$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa File: 6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa (raw, json) Hash identifier: qRX9mPW1uC/wdAMwRQkbmzhWDKEQezSjIVFjypGanJ4= Subject key identifier: 63:CA:3D:43:42:AD:9F:9F:E0:D8:3F:EE:00:DE:AD:2E:90:22:40:28 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F432858498769AB81291285155DA2AC00 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 0 IP address blocks: 104.167.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ab:81:29:12:85:15:5d:a2:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=16a3e8fc-4ead-4e96-85e1-973656a7b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:55:f1:88:24:89:d4:51:1c:0e:76:a3:0d: 92:34:29:de:ec:b9:50:83:ba:ab:08:98:26:cb:95: 35:be:56:cb:2b:96:23:70:e9:cf:5e:0b:da:59:b5: e5:d1:54:e6:9c:a8:26:f7:dc:20:5f:0c:37:45:e7: 11:7f:26:30:fd:f9:f0:c9:82:b1:e8:f0:52:d4:70: 81:63:ee:d9:bf:e1:4a:15:65:7b:99:65:98:36:b7: 08:ef:2e:09:93:21:7c:95:f2:70:0f:9e:01:cd:23: 57:80:76:7e:dc:c8:35:c6:53:c5:f0:05:83:ea:b3: f2:68:c1:dd:89:72:05:66:70:a8:a1:0e:12:82:04: a9:92:f3:c7:6b:1c:22:fc:ef:dd:67:c6:5b:b2:13: 80:70:46:20:14:32:a8:09:4a:de:b6:77:01:ee:22: 33:50:4f:b6:00:71:e9:fd:7d:6a:70:06:ff:0c:2a: c4:24:6f:ed:41:12:14:3b:79:b0:d7:7d:41:75:a5: 5a:7e:b8:88:2e:a8:55:f7:c9:64:b1:52:8d:8f:71: 35:9b:c4:f1:a7:f6:29:f3:cd:c1:09:91:ad:da:7d: 1e:ba:71:c9:9f:78:b6:5a:ea:70:6f:b9:03:b1:5b: ae:6a:54:ea:68:d7:f4:71:e6:06:96:1a:f1:fa:0a: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:3D:43:42:AD:9F:9F:E0:D8:3F:EE:00:DE:AD:2E:90:22:40:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:32:49:8a:4e:9e:e4:a4:0e:d1:f4:07:89:6a:7c:b0:f4:e7: 06:15:18:a8:c2:05:1c:ab:00:f5:6c:8d:04:e0:ec:c0:d5:6a: 51:27:53:92:d5:db:23:a7:5d:26:79:e8:07:de:67:48:64:51: 8d:e6:0b:e5:79:2d:2f:1b:0f:a9:6d:d8:5f:3f:37:b2:2e:3a: 34:1e:09:8e:b9:b3:01:d1:16:aa:19:1e:a3:62:7e:d3:6e:83: 43:2a:2d:b1:84:42:43:44:dc:32:52:64:1f:3b:1b:12:19:7a: 8f:a5:4c:46:84:42:dd:80:8d:9a:b5:a7:97:fb:a5:88:f0:aa: 15:36:db:68:6a:6b:a4:a8:aa:0a:99:aa:fe:df:fb:65:96:be: 83:36:18:fe:37:54:49:a4:2e:5b:c9:80:48:e6:82:73:98:72: 10:18:6b:3f:ef:0b:4f:b8:f0:9e:ab:37:ec:57:b3:fc:b8:63: 8b:66:77:77:8f:5a:95:b5:f3:13:36:6c:57:7c:c6:48:41:d4: 8e:63:b9:e8:40:d0:60:22:ce:58:d0:fb:3c:5c:99:3f:45:f9: 46:d2:66:cd:63:61:7f:1f:8b:0a:2b:48:fb:1c:70:53:70:25: 98:1b:5c:58:5e:11:68:e9:fe:3c:7a:76:9a:fb:9f:23:75:dc: dc:b3:29:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaauBKRKFFV2irAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MTZhM2U4ZmMtNGVhZC00ZTk2LTg1ZTEtOTczNjU2YTdiNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwclV8YgkidRRHA52ow2SNCne7LlQg7qrCJgm y5U1vlbLK5YjcOnPXgvaWbXl0VTmnKgm99wgXww3RecRfyYw/fnwyYKx6PBS1HCB Y+7Zv+FKFWV7mWWYNrcI7y4JkyF8lfJwD54BzSNXgHZ+3Mg1xlPF8AWD6rPyaMHd iXIFZnCooQ4SggSpkvPHaxwi/O/dZ8ZbshOAcEYgFDKoCUretncB7iIzUE+2AHHp /X1qcAb/DCrEJG/tQRIUO3mw131BdaVafriILqhV98lksVKNj3E1m8Txp/Yp883B CZGt2n0eunHJn3i2Wupwb7kDsVuualTqaNf0ceYGlhrx+grE2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPKPUNCrZ+f4Ng/7gDerS6QIkAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvNjk2N2QzZmMtZmQyYS0z NWY5LWIyZDktZGYyZDBjNWM2NmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0ySYpOnuSkDtH0B4lqfLD05wYVGKjCBRyrAPVsjQTg7MDValEnU5LV 2yOnXSZ56AfeZ0hkUY3mC+V5LS8bD6lt2F8/N7IuOjQeCY65swHRFqoZHqNiftNu g0MqLbGEQkNE3DJSZB87GxIZeo+lTEaEQt2AjZq1p5f7pYjwqhU222hqa6SoqgqZ qv7f+2WWvoM2GP43VEmkLlvJgEjmgnOYchAYaz/vC0+48J6rN+xXs/y4Y4tmd3eP WpW18xM2bFd8xkhB1I5juehA0GAizljQ+zxcmT9F+UbSZs1jYX8fiworSPsccFNw JZgbXFheEWjp/jx6dpr7nyN13NyzKa8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:43:01 2025 by rpki-client