$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa File: 6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa (raw, json) Hash identifier: jb3IpxzGVYieqTwmPWVJFPlNqxNWy6oVkAgMmPm+M/E= Subject key identifier: 4D:A7:2E:78:B9:90:48:87:FF:C7:3F:F2:A5:EB:1F:6F:D5:66:51:8B Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F432858499DBF3994D73D9D104B59F700 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 399275 IP address blocks: 167.253.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:39:94:d7:3d:9d:10:4b:59:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=94fa0e4a-fb2f-4695-a21e-6f8e055a1542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:90:31:31:ad:12:24:df:59:8a:15:dc:e3: 74:2d:b6:dd:73:f8:ea:47:52:05:5b:34:ca:ae:0a: 09:5f:dc:63:8b:96:9c:52:71:28:98:dd:ea:cc:13: 15:66:79:d8:79:ea:dd:a5:54:27:05:32:77:ba:d6: cc:9e:03:b0:5f:1c:ad:9d:a0:db:77:75:8c:7d:a1: f2:40:a6:89:73:96:92:47:90:8a:cc:2e:35:52:f4: 70:2a:9d:08:80:86:59:46:75:22:d1:4d:e4:f8:ba: 3a:e0:eb:6b:2b:a6:44:17:e9:32:7f:36:41:a3:3e: 0e:25:23:5a:c7:42:8c:20:0a:8a:2b:fe:e0:da:cb: 19:5a:9e:46:77:14:31:7c:30:37:27:31:28:d7:48: b3:f7:a4:3e:03:47:86:c4:d2:d3:91:5d:f7:86:c0: dd:5a:22:b9:23:2b:42:fc:1d:b4:0c:2c:ea:9c:c8: a8:4e:c9:d6:7f:43:a9:3b:46:85:79:09:8f:39:56: 0b:b2:ee:e3:fa:60:e6:6d:50:7b:c6:a7:15:44:63: 28:68:78:c1:fa:bc:bc:45:83:5e:73:be:a1:21:c6: 52:6f:8e:d0:7e:31:b6:11:64:c7:64:51:c8:c7:2c: f6:93:e5:8d:d0:8a:d9:16:16:61:8d:97:b3:55:ce: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:2E:78:B9:90:48:87:FF:C7:3F:F2:A5:EB:1F:6F:D5:66:51:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6c69a54b-5bb0-3578-95fd-a4172ef59f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:74:73:b8:85:f7:b0:d0:f7:22:0b:9a:2d:11:46:7c:18:37: 34:ba:c7:53:f6:33:54:73:43:94:f9:30:6f:26:a3:cb:85:04: f1:f6:b4:21:b7:09:1c:cd:3a:40:5e:e9:9b:9c:88:df:4b:dd: 06:05:3f:7d:e6:4a:af:5d:fa:30:2d:ec:ec:df:0c:02:a4:03: a7:3a:25:d1:2c:0c:75:d8:c6:eb:f1:d2:46:1e:2d:ea:f8:08: 35:a1:c8:70:58:be:ce:58:80:06:5a:41:a5:44:4a:bd:34:01: de:3a:2f:3b:ca:5b:ac:e5:55:c1:7d:82:93:d5:43:67:c6:d7: 6e:88:87:86:9a:0d:2a:c7:84:9a:34:5c:5d:5c:ec:17:e2:61: d9:36:b6:1b:10:eb:de:7c:f1:34:af:6b:0f:88:0b:86:9d:86: 5b:5b:87:48:05:8f:59:14:9a:4e:da:b7:42:13:6b:d3:54:c9: bc:53:86:ce:ab:f0:5c:e1:38:9c:79:f0:b3:9a:87:e1:ff:39: 52:36:de:0b:19:b9:bc:96:fd:3c:fd:48:56:b6:c3:43:ee:a8: 44:f9:f5:7c:65:6a:b5:93:a9:35:81:c3:23:04:43:82:45:48: b3:ef:d8:b5:8a:66:c3:f9:97:d8:35:53:51:b4:de:67:cc:9f: fe:52:aa:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzmU1z2dEEtZ9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OTRmYTBlNGEtZmIyZi00Njk1LWEyMWUtNmY4ZTA1NWExNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPaQMTGtEiTfWYoV3ON0Lbbdc/jqR1IFWzTK rgoJX9xji5acUnEomN3qzBMVZnnYeerdpVQnBTJ3utbMngOwXxytnaDbd3WMfaHy QKaJc5aSR5CKzC41UvRwKp0IgIZZRnUi0U3k+Lo64OtrK6ZEF+kyfzZBoz4OJSNa x0KMIAqKK/7g2ssZWp5GdxQxfDA3JzEo10iz96Q+A0eGxNLTkV33hsDdWiK5IytC /B20DCzqnMioTsnWf0OpO0aFeQmPOVYLsu7j+mDmbVB7xqcVRGMoaHjB+ry8RYNe c76hIcZSb47QfjG2EWTHZFHIxyz2k+WN0IrZFhZhjZezVc5INwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2nLni5kEiH/8c/8qXrH2/VZlGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvNmM2OWE1NGItNWJiMC0z NTc4LTk1ZmQtYTQxNzJlZjU5ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF0c7iF97DQ9yILmi0RRnwYNzS6x1P2M1RzQ5T5MG8mo8uFBPH2tCG3 CRzNOkBe6ZuciN9L3QYFP33mSq9d+jAt7OzfDAKkA6c6JdEsDHXYxuvx0kYeLer4 CDWhyHBYvs5YgAZaQaVESr00Ad46LzvKW6zlVcF9gpPVQ2fG126Ih4aaDSrHhJo0 XF1c7BfiYdk2thsQ69588TSvaw+IC4adhltbh0gFj1kUmk7at0ITa9NUybxThs6r 8FzhOJx58LOah+H/OVI23gsZubyW/Tz9SFa2w0PuqET59XxlarWTqTWBwyMEQ4JF SLPv2LWKZsP5l9g1U1G03mfMn/5SqoU= -----END CERTIFICATE-----Generated at Sun Apr 27 23:11:59 2025 by rpki-client