$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/48b9666b-36c4-317b-bac6-fce0c51c7a87.roa File: 48b9666b-36c4-317b-bac6-fce0c51c7a87.roa (raw, json) Hash identifier: huCQijR8w0c06AoSvQqQJ7L3rqHq/b1RIUDibb6ijRo= Subject key identifier: 60:BE:AE:47:26:66:29:27:A9:98:97:A3:41:45:40:3A:2B:E8:BE:96 Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Certificate serial: 010D0C9F432858497AD9BD42F7EF4968EF024D40 Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/48b9666b-36c4-317b-bac6-fce0c51c7a87.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 6079 IP address blocks: 167.253.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:bd:42:f7:ef:49:68:ef:02:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=d1f9a84e-66ff-4cc2-b457-b678510ec9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:d6:6f:14:b8:db:be:ca:29:61:f0:73:9a: fd:16:6b:a2:c8:31:74:d0:02:ac:30:17:d4:a5:ad: 97:aa:06:6c:a0:8a:a1:51:4b:7c:3a:3c:17:88:4e: 72:88:eb:d8:98:24:1e:2e:a9:84:03:ab:71:8a:49: 7a:7d:75:5b:db:4e:71:9f:e3:b5:14:5d:4a:33:98: 5d:37:68:85:ff:b4:4a:cf:0d:f2:3c:e2:0f:fe:ad: db:2b:4f:03:ee:d2:5b:8f:89:99:76:fc:87:49:7b: 25:8e:0f:63:f6:a9:27:39:c8:1b:cd:4e:a6:c3:db: b0:ed:ea:8c:fb:c1:44:8c:23:5a:8c:f1:4d:0e:36: bd:0a:03:69:ea:a9:6b:15:3c:d3:86:22:75:71:ab: 23:c6:f7:68:a0:86:a4:67:8d:e3:8b:3c:dd:64:72: f2:ea:12:90:fe:03:e0:86:3a:f4:f0:f6:e0:18:f9: 58:0a:16:43:c2:23:ea:f5:20:12:5a:e9:f4:64:fc: 62:12:f8:31:d6:ec:d8:58:27:d0:e1:c0:48:20:d4: bd:46:73:05:7d:49:63:b5:45:5b:0d:c4:5e:ee:95: b3:10:41:dc:be:d1:6b:85:e5:51:d2:82:6a:7f:62: 62:6e:e9:53:49:a7:61:21:c3:ed:4a:d9:1a:cc:b3: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BE:AE:47:26:66:29:27:A9:98:97:A3:41:45:40:3A:2B:E8:BE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/48b9666b-36c4-317b-bac6-fce0c51c7a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl X509v3 Authority Key Identifier: keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:44:39:bc:7b:c4:2b:90:db:de:83:45:17:d7:98:fd:0b:40: 09:d0:1d:93:fd:b3:b6:46:53:25:b3:a8:5e:70:ba:32:2e:fc: 1c:c6:f8:e6:45:df:44:ca:e8:bb:74:b4:8f:ce:4c:e1:cb:47: 7e:69:65:a4:5e:77:07:a4:70:ea:8b:81:31:b1:7f:69:5f:12: 30:64:df:97:3c:e3:79:9e:cb:b9:20:6b:f8:d3:d5:92:26:7f: 86:dc:e8:3b:b0:7e:7a:96:16:4b:5a:f5:b2:81:0b:38:72:96: 2c:71:a8:20:04:11:fe:b3:6a:f5:fd:95:4f:19:c4:ea:6f:72: d6:f4:6f:8b:a2:44:dc:bc:0f:32:59:ca:59:1c:a0:8e:95:db: fe:e9:1d:66:54:a0:fd:db:ad:5a:d8:89:f6:c1:bc:27:5a:8f: e5:d4:28:87:90:7b:49:5c:56:35:11:20:86:de:24:ee:6a:5a: 14:c4:91:bc:b8:11:dd:cb:44:bf:d5:54:ff:c7:2c:40:b7:df: 8f:81:f7:6a:b5:7b:7c:8b:4c:b6:5b:bc:a9:86:a1:81:b7:e0: 71:2b:b0:5f:2e:8c:c3:24:4f:97:53:a5:87:4a:2f:a0:04:b7: d2:d6:61:a0:7b:57:38:4a:1e:1b:f6:50:38:22:da:92:c2:0e: df:f4:5d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62b1C9+9JaO8CTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl ODRhMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk ZDFmOWE4NGUtNjZmZi00Y2MyLWI0NTctYjY3ODUxMGVjOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO/WbxS4277KKWHwc5r9FmuiyDF00AKsMBfU pa2XqgZsoIqhUUt8OjwXiE5yiOvYmCQeLqmEA6txikl6fXVb205xn+O1FF1KM5hd N2iF/7RKzw3yPOIP/q3bK08D7tJbj4mZdvyHSXsljg9j9qknOcgbzU6mw9uw7eqM +8FEjCNajPFNDja9CgNp6qlrFTzThiJ1casjxvdooIakZ43jizzdZHLy6hKQ/gPg hjr08PbgGPlYChZDwiPq9SASWun0ZPxiEvgx1uzYWCfQ4cBIINS9RnMFfUljtUVb DcRe7pWzEEHcvtFrheVR0oJqf2JibulTSadhIcPtStkazLNtEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC+rkcmZiknqZiXo0FFQDor6L6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNDhiOTY2NmItMzZjNC0z MTdiLWJhYzYtZmNlMGM1MWM3YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4 ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtEObx7xCuQ296DRRfXmP0LQAnQHZP9s7ZGUyWzqF5wujIu/BzG+OZF 30TK6Lt0tI/OTOHLR35pZaRedwekcOqLgTGxf2lfEjBk35c843mey7kga/jT1ZIm f4bc6DuwfnqWFkta9bKBCzhylixxqCAEEf6zavX9lU8ZxOpvctb0b4uiRNy8DzJZ ylkcoI6V2/7pHWZUoP3brVrYifbBvCdaj+XUKIeQe0lcVjURIIbeJO5qWhTEkby4 Ed3LRL/VVP/HLEC334+B92q1e3yLTLZbvKmGoYG34HErsF8ujMMkT5dTpYdKL6AE t9LWYaB7VzhKHhv2UDgi2pLCDt/0XRQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:40:01 2025 by rpki-client