$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b172a016-6d8a-3001-8881-5130afa381a9.roa File: b172a016-6d8a-3001-8881-5130afa381a9.roa (raw, json) Hash identifier: yQGfqvFaVGH5duKDo7YsZDX9cbmmHS/wlSocRJN+qh4= Subject key identifier: 06:85:85:35:51:28:67:CB:95:A0:F3:9C:2F:2D:98:AA:73:E0:5B:F3 Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Certificate serial: 010D0C9F432858498B99D2AD85ACAB0A37BE3110 Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b172a016-6d8a-3001-8881-5130afa381a9.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 7018 IP address blocks: 167.253.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d2:ad:85:ac:ab:0a:37:be:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=2dfe8f98-d8fb-4424-84d4-2c29f996438b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:70:3c:39:86:3c:54:db:b7:f9:30:ef:e6: 00:f9:94:77:8f:0b:fc:13:a9:a8:a5:1b:b4:63:9d: ec:5d:72:7e:55:16:ae:56:56:a8:cb:55:00:fe:97: 83:0c:c9:d4:21:3f:7d:9d:91:0f:f6:e4:96:93:d9: 94:27:c3:4f:a5:c8:f9:45:99:ea:94:90:a2:b9:e9: c6:79:18:33:e7:83:f9:fb:8b:68:fa:ca:b8:5b:59: df:7f:94:13:6f:3f:65:e8:33:e9:23:d9:1f:2e:e0: fb:63:09:77:47:68:c5:67:12:cb:e5:e5:25:dd:2d: f3:bf:eb:19:d1:ab:32:6b:42:00:13:3d:92:67:2f: c1:2b:07:09:a9:fb:d0:c7:b2:d6:87:e8:a6:f4:59: 99:e9:5e:17:31:73:0e:bb:6c:a9:c8:b1:6f:7f:95: 97:4c:53:e5:d8:5e:3f:00:5a:cb:f9:94:3c:f7:1e: ce:2f:8e:82:d3:61:3b:3e:e1:fc:a5:e1:f5:f8:95: ab:51:9a:07:d1:fe:3e:31:6b:41:db:fc:f8:16:1b: ad:85:9d:4d:1b:e1:4a:a2:21:ea:c5:6e:da:6a:d7: c4:85:60:8c:b7:d2:ca:39:bd:fd:12:57:de:b2:98: 6b:2c:7e:ce:99:41:5a:5b:84:e8:ea:1a:b8:7e:e8: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:85:85:35:51:28:67:CB:95:A0:F3:9C:2F:2D:98:AA:73:E0:5B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b172a016-6d8a-3001-8881-5130afa381a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl X509v3 Authority Key Identifier: keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer sbgp-ipAddrBlock: critical IPv4: 167.253.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3f:5c:bf:5b:ea:5f:9e:66:dd:3b:5a:d5:ff:75:c4:dd:44: 45:76:ab:2b:6b:e6:9e:d7:03:8d:ba:5a:22:96:90:21:03:2c: 6f:e0:5f:c8:dc:e8:7c:e7:34:b4:58:01:6f:f3:26:4d:17:d9: 24:11:b4:a8:b4:c2:06:9c:61:a1:93:ac:b4:3f:41:b0:91:01: a2:11:98:4e:0f:a4:32:0b:a2:4a:bb:89:fa:4e:76:ec:98:84: 86:5f:59:4a:48:6c:d0:ba:ca:38:83:68:b6:3b:82:6a:c2:a9: 01:76:19:4d:a0:7a:ca:bf:49:c7:22:d8:78:8d:6e:ae:6a:09: ce:2e:50:dc:cd:86:f0:6e:df:fd:03:57:09:79:7e:5d:90:e0: 03:8b:19:0d:3c:97:ca:35:9b:ba:b5:96:7e:fb:46:5c:fd:f2: be:f8:14:1c:25:19:3e:ac:d5:52:ff:2a:28:47:03:91:ac:4e: 8e:34:cc:72:c5:7c:72:21:72:a5:16:4e:6a:1f:8c:90:81:a7: 96:e1:67:fe:84:0c:fd:73:ef:46:8b:bd:e9:ee:a3:f9:6f:b1: ac:83:70:92:9a:4c:d0:cb:cf:85:e8:58:c3:ca:d0:47:38:39: d6:3a:a9:e1:54:9a:1b:db:2f:4e:45:f4:b1:26:f6:e7:91:d1: 47:09:ac:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmdKthayrCje+MRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNmI2ZjktYTA1Ni00NzFjLWJmOTYtZjJmZDUzMzBk YWM0MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk MmRmZThmOTgtZDhmYi00NDI0LTg0ZDQtMmMyOWY5OTY0MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4xwPDmGPFTbt/kw7+YA+ZR3jwv8E6mopRu0 Y53sXXJ+VRauVlaoy1UA/peDDMnUIT99nZEP9uSWk9mUJ8NPpcj5RZnqlJCiuenG eRgz54P5+4to+sq4W1nff5QTbz9l6DPpI9kfLuD7Ywl3R2jFZxLL5eUl3S3zv+sZ 0asya0IAEz2SZy/BKwcJqfvQx7LWh+im9FmZ6V4XMXMOu2ypyLFvf5WXTFPl2F4/ AFrL+ZQ89x7OL46C02E7PuH8peH1+JWrUZoH0f4+MWtB2/z4FhuthZ1NG+FKoiHq xW7aatfEhWCMt9LKOb39ElfesphrLH7OmUFaW4To6hq4fugudwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaFhTVRKGfLlaDznC8tmKpz4FvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yY2E2 YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZkNTMzMGRhYzQvYjE3MmEwMTYtNmQ4YS0z MDAxLTg4ODEtNTEzMGFmYTM4MWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmNhNmI2ZjktYTA1Ni00NzFjLWJm OTYtZjJmZDUzMzBkYWM0LzJjYTZiNmY5LWEwNTYtNDcxYy1iZjk2LWYyZmQ1MzMw ZGFjNC5jcmwwHwYDVR0jBBgwFoAU0Gj22st2u5o08zsvhIvODS5JlDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yY2E2YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZk NTMzMGRhYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ/XL9b6l+eZt07WtX/dcTdREV2qytr5p7XA426WiKWkCEDLG/gX8jc 6HznNLRYAW/zJk0X2SQRtKi0wgacYaGTrLQ/QbCRAaIRmE4PpDILokq7ifpOduyY hIZfWUpIbNC6yjiDaLY7gmrCqQF2GU2gesq/Scci2HiNbq5qCc4uUNzNhvBu3/0D Vwl5fl2Q4AOLGQ08l8o1m7q1ln77Rlz98r74FBwlGT6s1VL/KihHA5GsTo40zHLF fHIhcqUWTmofjJCBp5bhZ/6EDP1z70aLvenuo/lvsayDcJKaTNDLz4XoWMPK0Ec4 OdY6qeFUmhvbL05F9LEm9ueR0UcJrN0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:45 2025 by rpki-client