$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa File: 0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa (raw, json) Hash identifier: Kmd4E4o1KN+UkVwHsay942MjMAVR+6CkwQWWul1d89Q= Subject key identifier: D6:C8:EF:46:28:E5:E6:C1:00:F4:5B:B5:97:A6:6B:01:47:22:74:9A Certificate issuer: /CN=801cf9d8-8773-413d-855b-20e5fb7f350d Certificate serial: 010D0C9F432858498CFF1154D5F9016E27CB9500 Authority key identifier: 3B:14:4E:C7:E3:61:F3:86:50:6B:5F:C7:8F:13:9E:48:5A:07:49:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 53925 IP address blocks: 67.159.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:11:54:d5:f9:01:6e:27:cb:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=801cf9d8-8773-413d-855b-20e5fb7f350d Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=f8a41efc-5e53-4a98-9f38-d85a45f6d1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:47:03:be:d3:26:e5:27:35:ab:c9:af:86: 91:ef:38:36:fc:2d:a1:b9:36:2c:82:bd:8c:33:71: 71:49:bf:8f:e7:1f:b7:d8:73:e7:0b:2e:73:7c:0c: 42:de:e4:9e:98:d2:6c:6e:8a:bb:32:80:d4:40:14: d2:15:0f:53:2a:41:3e:e8:c3:4b:33:24:0c:f1:9c: c7:73:c1:f5:7a:20:05:46:e8:42:20:4a:07:ef:67: 5c:da:b6:cc:ec:de:28:18:41:8b:68:b1:55:54:ee: 02:1f:b3:e7:e9:39:d8:7e:b5:10:2a:98:a8:75:0a: fb:f2:f6:04:a8:be:fc:51:83:96:30:ce:42:52:3d: f6:61:1b:70:50:06:86:04:91:9b:e2:25:1e:00:e0: ea:c6:1e:24:02:27:e3:7a:86:5e:6c:a6:df:7c:2a: 1c:48:22:31:9d:73:8a:3b:f9:09:a2:fe:58:93:af: 33:4b:05:68:63:7a:28:7a:e3:be:f2:b5:1f:69:de: 63:11:42:05:68:c8:b2:9b:59:06:1d:79:c5:dc:51: 8e:4c:6e:4b:3a:32:e8:fa:21:f5:af:82:b7:e1:e2: 0a:54:02:ec:db:f5:a2:f8:47:19:7e:39:16:29:f1: 6f:24:fb:e3:34:6a:98:38:09:30:bb:d8:16:a0:24: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:EF:46:28:E5:E6:C1:00:F4:5B:B5:97:A6:6B:01:47:22:74:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.crl X509v3 Authority Key Identifier: keyid:3B:14:4E:C7:E3:61:F3:86:50:6B:5F:C7:8F:13:9E:48:5A:07:49:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer sbgp-ipAddrBlock: critical IPv4: 67.159.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:0d:4a:51:93:ba:78:aa:48:94:f8:c7:6f:0a:f0:57:a3:ec: 24:c2:86:c6:12:91:c4:e0:c4:42:4b:ac:8d:06:3f:cc:4e:22: 61:d3:e2:32:af:06:80:f8:43:90:28:6f:bc:ac:30:5e:df:2b: 7c:94:c0:92:ce:b2:07:dd:b5:3b:af:ee:8c:21:0c:72:32:86: 82:8e:9b:74:7e:e2:92:06:c9:c6:1a:4f:c3:b3:23:01:96:a7: 7a:94:02:bf:c6:59:a4:18:7d:53:17:ec:0f:06:00:db:1c:07: 9c:05:91:cf:97:29:8b:77:05:4e:99:43:c2:d7:e0:c7:31:f0: 0a:4a:f6:d1:3a:df:ce:20:87:c8:da:1d:59:99:0e:26:99:7a: 0b:0f:88:7b:4c:07:47:74:25:5f:e8:16:f7:2f:4d:ad:2a:fd: b8:1a:68:ed:22:08:8e:98:ab:76:68:a0:38:6c:d7:5e:c5:c0: 0a:ef:0a:bb:85:89:0d:42:8b:dc:01:5d:5f:df:c6:5d:4e:60: 83:bc:9c:6b:69:c1:7e:48:18:b9:dd:72:37:7f:e6:5a:5f:0a: 92:4c:2c:4b:68:3c:81:5f:f4:69:1b:d8:f2:0a:e6:5a:9e:62: 07:3e:96:a2:3e:e4:57:9c:d3:32:63:b9:65:33:e8:a0:a3:3c: 8e:f3:d3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xFU1fkBbifLlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAxY2Y5ZDgtODc3My00MTNkLTg1NWItMjBlNWZiN2Yz NTBkMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZjhhNDFlZmMtNWU1My00YTk4LTlmMzgtZDg1YTQ1ZjZkMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPdHA77TJuUnNavJr4aR7zg2/C2huTYsgr2M M3FxSb+P5x+32HPnCy5zfAxC3uSemNJsboq7MoDUQBTSFQ9TKkE+6MNLMyQM8ZzH c8H1eiAFRuhCIEoH72dc2rbM7N4oGEGLaLFVVO4CH7Pn6TnYfrUQKpiodQr78vYE qL78UYOWMM5CUj32YRtwUAaGBJGb4iUeAODqxh4kAifjeoZebKbffCocSCIxnXOK O/kJov5Yk68zSwVoY3ooeuO+8rUfad5jEUIFaMiym1kGHXnF3FGOTG5LOjLo+iH1 r4K34eIKVALs2/Wi+EcZfjkWKfFvJPvjNGqYOAkwu9gWoCQAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbI70Yo5ebBAPRbtZemawFHInSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDFj ZjlkOC04NzczLTQxM2QtODU1Yi0yMGU1ZmI3ZjM1MGQvMGMwNmY4NGItMDQ5YS0z Y2FiLWFlZjAtNDQwYjNiOGQ4N2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAxY2Y5ZDgtODc3My00MTNkLTg1 NWItMjBlNWZiN2YzNTBkLzgwMWNmOWQ4LTg3NzMtNDEzZC04NTViLTIwZTVmYjdm MzUwZC5jcmwwHwYDVR0jBBgwFoAUOxROx+Nh84ZQa1/HjxOeSFoHSbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDFjZjlkOC04NzczLTQxM2QtODU1Yi0yMGU1 ZmI3ZjM1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkNSlGTuniqSJT4x28K8Fej7CTChsYSkcTgxEJLrI0GP8xOImHT4jKv BoD4Q5Aob7ysMF7fK3yUwJLOsgfdtTuv7owhDHIyhoKOm3R+4pIGycYaT8OzIwGW p3qUAr/GWaQYfVMX7A8GANscB5wFkc+XKYt3BU6ZQ8LX4Mcx8ApK9tE6384gh8ja HVmZDiaZegsPiHtMB0d0JV/oFvcvTa0q/bgaaO0iCI6Yq3ZooDhs117FwArvCruF iQ1Ci9wBXV/fxl1OYIO8nGtpwX5IGLndcjd/5lpfCpJMLEtoPIFf9Gkb2PIK5lqe Ygc+lqI+5Fec0zJjuWUz6KCjPI7z00A= -----END CERTIFICATE-----Generated at Mon Apr 28 16:33:29 2025 by rpki-client