$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa File: 939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa (raw, json) Hash identifier: r9HdQZXkQPv8s9/AS86inrmk10hTJNdiR6+fSOib4bg= Subject key identifier: 06:38:FF:66:64:7E:A9:AE:F0:18:68:EC:D3:D8:F8:F9:BE:7B:13:25 Certificate issuer: /CN=19039935-462a-4b14-8e96-78798283eeff Certificate serial: 010D0C9F432858496FAF16BB2E2C2C2560E15340 Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 395793 IP address blocks: 167.253.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:16:bb:2e:2c:2c:25:60:e1:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19039935-462a-4b14-8e96-78798283eeff Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=27e06dfb-1539-45a0-9929-9cfa3a6f8d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8f:e9:27:e6:9b:42:33:50:18:8f:e8:31:dc: 64:ed:8e:18:1d:db:25:f7:e9:fa:a5:32:fc:86:35: 48:be:43:16:0b:32:56:ca:c5:35:dd:1d:d9:0a:e4: be:45:1d:e8:a7:a1:61:f3:be:40:c4:de:80:6d:43: 5b:95:4e:07:9d:1d:50:31:b4:48:ec:5c:2c:56:4a: f5:4e:25:71:15:ba:22:bf:e9:89:0a:9f:23:70:7e: 38:d5:08:95:42:86:e2:93:39:c8:33:9e:ef:bd:35: 8b:cc:95:8e:ba:f2:7c:5e:d6:91:83:37:17:89:47: 03:f8:a5:15:22:62:75:1e:c1:30:49:54:c5:be:59: 6b:66:f8:f5:ec:36:f1:bf:86:a2:27:4b:60:62:f3: a9:15:67:09:84:88:52:5b:2b:ec:f1:ca:8a:2c:36: 54:9a:99:cf:bc:59:41:e9:42:94:bc:91:dd:23:41: 37:71:58:75:8a:14:1f:69:19:1c:9f:92:73:f7:db: ed:75:0a:26:c0:12:12:61:5d:b2:70:3e:f3:91:3e: af:04:2a:68:e9:e0:a5:37:bf:24:74:d5:c1:36:2e: 8b:f4:8a:77:85:c8:5d:40:eb:2d:e4:fe:95:a5:e0: 4a:e8:5e:4f:d1:73:4e:c3:e6:69:20:c5:31:77:a5: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:38:FF:66:64:7E:A9:AE:F0:18:68:EC:D3:D8:F8:F9:BE:7B:13:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl X509v3 Authority Key Identifier: keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer sbgp-ipAddrBlock: critical IPv4: 167.253.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:14:8e:e7:a7:d3:34:88:de:5f:5a:26:d4:dd:8b:b5:23:fd: 84:30:00:a7:6f:7e:21:92:38:f1:06:9f:68:2d:b8:bf:9b:9e: c5:3f:72:f4:40:34:4b:90:27:84:16:96:e5:74:4c:9f:09:bd: 9b:7c:75:33:9b:1e:0c:72:6f:ea:94:38:04:62:46:93:11:86: b7:d4:c0:fc:81:9b:b5:91:80:29:73:95:4f:78:ce:69:52:8e: 7d:09:f8:fc:71:cc:37:a1:58:7f:cd:4a:27:2b:1b:22:7c:28: 94:43:0d:f4:97:36:26:cf:5c:5f:25:46:e0:96:e1:05:b5:89: 78:49:47:4c:be:7a:6e:9d:00:f4:66:9e:16:2a:ca:b0:93:a6: 64:47:dd:dd:ff:e6:d1:9e:1e:1a:1c:ee:36:4a:5a:96:31:c0: 3f:cd:51:de:0e:e8:00:94:f6:20:98:af:bf:ed:bf:66:53:13: b1:1e:ee:74:69:18:99:62:3d:f7:b4:75:d5:43:ae:b7:02:b7: b6:f6:1e:3a:ea:e0:3f:b5:9b:79:58:87:24:22:de:30:83:0e: 46:3b:c1:04:b5:57:26:7e:30:72:95:1b:01:22:c2:9a:cc:21: 3e:58:e5:f8:6f:68:a6:c0:07:d0:37:41:21:0f:d3:09:2c:20: b4:66:fb:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxa7LiwsJWDhU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwMzk5MzUtNDYyYS00YjE0LThlOTYtNzg3OTgyODNl ZWZmMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MjdlMDZkZmItMTUzOS00NWEwLTk5MjktOWNmYTNhNmY4ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho/pJ+abQjNQGI/oMdxk7Y4YHdsl9+n6pTL8 hjVIvkMWCzJWysU13R3ZCuS+RR3op6Fh875AxN6AbUNblU4HnR1QMbRI7FwsVkr1 TiVxFboiv+mJCp8jcH441QiVQobikznIM57vvTWLzJWOuvJ8XtaRgzcXiUcD+KUV ImJ1HsEwSVTFvllrZvj17Dbxv4aiJ0tgYvOpFWcJhIhSWyvs8cqKLDZUmpnPvFlB 6UKUvJHdI0E3cVh1ihQfaRkcn5Jz99vtdQomwBISYV2ycD7zkT6vBCpo6eClN78k dNXBNi6L9Ip3hchdQOst5P6VpeBK6F5P0XNOw+ZpIMUxd6W+DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY4/2Zkfqmu8Bho7NPY+Pm+exMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTAz OTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4M2VlZmYvOTM5YzJjMmItZDc3ZC0z OWEwLThiMWUtNzBiY2E5OGNjODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkwMzk5MzUtNDYyYS00YjE0LThl OTYtNzg3OTgyODNlZWZmLzE5MDM5OTM1LTQ2MmEtNGIxNC04ZTk2LTc4Nzk4Mjgz ZWVmZi5jcmwwHwYDVR0jBBgwFoAUMCKfdKNrwtqpZkAI0cw8U5Df3pkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xOTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5 ODI4M2VlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgUjuen0zSI3l9aJtTdi7Uj/YQwAKdvfiGSOPEGn2gtuL+bnsU/cvRA NEuQJ4QWluV0TJ8JvZt8dTObHgxyb+qUOARiRpMRhrfUwPyBm7WRgClzlU94zmlS jn0J+PxxzDehWH/NSicrGyJ8KJRDDfSXNibPXF8lRuCW4QW1iXhJR0y+em6dAPRm nhYqyrCTpmRH3d3/5tGeHhoc7jZKWpYxwD/NUd4O6ACU9iCYr7/tv2ZTE7Ee7nRp GJliPfe0ddVDrrcCt7b2Hjrq4D+1m3lYhyQi3jCDDkY7wQS1VyZ+MHKVGwEiwprM IT5Y5fhvaKbAB9A3QSEP0wksILRm+48= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:13 2025 by rpki-client