6:ba:3c:c5:ab:1d: 8e:48:b5:96:c3:d0:ac:ae:d3:3b:e8:32:cd:03:6c: 4d:c4:d0:0b:99:14:1d:5f:3e:0d:c6:33:e4:76:ba: 95:09:fa:00:44:46:23:8c:fa:de:da:04:f9:5f:90: be:bc:d4:a5:f0:2e:b0:92:89:f4:cb:a5:e4:c9:25: 71:2f:71:60:f4:01:4a:c0:f1:c1:be:0d:7f:eb:7b: 8f:b6:fe:e2:64:3c:8f:a5:09:be:33:bf:0f:8c:e7: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:0A:E3:8F:58:15:66:0C:C2:2D:39:D9:08:B2:37:4E:49:5D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 167.253.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5d:40:34:79:43:b3:6b:98:9a:b0:29:33:8d:52:77:d6:c1: b7:aa:08:57:7a:50:5f:be:a5:f5:c9:f0:30:6b:6f:a9:43:16: 8d:ba:a2:83:98:00:6b:02:dc:fb:e6:6c:e9:9d:25:3f:03:63: ad:8b:39:aa:da:cf:23:7a:6d:91:b0:4b:f1:c9:e8:d6:05:fb: ba:32:04:4d:82:bc:02:cc:e8:e9:d6:11:54:0d:6f:dc:f1:1a: 44:b7:a5:28:b1:52:fd:55:90:88:bc:02:db:6d:cd:cc:27:27: 37:1f:69:46:b1:96:f8:e7:d1:54:f8:03:d5:c1:1e:b8:68:1d: 2b:43:c3:92:1d:93:95:13:55:50:c8:e4:ee:fd:8e:7f:5e:cd: bd:e5:77:66:73:c0:39:64:ff:b5:67:09:c8:fb:5c:c8:c2:89: 70:b1:43:39:2a:d5:52:d9:24:9c:49:d2:a0:71:b8:db:db:09: 7d:29:f9:21:fc:21:c8:0b:c5:70:32:31:04:05:69:ea:5f:15: 22:2c:1a:32:6b:f5:a1:95:b3:13:8f:d4:dd:4a:5d:8b:25:f7: f5:75:4d:0e:69:28:2d:f3:75:5f:c8:53:b5:16:e6:29:57:ef: aa:32:63:f3:d2:80:23:0d:b7:27:99:fe:76:87:07:f6:4c:7a: 67:d4:26:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGQYXVR8DVtyQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZTM2MzJjM2UtNzkyZi00NjA2LWI5OTUtYWVmY2ZjODA4ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwycd8Q31bV5HuBY11vo3ofVYYHQOhV6LQOG G9uwonVVOxG1/+8OZzrIHxLFo+4ZBIEv0QbPGAKnEvwrOGU+4DSU6orCGuZervlx CsawguKg6zFOI4ArECYw2sDDntPcNngxnEjekcV9d0oteAsn65R81IA8hdpg89sW 1dqXxcM8EinRK0b36NZCUmrlEjj6LkLF/r2RxStrzIK8DpX2ujzFqx2OSLWWw9Cs rtM76DLNA2xNxNALmRQdXz4NxjPkdrqVCfoAREYjjPre2gT5X5C+vNSl8C6wkon0 y6XkySVxL3Fg9AFKwPHBvg1/63uPtv7iZDyPpQm+M78PjOfzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGUCuOPWBVmDMItOdkIsjdOSV27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvY2MxNDY0OWEtZTYwNC0z M2RhLWIxNDUtZWVkOTg1Mjk1MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARdQDR5Q7NrmJqwKTONUnfWwbeqCFd6UF++pfXJ8DBrb6lDFo26ooOY AGsC3PvmbOmdJT8DY62LOarazyN6bZGwS/HJ6NYF+7oyBE2CvALM6OnWEVQNb9zx GkS3pSixUv1VkIi8AtttzcwnJzcfaUaxlvjn0VT4A9XBHrhoHStDw5Idk5UTVVDI 5O79jn9ezb3ld2ZzwDlk/7VnCcj7XMjCiXCxQzkq1VLZJJxJ0qBxuNvbCX0p+SH8 IcgLxXAyMQQFaepfFSIsGjJr9aGVsxOP1N1KXYsl9/V1TQ5pKC3zdV/IU7UW5ilX 76oyY/PSgCMNtyeZ/naHB/ZMemfUJoc= -----END CERTIFICATE-----Generated at Thu May 1 19:04:11 2025 by rpki-client