$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa File: c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa (raw, json) Hash identifier: pKIwAAlHaAeqmDpMCwyIrIfYnBE/SjMndb4968+YVbo= Subject key identifier: 48:62:58:06:17:CE:60:57:7F:3F:DA:EA:33:0C:E6:89:4D:B5:E4:3E Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D6EF870155F9A9677040 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 167.94.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:ef:87:01:55:f9:a9:67:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=9f4393de-e945-4a0b-9d04-bb2f7c4d4771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:37:20:d2:5a:88:94:1a:36:ad:00:27:da: 39:a3:d7:47:70:16:30:68:f3:2e:e1:d9:4f:8e:b0: ec:6f:2b:bf:19:9f:3b:3e:42:12:32:c0:78:e3:aa: 0f:5e:38:c3:b3:e6:b1:20:06:bc:8c:8c:6f:14:e8: 84:0c:26:37:46:db:d7:3f:ff:75:f5:48:3e:51:3e: 68:97:ca:d0:1e:73:2b:77:67:b4:e1:c0:d3:29:7d: 67:54:6b:9e:c4:d8:60:af:bc:94:91:53:59:90:a8: 32:0c:59:99:92:76:cb:00:d7:bb:e3:65:71:3a:18: 29:c1:80:44:a2:cb:08:fa:fe:46:c7:26:5b:c2:6a: ce:ac:2c:e2:99:4c:26:7b:95:99:7b:8d:ca:ad:cd: a3:cc:db:e3:1b:12:0d:f4:25:8e:00:a0:83:18:9a: a5:c7:2a:48:75:43:30:df:ac:db:5a:fd:12:a0:2e: 20:b1:b8:9a:aa:3d:8f:ac:40:d5:5c:77:b6:65:aa: 45:bc:a4:68:a3:3e:9f:1b:e7:a6:f6:31:45:2e:51: 49:95:2a:6a:9f:a0:24:b5:e3:ea:d0:47:d8:86:cb: 61:bb:4e:e7:00:9d:24:96:95:fc:75:b5:58:d4:10: 25:d8:d3:d8:ee:24:2f:d8:2e:d5:16:6b:f7:fb:f3: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:58:06:17:CE:60:57:7F:3F:DA:EA:33:0C:E6:89:4D:B5:E4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:95:f1:d9:ae:fc:d0:6e:15:7c:6e:fc:c1:fc:31:23:ac: 1f:8f:3a:09:68:e3:3b:0d:b1:c0:b5:2b:05:d3:40:b6:1d:29: c1:83:e5:2c:ed:4d:e1:13:b8:43:03:f5:9f:0c:c6:a1:5c:d3: 2e:da:a6:fb:b3:10:01:d4:5a:8b:8f:89:1f:4c:ec:c3:2d:0a: 72:22:5c:ac:b5:34:58:52:6e:d5:f6:5e:23:59:91:b5:42:55: 51:e9:fa:1b:5e:0d:fb:45:1d:88:6e:de:6b:12:16:05:81:b1: 85:8e:fd:97:d0:7b:f7:d7:ed:7e:2b:7b:1e:15:21:b1:bd:cc: 6d:41:9c:3d:72:b8:97:03:70:ba:31:e8:a4:3f:79:e2:3a:21: 4c:1f:2b:65:ce:9c:19:75:ec:42:2a:f8:81:86:0b:0b:8d:09: f8:ef:41:d7:a1:a2:9f:07:a2:0a:27:31:1b:96:29:5d:cd:e1: b3:42:46:09:f1:8e:13:72:aa:80:3d:45:d1:52:08:7b:8e:ae: 85:47:a0:87:ea:9a:be:b5:71:82:f6:f4:d2:38:ca:e0:82:5f: ed:f3:22:18:33:32:8a:b0:4c:03:1a:93:ce:19:16:c2:4b:23: f4:aa:21:e0:5c:ce:d9:9f:fd:1b:8e:c1:b5:a1:67:f8:3a:64: 7e:b4:87:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidbvhwFV+alncEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OWY0MzkzZGUtZTk0NS00YTBiLTlkMDQtYmIyZjdjNGQ0NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmI3INJaiJQaNq0AJ9o5o9dHcBYwaPMu4dlP jrDsbyu/GZ87PkISMsB446oPXjjDs+axIAa8jIxvFOiEDCY3RtvXP/919Ug+UT5o l8rQHnMrd2e04cDTKX1nVGuexNhgr7yUkVNZkKgyDFmZknbLANe742VxOhgpwYBE ossI+v5GxyZbwmrOrCzimUwme5WZe43Krc2jzNvjGxIN9CWOAKCDGJqlxypIdUMw 36zbWv0SoC4gsbiaqj2PrEDVXHe2ZapFvKRooz6fG+em9jFFLlFJlSpqn6AktePq 0EfYhsthu07nAJ0klpX8dbVY1BAl2NPY7iQv2C7VFmv3+/PxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhiWAYXzmBXfz/a6jMM5olNteQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYzA2YjFlMTMtMWU1Yy0z N2FjLTkyNDMtY2FkOGEyODcxZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaGlfHZrvzQbhV8bvzB/DEjrB+POglo4zsNscC1KwXTQLYdKcGD5Szt TeETuEMD9Z8MxqFc0y7apvuzEAHUWouPiR9M7MMtCnIiXKy1NFhSbtX2XiNZkbVC VVHp+hteDftFHYhu3msSFgWBsYWO/ZfQe/fX7X4rex4VIbG9zG1BnD1yuJcDcLox 6KQ/eeI6IUwfK2XOnBl17EIq+IGGCwuNCfjvQdehop8HogonMRuWKV3N4bNCRgnx jhNyqoA9RdFSCHuOroVHoIfqmr61cYL29NI4yuCCX+3zIhgzMoqwTAMak84ZFsJL I/SqIeBcztmf/RuOwbWhZ/g6ZH60hyo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:52 2025 by rpki-client