$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa File: 270e83cd-3da3-324a-a778-d4c20816c3ca.roa (raw, json) Hash identifier: MNwX3Oz1i+LPVIH0qmUEyCttQxuephJ15yV61BnUqDY= Subject key identifier: 24:5C:2F:1C:0B:48:13:4D:16:D9:F8:02:3D:7F:97:74:74:B3:5B:6F Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F43285849D594F22321A163F9EEDE9000 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 32775 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f2:23:21:a1:63:f9:ee:de:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=614f81ca-bf2b-4e5f-b780-dacb25ef29ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5a:2a:c4:9b:53:dd:86:42:98:47:45:ea:de: 9e:a7:8a:08:14:ef:0f:8b:7f:3f:e9:25:96:51:f4: 1b:83:29:0f:c7:ae:6f:44:85:58:57:c9:da:61:a1: 92:24:13:c8:91:98:81:0f:70:0e:11:9c:08:b5:b2: b6:04:9a:00:6d:c5:64:79:ba:f0:87:ad:06:fb:f6: 87:6f:0b:f4:d3:07:0c:3d:d1:31:ae:7e:59:a2:a6: 2c:da:3f:d4:26:df:46:3b:d6:9a:21:20:4c:ef:c9: e0:09:f3:a9:b7:28:d3:f1:b7:8e:69:4a:da:c7:29: 5c:fe:5a:0c:96:2e:5a:93:a6:09:c6:13:db:77:f7: 4a:89:d8:f7:63:11:fc:1a:fd:94:5f:3f:42:73:a6: 6b:97:26:e6:7c:f9:a0:f8:45:61:0e:e2:77:7b:77: 86:ce:89:a8:84:c9:b8:af:4f:19:e4:ff:f6:f9:0c: c3:ed:48:4e:f3:e4:2b:d2:96:75:68:05:05:a0:b8: fa:f9:76:c4:ea:58:3b:08:38:9b:f6:ca:e4:78:c5: fe:0b:aa:05:49:f5:35:28:00:e0:c5:40:41:13:f0: 6e:98:6e:d8:8d:2c:c4:4a:30:6b:3f:65:b2:56:94: 91:a8:35:01:83:82:5c:cd:97:68:68:8a:18:f5:db: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5C:2F:1C:0B:48:13:4D:16:D9:F8:02:3D:7F:97:74:74:B3:5B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:75:c4:85:1b:3e:21:97:34:98:d8:85:13:ae:81:f2:6a: f1:06:06:e0:75:2c:3d:8a:1c:ff:c8:82:d5:df:c1:21:c4:60: 5c:eb:c8:92:f9:a0:af:4a:c9:49:eb:35:23:3e:77:1a:c9:3f: 0b:22:0b:b0:8c:d0:2e:4b:95:b4:6f:78:c8:e1:84:09:29:2c: 2f:c5:7e:44:fc:e1:33:2a:5d:a5:f8:09:39:49:cc:98:58:ed: 0e:4f:21:7a:b5:9e:1c:bd:ab:ba:eb:8d:88:73:b5:2f:21:7d: f7:d1:cb:82:df:a9:39:c7:c4:52:e8:bd:0c:a9:a2:a6:00:0f: 60:ea:d0:af:35:05:7d:95:95:df:0b:2c:6a:53:04:df:31:3a: 74:b3:60:ed:55:04:f8:a0:cf:12:0b:9c:a5:63:43:19:32:31: 99:74:96:9d:39:66:ef:e3:89:de:90:22:09:d2:7c:01:3d:e5: 65:19:11:cc:ae:91:77:62:8f:6d:36:46:11:4e:c7:b3:0b:24: 42:43:3f:46:fb:a9:3b:67:76:5f:28:58:10:98:1d:39:49:ba: 94:dc:d1:cd:23:e6:2f:08:b7:68:89:7e:4e:4f:f0:cf:8f:dd: 1f:a3:b3:a7:6f:c1:5e:cc:1b:ca:c4:bd:77:60:94:dc:40:75: 15:2c:30:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPIjIaFj+e7ekAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NjE0ZjgxY2EtYmYyYi00ZTVmLWI3ODAtZGFjYjI1ZWYyOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjloqxJtT3YZCmEdF6t6ep4oIFO8Pi38/6SWW UfQbgykPx65vRIVYV8naYaGSJBPIkZiBD3AOEZwItbK2BJoAbcVkebrwh60G+/aH bwv00wcMPdExrn5ZoqYs2j/UJt9GO9aaISBM78ngCfOptyjT8beOaUraxylc/loM li5ak6YJxhPbd/dKidj3YxH8Gv2UXz9Cc6ZrlybmfPmg+EVhDuJ3e3eGzomohMm4 r08Z5P/2+QzD7UhO8+Qr0pZ1aAUFoLj6+XbE6lg7CDib9srkeMX+C6oFSfU1KADg xUBBE/BumG7YjSzESjBrP2WyVpSRqDUBg4JczZdoaIoY9dtxqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRcLxwLSBNNFtn4Aj1/l3R0s1tvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvMjcwZTgzY2QtM2RhMy0z MjRhLWE3NzgtZDRjMjA4MTZjM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZzdcSFGz4hlzSY2IUTroHyavEGBuB1LD2KHP/IgtXfwSHEYFzryJL5 oK9KyUnrNSM+dxrJPwsiC7CM0C5LlbRveMjhhAkpLC/FfkT84TMqXaX4CTlJzJhY 7Q5PIXq1nhy9q7rrjYhztS8hfffRy4LfqTnHxFLovQypoqYAD2Dq0K81BX2Vld8L LGpTBN8xOnSzYO1VBPigzxILnKVjQxkyMZl0lp05Zu/jid6QIgnSfAE95WUZEcyu kXdij202RhFOx7MLJEJDP0b7qTtndl8oWBCYHTlJupTc0c0j5i8It2iJfk5P8M+P 3R+js6dvwV7MG8rEvXdglNxAdRUsMCc= -----END CERTIFICATE-----Generated at Sun Jun 15 23:04:20 2025 by rpki-client