$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa File: 4509c257-d356-3468-8d2f-84e2bb161f00.roa (raw, json) Hash identifier: 2heXZcH/49p6isLHf7B1jOjNFe+q27P4EnRF4RPb//Y= Subject key identifier: 97:66:3F:51:07:4A:0B:37:22:60:4E:D8:52:DB:35:1F:47:C2:A4:23 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D4E71DCEB5AED6E63EC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 167.94.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d4:e7:1d:ce:b5:ae:d6:e6:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b6316197-9faf-45ac-a208-cbe10038e9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:eb:96:e9:07:e8:2a:e5:19:aa:93:b6:0f: 5f:0f:14:0a:f2:0d:74:5b:54:0a:a3:14:38:97:b3: fd:27:cd:da:8e:98:00:94:9d:71:0a:06:94:ba:c4: a9:50:69:d9:a3:5e:5f:7f:af:dc:10:f8:56:49:31: 3c:b1:4a:ee:f1:d1:08:6d:9f:06:c5:c7:a4:15:61: dd:e9:32:43:17:4a:88:7d:b4:67:b8:4a:e7:d4:3c: c8:3e:1c:52:f4:15:47:b6:62:01:6b:34:f0:41:d8: 48:b9:a9:e8:df:86:cc:91:1a:21:d3:02:7e:ed:aa: 60:fe:ca:f7:b0:d6:e2:1b:70:b5:4f:0a:e9:67:90: 1b:af:b3:6e:18:a1:ad:75:a6:4d:a9:f7:8a:e7:8d: 04:8d:00:91:a0:27:a2:29:81:e4:6c:ba:fb:e8:4a: 0d:bf:ee:74:8e:5e:de:f2:bf:e5:66:fa:98:8b:b1: 1a:5d:b3:ec:9b:3d:81:31:f8:2e:6d:38:ff:9f:06: d7:94:ae:af:8d:01:9d:35:45:ad:20:ca:0c:15:c1: e5:97:20:3a:c6:97:68:e7:25:36:e6:ee:45:7c:cd: 02:07:45:7f:1c:50:d2:e7:e5:10:86:a2:78:a3:d0: 29:e7:5a:b0:34:bb:0c:f6:3b:43:a6:e4:d2:9a:dd: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:3F:51:07:4A:0B:37:22:60:4E:D8:52:DB:35:1F:47:C2:A4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4509c257-d356-3468-8d2f-84e2bb161f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2c:51:f4:7a:d7:52:4e:96:7f:42:11:a1:ef:c9:1d:07:ac: 4e:a2:b2:d5:3d:86:4e:0a:9e:74:fd:ba:ae:dd:7e:27:21:4b: 8d:fc:a0:c0:9d:8f:d1:85:a9:ca:ff:90:c9:cc:c5:e5:6a:0f: 10:4a:aa:df:8f:39:55:73:d7:dc:b7:fe:75:a3:7c:91:5f:d7: 2f:1b:99:73:f3:df:f3:e4:b8:53:cb:9f:73:37:73:15:04:6e: 07:08:ba:f1:64:07:94:e7:71:4c:37:9d:50:cd:d5:15:07:c6: d0:1a:36:29:65:e5:6a:90:fb:e5:0d:92:47:4a:62:c2:57:59: 72:dc:39:f6:9d:c9:e9:e0:6c:7b:87:0b:cf:28:6a:6e:c1:aa: 16:54:65:1c:fe:c9:75:20:03:c9:ac:54:90:fb:a0:93:87:0e: 2a:57:59:80:03:ca:67:46:df:dc:c5:e5:35:36:b9:a9:cd:f1: 6a:0e:a3:f3:b9:be:98:a5:4d:98:29:7e:14:62:3d:44:b2:29: 7f:cb:30:76:41:71:79:a0:0a:0a:8f:b1:b8:d0:24:68:d6:71: 2b:fe:aa:1c:98:ec:37:b4:a8:93:db:00:8b:77:b6:f8:06:d7: 61:be:c3:8f:1c:c8:cd:0b:c8:46:75:07:3d:1a:3d:b9:f8:0b: 85:64:d4:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidTnHc61rtbmPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjYzMTYxOTctOWZhZi00NWFjLWEyMDgtY2JlMTAwMzhlOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKnrlukH6CrlGaqTtg9fDxQK8g10W1QKoxQ4 l7P9J83ajpgAlJ1xCgaUusSpUGnZo15ff6/cEPhWSTE8sUru8dEIbZ8GxcekFWHd 6TJDF0qIfbRnuErn1DzIPhxS9BVHtmIBazTwQdhIuano34bMkRoh0wJ+7apg/sr3 sNbiG3C1TwrpZ5Abr7NuGKGtdaZNqfeK540EjQCRoCeiKYHkbLr76EoNv+50jl7e 8r/lZvqYi7EaXbPsmz2BMfgubTj/nwbXlK6vjQGdNUWtIMoMFcHllyA6xpdo5yU2 5u5FfM0CB0V/HFDS5+UQhqJ4o9Ap51qwNLsM9jtDpuTSmt3sSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdmP1EHSgs3ImBO2FLbNR9HwqQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDUwOWMyNTctZDM1Ni0z NDY4LThkMmYtODRlMmJiMTYxZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwsUfR611JOln9CEaHvyR0HrE6istU9hk4KnnT9uq7dfichS438oMCd j9GFqcr/kMnMxeVqDxBKqt+POVVz19y3/nWjfJFf1y8bmXPz3/PkuFPLn3M3cxUE bgcIuvFkB5TncUw3nVDN1RUHxtAaNill5WqQ++UNkkdKYsJXWXLcOfadyengbHuH C88oam7BqhZUZRz+yXUgA8msVJD7oJOHDipXWYADymdG39zF5TU2uanN8WoOo/O5 vpilTZgpfhRiPUSyKX/LMHZBcXmgCgqPsbjQJGjWcSv+qhyY7De0qJPbAIt3tvgG 12G+w48cyM0LyEZ1Bz0aPbn4C4Vk1NQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:59 2025 by rpki-client