$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65cd17d0-1751-3c9a-ace9-b85cc4d0b11d.roa File: 65cd17d0-1751-3c9a-ace9-b85cc4d0b11d.roa (raw, json) Hash identifier: 2OxPJiibE9Z4Uh40PmOyxVgrI/CGMzVH/rXAHLFgNLU= Subject key identifier: 0B:84:0B:7B:9B:98:2C:CD:DB:2B:98:23:15:B4:8B:91:00:20:CB:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24D904D32AC64FC4148940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65cd17d0-1751-3c9a-ace9-b85cc4d0b11d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 107.167.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d9:04:d3:2a:c6:4f:c4:14:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=365aa164-6c79-44bc-8afe-ee68a3b45acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:71:26:63:65:d4:81:3a:e1:b2:ac:e5:8e: 9c:b4:b4:8f:6d:6a:3a:39:e1:51:c5:6a:f3:c5:55: c9:2d:5a:00:5f:dd:4b:15:b4:fa:64:99:3d:20:38: 55:51:ee:fb:95:6a:b7:7d:d1:1d:5f:34:da:44:03: 0d:a2:01:99:39:cc:a9:0f:c4:2b:d6:a2:8b:31:82: 49:b0:c2:52:3a:75:e6:df:30:4a:94:61:56:1a:61: 52:8f:24:07:23:ba:a9:ba:b6:0a:9c:a2:49:a0:40: 71:8e:14:1c:d8:0e:cd:5b:96:f5:22:4a:16:ef:28: 43:aa:72:1f:05:4a:3d:88:22:43:49:37:a0:55:81: 7e:13:95:15:86:46:46:6b:63:e5:18:58:f4:56:f4: 9b:f4:8c:5e:78:bb:96:f0:19:d4:35:77:4c:34:d0: 05:6e:28:5e:8a:ed:56:f9:15:2b:02:e5:f5:47:ce: 49:6d:39:f6:09:dc:7d:86:50:0e:9f:92:2e:c9:3f: 3e:0d:9e:07:8d:1e:bf:b3:e4:fd:2f:ff:17:90:e4: 8b:57:e5:d1:cd:ea:c5:5b:02:ba:e4:27:10:1e:90: f4:cb:cb:eb:9b:ec:dd:48:5e:5d:5d:92:5f:9d:f8: 00:7f:8d:68:b7:34:52:d3:99:20:a3:66:9c:1d:0c: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:0B:7B:9B:98:2C:CD:DB:2B:98:23:15:B4:8B:91:00:20:CB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65cd17d0-1751-3c9a-ace9-b85cc4d0b11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:1c:83:ba:a1:b6:d0:2c:cd:d0:25:b7:f4:46:b7:8a:c9:1d: 24:2a:96:e1:c4:e3:14:84:f3:5e:a6:1d:3a:7c:70:63:46:41: 09:b4:4d:66:bf:1d:45:08:05:8d:bf:37:1e:21:5b:c1:cb:30: 11:4a:f8:98:79:0f:fe:9c:34:29:36:b7:df:0f:f0:99:58:89: 1e:48:20:d8:78:10:32:51:c5:7e:ee:83:b6:17:35:61:d1:b7: 70:c9:03:03:24:ff:22:93:32:80:6f:e6:b1:f1:af:30:ea:7f: 7f:b5:b4:73:b1:94:14:5c:c9:60:2a:02:32:e8:c5:77:0d:23: 2d:38:a0:57:25:7b:9c:d2:16:6a:10:d8:ed:75:35:19:03:4d: 97:58:4e:a1:98:f1:fc:09:7c:05:e7:20:be:f6:2d:e1:86:11: a4:d0:57:ab:d4:f4:b3:e8:3e:8a:25:7e:12:46:76:57:a4:55: 18:51:0d:d7:a1:dc:35:7a:2f:2a:1d:5a:f2:67:5b:9c:a5:f3: 51:6b:ca:e0:b5:1a:3e:62:48:10:70:e1:d7:a6:d1:ca:01:6c: f4:8d:ff:ee:19:49:2d:1a:5b:3e:30:e2:82:9a:79:69:4a:32: 17:ca:52:1b:d5:d2:84:e8:82:50:b5:99:21:b5:71:3f:7a:e9: 33:0e:a7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNkE0yrGT8QUiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MzY1YWExNjQtNmM3OS00NGJjLThhZmUtZWU2OGEzYjQ1YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tdxJmNl1IE64bKs5Y6ctLSPbWo6OeFRxWrz xVXJLVoAX91LFbT6ZJk9IDhVUe77lWq3fdEdXzTaRAMNogGZOcypD8Qr1qKLMYJJ sMJSOnXm3zBKlGFWGmFSjyQHI7qpurYKnKJJoEBxjhQc2A7NW5b1IkoW7yhDqnIf BUo9iCJDSTegVYF+E5UVhkZGa2PlGFj0VvSb9IxeeLuW8BnUNXdMNNAFbiheiu1W +RUrAuX1R85JbTn2Cdx9hlAOn5IuyT8+DZ4HjR6/s+T9L/8XkOSLV+XRzerFWwK6 5CcQHpD0y8vrm+zdSF5dXZJfnfgAf41otzRS05kgo2acHQwNDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuEC3ubmCzN2yuYIxW0i5EAIMvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjVjZDE3ZDAtMTc1MS0z YzlhLWFjZTktYjg1Y2M0ZDBiMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6enMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUcg7qhttAszdAlt/RGt4rJHSQqluHE4xSE816mHTp8cGNGQQm0TWa/ HUUIBY2/Nx4hW8HLMBFK+Jh5D/6cNCk2t98P8JlYiR5IINh4EDJRxX7ug7YXNWHR t3DJAwMk/yKTMoBv5rHxrzDqf3+1tHOxlBRcyWAqAjLoxXcNIy04oFcle5zSFmoQ 2O11NRkDTZdYTqGY8fwJfAXnIL72LeGGEaTQV6vU9LPoPoolfhJGdlekVRhRDdeh 3DV6LyodWvJnW5yl81FryuC1Gj5iSBBw4dem0coBbPSN/+4ZSS0aWz4w4oKaeWlK MhfKUhvV0oToglC1mSG1cT966TMOp0k= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:10 2025 by rpki-client