$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa File: b592519b-2458-3376-88aa-1a85ad209d0e.roa (raw, json) Hash identifier: pg7eoFNDmXgfMg/cLKjbEeGOfx+7oECV54s5p7EeoIo= Subject key identifier: 9D:8E:49:66:E5:9E:1E:A0:28:28:6F:35:B9:47:23:B0:81:B3:BE:C1 Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F43285849D594F1F0240D7F6019CE82E0 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 11185 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f1:f0:24:0d:7f:60:19:ce:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=aa8813ee-9f0d-45cd-8db4-6d23fe2f0567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8b:36:4b:8e:99:6f:75:44:45:3c:a4:ec:e8: ea:69:ab:47:e0:35:34:13:ac:38:ba:1e:8a:4c:47: 7f:7b:73:c8:51:5e:f6:11:ef:dc:cd:84:ef:41:92: ad:94:97:c8:ab:8f:1f:7d:bd:65:1a:c6:cf:ec:2c: 76:a5:31:39:b3:c7:0d:25:69:d3:c7:dd:88:98:b2: c1:dd:2c:11:6a:6f:ba:5c:25:59:32:89:e1:91:66: 14:d6:21:16:69:5d:11:06:2f:6e:b2:49:7d:65:80: 8b:0f:66:c1:a2:04:a8:ed:53:2c:22:06:f2:e3:c9: 81:5b:58:a0:68:5b:d1:4b:7a:58:e0:27:85:00:ef: cf:1e:05:1e:23:5d:63:f4:9d:c7:bc:de:b1:1e:13: 34:2f:e0:0d:91:e7:a8:08:c6:3f:24:49:c0:8a:c2: 0e:93:60:eb:3d:d5:bd:c4:c4:f9:9c:81:b3:7c:fb: 0d:15:77:48:7d:0e:1c:ab:30:42:23:cc:29:bf:c5: 8a:8e:44:a6:c9:31:96:44:21:a0:51:3b:85:b2:1a: 48:7b:8b:08:b0:1f:15:73:ee:b3:a8:22:67:d5:cb: 44:39:1b:8d:d7:b3:ac:3b:45:83:d0:ef:f0:d8:22: 3e:da:66:d0:48:e2:6a:74:5a:3e:d6:d4:06:9e:1f: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8E:49:66:E5:9E:1E:A0:28:28:6F:35:B9:47:23:B0:81:B3:BE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:53:27:99:71:72:37:d1:a5:6c:a9:90:e2:8e:02:f1:32:e4: 2a:69:30:f7:7f:55:75:2a:b6:b6:0e:c6:6f:ea:0c:dc:41:af: d3:3f:af:87:4b:7b:d4:bf:ca:2f:eb:60:b6:cc:57:28:f6:1d: df:13:73:2f:fa:f2:c0:36:45:26:10:8b:f2:f2:d5:a6:4a:bb: c1:c6:8e:69:79:47:8c:cc:7a:f5:50:33:05:d0:1b:75:c3:d7: bf:27:07:2f:03:a9:f6:f7:4a:e5:69:6f:00:42:1f:c5:0a:e2: cf:b1:8d:9f:10:f9:55:0d:8c:51:f9:30:a4:5d:4a:49:b1:93: e3:92:34:57:2b:2a:6b:25:2e:23:3f:17:97:52:b6:0c:5b:c2: 9f:70:12:7b:cc:47:bd:dd:3c:77:0d:1c:f4:b0:06:c2:1c:fc: bc:11:95:3e:40:94:ad:86:84:20:b8:8a:02:b9:53:15:d3:88: 8a:c2:4e:d1:f9:a6:36:ea:20:d5:e1:bc:3e:3b:6c:7c:be:d5: 96:26:4d:b8:10:dd:fd:9c:fa:72:55:30:37:24:9a:16:d6:71: 81:22:3c:8a:12:4e:71:74:cf:f6:b7:63:1e:c4:cd:59:db:a8: 0c:dd:b6:68:cb:72:79:4a:de:8d:b8:4f:38:84:a5:65:28:05: 2f:ad:fd:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPHwJA1/YBnOguAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YWE4ODEzZWUtOWYwZC00NWNkLThkYjQtNmQyM2ZlMmYwNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8os2S46Zb3VERTyk7OjqaatH4DU0E6w4uh6K TEd/e3PIUV72Ee/czYTvQZKtlJfIq48ffb1lGsbP7Cx2pTE5s8cNJWnTx92ImLLB 3SwRam+6XCVZMonhkWYU1iEWaV0RBi9uskl9ZYCLD2bBogSo7VMsIgby48mBW1ig aFvRS3pY4CeFAO/PHgUeI11j9J3HvN6xHhM0L+ANkeeoCMY/JEnAisIOk2DrPdW9 xMT5nIGzfPsNFXdIfQ4cqzBCI8wpv8WKjkSmyTGWRCGgUTuFshpIe4sIsB8Vc+6z qCJn1ctEORuN17OsO0WD0O/w2CI+2mbQSOJqdFo+1tQGnh8r/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2OSWblnh6gKChvNblHI7CBs77BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvYjU5MjUxOWItMjQ1OC0z Mzc2LTg4YWEtMWE4NWFkMjA5ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJTJ5lxcjfRpWypkOKOAvEy5CppMPd/VXUqtrYOxm/qDNxBr9M/r4dL e9S/yi/rYLbMVyj2Hd8Tcy/68sA2RSYQi/Ly1aZKu8HGjml5R4zMevVQMwXQG3XD 178nBy8Dqfb3SuVpbwBCH8UK4s+xjZ8Q+VUNjFH5MKRdSkmxk+OSNFcrKmslLiM/ F5dStgxbwp9wEnvMR73dPHcNHPSwBsIc/LwRlT5AlK2GhCC4igK5UxXTiIrCTtH5 pjbqINXhvD47bHy+1ZYmTbgQ3f2c+nJVMDckmhbWcYEiPIoSTnF0z/a3Yx7EzVnb qAzdtmjLcnlK3o24TziEpWUoBS+t/dw= -----END CERTIFICATE-----Generated at Sun Jun 15 22:52:37 2025 by rpki-client