$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa File: a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa (raw, json) Hash identifier: h1wrlkRWj2NtWhsLMIESjeDQHfB8GGrW1v/PtE9KrFo= Subject key identifier: 32:EF:70:33:C9:9D:4B:80:86:E4:B7:5F:37:F4:54:51:CD:E4:C0:2F Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D4D6D922FF7430FC0100 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 167.94.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d4:d6:d9:22:ff:74:30:fc:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=2a0566d4-e768-42f7-b9e7-ab4af3a5754a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:d9:b7:5a:6a:4d:17:31:14:02:94:7d:47: a4:3c:51:b6:78:5e:b5:8b:a3:2d:64:f4:fb:bd:33: cc:2a:e7:66:5d:1c:f7:51:90:8a:50:46:da:a3:c8: 60:db:e0:f8:94:05:a9:51:a0:77:43:12:42:c7:43: 8e:2b:3a:41:5f:e8:0a:af:cb:45:e2:be:1b:e0:39: 42:58:3d:26:aa:a2:76:de:82:12:60:7b:f0:de:f3: 9e:29:64:6b:36:b9:88:96:07:dc:ed:4b:42:00:61: f7:e8:0f:ad:bd:3c:14:ed:97:66:ef:5a:71:ff:3a: fd:cd:be:78:4f:6c:30:4a:e6:f5:8e:c0:f6:51:d2: 8e:a7:4c:0f:35:d5:48:58:0d:84:63:a6:13:5c:c1: f3:51:9c:a6:fc:52:bb:2c:89:7d:ed:98:1e:e2:13: 8b:80:6c:dc:d3:79:27:3e:99:45:81:e2:c4:07:78: 1d:17:bd:c6:43:db:2e:b5:c0:37:30:f0:3a:98:61: f6:ce:76:38:7c:d0:73:4e:a0:0e:03:7a:66:2f:91: 2d:18:2a:57:18:e8:9d:a7:6b:1a:9d:ad:b7:86:04: 5f:39:e5:1e:5e:df:28:37:b2:11:b6:49:10:35:d5: 9d:3c:f7:48:cd:47:ac:d5:d7:e0:97:cf:d1:7d:c4: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:70:33:C9:9D:4B:80:86:E4:B7:5F:37:F4:54:51:CD:E4:C0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a14babe0-c816-3890-8b6b-7f5c204ad5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:da:97:f4:96:f5:a9:e8:f6:a0:13:a7:89:f1:40:da:85:34: 39:f7:73:7b:a7:ab:52:66:96:92:21:59:8c:b7:2a:c3:5e:a5: 09:36:9b:0c:9c:2d:5e:fe:67:a0:be:75:d4:62:2e:e4:e3:08: 51:86:a4:89:a2:8d:e7:95:87:5d:b9:c9:5d:27:89:08:f5:9c: 00:a6:9f:52:e5:18:ac:d4:73:da:d6:e0:d8:12:67:d6:3d:09: ca:84:ab:6f:7f:aa:42:e8:f0:fb:0a:30:dc:9b:35:e6:73:d6: 2f:d8:c6:a2:d8:51:32:3f:35:50:39:ca:7f:2f:a3:27:30:79: e5:8d:52:d8:2c:a5:aa:10:9c:6e:42:eb:5a:56:fa:97:3e:95: 7c:ac:c2:63:fc:e0:6b:e1:3c:72:e6:43:a8:09:3d:24:48:3d: 05:89:6d:76:a0:f4:8c:df:8a:4c:68:ee:e0:b3:ee:04:f6:55: 91:1b:75:18:a5:da:c2:8b:63:1e:64:ff:97:d4:04:6e:29:9e: 3d:5f:2f:91:28:b7:0d:44:22:f9:13:56:82:f5:50:d0:ac:ee: eb:da:f3:41:48:66:7b:63:7e:4a:64:67:6a:dd:28:04:d0:58: 65:78:9d:49:d8:4f:e6:bd:f5:38:5e:34:fc:99:3d:aa:88:15: bf:1b:39:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidTW2SL/dDD8AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MmEwNTY2ZDQtZTc2OC00MmY3LWI5ZTctYWI0YWYzYTU3NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzvZt1pqTRcxFAKUfUekPFG2eF61i6MtZPT7 vTPMKudmXRz3UZCKUEbao8hg2+D4lAWpUaB3QxJCx0OOKzpBX+gKr8tF4r4b4DlC WD0mqqJ23oISYHvw3vOeKWRrNrmIlgfc7UtCAGH36A+tvTwU7Zdm71px/zr9zb54 T2wwSub1jsD2UdKOp0wPNdVIWA2EY6YTXMHzUZym/FK7LIl97Zge4hOLgGzc03kn PplFgeLEB3gdF73GQ9sutcA3MPA6mGH2znY4fNBzTqAOA3pmL5EtGCpXGOidp2sa na23hgRfOeUeXt8oN7IRtkkQNdWdPPdIzUes1dfgl8/RfcTzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLvcDPJnUuAhuS3Xzf0VFHN5MAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTE0YmFiZTAtYzgxNi0z ODkwLThiNmItN2Y1YzIwNGFkNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7al/SW9ano9qATp4nxQNqFNDn3c3unq1JmlpIhWYy3KsNepQk2mwyc LV7+Z6C+ddRiLuTjCFGGpImijeeVh125yV0niQj1nACmn1LlGKzUc9rW4NgSZ9Y9 CcqEq29/qkLo8PsKMNybNeZz1i/YxqLYUTI/NVA5yn8voycweeWNUtgspaoQnG5C 61pW+pc+lXyswmP84GvhPHLmQ6gJPSRIPQWJbXag9Izfikxo7uCz7gT2VZEbdRil 2sKLYx5k/5fUBG4pnj1fL5Eotw1EIvkTVoL1UNCs7uva80FIZntjfkpkZ2rdKATQ WGV4nUnYT+a99TheNPyZPaqIFb8bOS8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:34 2025 by rpki-client