$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa File: afaa99ac-9444-373b-8b95-8e74320c2b99.roa (raw, json) Hash identifier: ccMSOrWIgJ6g3jBkpJIgaXVPMj98aA4/gjvjSN73L/o= Subject key identifier: 32:2F:74:EA:69:B0:A5:0A:CE:4C:59:5A:57:AC:C2:5E:8F:DE:79:19 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F432858496A19BAAB23498A0B8A071880 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 54113 IP address blocks: 167.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ba:ab:23:49:8a:0b:8a:07:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=8bda1178-7b95-4dce-89e3-59c38bcbbd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:8b:a3:6f:7e:78:5f:43:4d:92:8a:18:b2: 8a:85:e3:7e:c0:6d:a9:a6:af:8d:1f:42:b2:12:64: 6c:a5:f0:e5:b2:df:a6:48:c3:d5:a0:bd:af:11:6a: d3:71:9d:0a:c1:5b:44:9b:92:78:cb:eb:d5:63:10: 79:26:11:a8:17:91:b0:82:52:6e:69:f1:48:b9:eb: 69:00:de:e4:e1:21:26:e1:bb:77:43:ff:4e:ab:1f: 47:88:af:8a:cc:da:a9:ca:4c:81:93:b9:9a:ad:b7: 2f:fe:5a:52:cf:01:26:1a:52:55:f5:b4:ff:93:36: d3:59:72:3b:a5:77:dc:bd:6a:36:16:eb:97:6a:54: 0d:86:60:b3:44:6d:71:fc:01:cd:17:b5:3e:1d:9f: e3:40:46:8a:79:33:1b:60:de:b3:e6:71:fe:22:8f: f8:f9:5f:a4:a5:86:cc:12:27:9c:b9:43:ff:95:f4: 2f:ab:98:b2:84:e5:b5:73:92:4f:88:08:06:54:af: e3:e6:f8:b2:8a:aa:f7:08:e2:61:14:4b:22:26:b7: 66:13:30:e4:33:0a:87:3c:fe:f6:9a:a1:30:fb:af: a4:fa:50:f6:31:b6:b4:d0:48:a3:67:84:a1:7d:7c: cd:42:06:1e:de:4e:52:11:61:25:cd:fa:3b:f7:5e: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:74:EA:69:B0:A5:0A:CE:4C:59:5A:57:AC:C2:5E:8F:DE:79:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 167.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3f:6c:65:dd:4e:78:e9:60:3d:00:08:41:c4:e7:96:23:11: 24:97:9f:20:87:e0:0e:c7:36:c8:ca:2d:40:cb:c4:d7:9a:25: 20:12:85:55:e0:c0:25:76:5d:46:33:0a:09:18:ec:4e:d9:d2: a3:6a:0c:9d:1c:45:2e:f0:a3:05:60:f1:34:67:fb:3c:a8:3f: 98:d9:17:3b:0c:3d:e8:e4:5c:96:cd:13:ec:bd:60:ef:7f:8b: 55:87:a8:cb:73:81:d0:9d:32:d2:03:18:c1:03:d3:e4:59:82: 72:61:0b:e7:7c:19:75:ee:d8:18:3a:d6:91:f6:80:dc:02:dd: e9:1a:78:a1:b9:c0:8d:86:1c:d0:2b:3a:ed:8c:7b:5a:d2:c4: 1d:ed:7b:5b:da:09:72:e1:e2:89:7d:f0:6a:ef:f7:3e:7e:3e: 73:b5:93:23:7c:3e:59:ee:f2:55:db:62:b0:12:e6:b6:cc:91: 33:83:85:44:e4:9c:f7:6e:9f:62:05:dd:42:69:42:60:99:e6: 23:69:7c:39:d8:1f:56:f1:10:18:1d:3c:e2:00:b4:c6:4a:b4: 84:a7:d5:9e:a1:4e:4c:2d:c3:56:e9:d1:78:16:27:69:0d:83: 03:c5:f9:cc:ce:22:b8:30:62:e3:2d:11:2d:64:99:68:77:b0: b4:0a:f8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbqrI0mKC4oHGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk OGJkYTExNzgtN2I5NS00ZGNlLTg5ZTMtNTljMzhiY2JiZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvWLo29+eF9DTZKKGLKKheN+wG2ppq+NH0Ky EmRspfDlst+mSMPVoL2vEWrTcZ0KwVtEm5J4y+vVYxB5JhGoF5GwglJuafFIuetp AN7k4SEm4bt3Q/9Oqx9HiK+KzNqpykyBk7marbcv/lpSzwEmGlJV9bT/kzbTWXI7 pXfcvWo2FuuXalQNhmCzRG1x/AHNF7U+HZ/jQEaKeTMbYN6z5nH+Io/4+V+kpYbM EiecuUP/lfQvq5iyhOW1c5JPiAgGVK/j5viyiqr3COJhFEsiJrdmEzDkMwqHPP72 mqEw+6+k+lD2Mba00EijZ4ShfXzNQgYe3k5SEWElzfo7914idQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIvdOppsKUKzkxZWleswl6P3nkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWZhYTk5YWMtOTQ0NC0z NzNiLThiOTUtOGU3NDMyMGMyYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp1IkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM/bGXdTnjpYD0ACEHE55YjESSXnyCH4A7HNsjKLUDLxNeaJSAShVXg wCV2XUYzCgkY7E7Z0qNqDJ0cRS7wowVg8TRn+zyoP5jZFzsMPejkXJbNE+y9YO9/ i1WHqMtzgdCdMtIDGMED0+RZgnJhC+d8GXXu2Bg61pH2gNwC3ekaeKG5wI2GHNAr Ou2Me1rSxB3te1vaCXLh4ol98Grv9z5+PnO1kyN8Plnu8lXbYrAS5rbMkTODhUTk nPdun2IF3UJpQmCZ5iNpfDnYH1bxEBgdPOIAtMZKtISn1Z6hTkwtw1bp0XgWJ2kN gwPF+czOIrgwYuMtES1kmWh3sLQK+Is= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:05 2025 by rpki-client