$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa File: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (raw, json) Hash identifier: mDQFhhFX18FF6U7yOyGpK2oyHhuXUINl3FgSPoG7sRQ= Subject key identifier: B7:A7:DA:6D:7D:3A:A4:7F:A6:EA:A9:53:66:9A:98:D5:8E:7F:A0:7B Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584930DE6B8DDB6F0D3199186390 Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 162.218.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6b:8d:db:6f:0d:31:99:18:63:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=a59802b2-4e9c-43dd-9f81-588b4d5bad2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:0b:a7:05:77:0f:7b:cf:36:5c:a7:55:a8: 9a:8f:25:d8:95:f8:22:16:b1:7e:6c:21:e8:37:5d: 43:51:40:7d:8a:c5:c0:db:12:0c:71:9d:d7:fa:f5: 6e:f5:89:49:a7:1f:a1:7d:8f:9a:28:a5:6b:eb:90: d1:98:79:3e:89:29:97:eb:a8:5d:ec:cb:73:35:61: 51:60:f4:6d:a7:55:25:70:f8:4b:13:e1:bd:4f:ac: 9a:ad:b8:54:3a:63:be:85:f8:23:cb:f1:14:1f:c4: ba:d0:85:5f:51:9b:9c:f3:f3:a6:fe:ba:35:20:6d: 7a:54:34:93:cc:a0:79:ef:18:16:62:ae:a1:57:26: e5:c8:9e:bd:9d:25:a3:e1:63:87:00:70:e4:95:7c: 1c:41:39:b2:93:7f:f1:77:2c:77:c3:16:82:c8:8f: 3b:ea:bb:65:bc:92:2e:6d:73:6f:57:6e:dd:aa:c6: 8c:9c:32:24:9f:33:b6:26:57:54:84:41:0b:f9:e8: 07:6d:35:ab:f2:a9:48:d5:f3:fd:b7:24:54:e2:53: 27:ec:72:8d:38:28:23:5c:d3:bd:4a:c1:53:0a:e3: 66:41:f3:5f:da:2b:2b:93:c9:51:16:5a:b6:49:3d: c5:63:35:25:ad:de:65:75:fc:62:c6:72:74:61:7a: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A7:DA:6D:7D:3A:A4:7F:A6:EA:A9:53:66:9A:98:D5:8E:7F:A0:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/74fe514f-f282-3fdf-b82d-5a7c858132a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: 162.218.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e0:c7:bc:44:96:a8:60:b9:a3:4e:88:20:57:6e:c8:93:86: 40:2b:db:4a:66:e7:f9:74:bc:fa:f4:c6:2e:66:82:91:c5:3c: 72:a4:06:9b:6f:d9:03:4d:aa:e4:1a:e1:ca:22:02:4d:68:31: 3c:43:4e:e3:6b:d0:02:23:5e:60:e4:03:39:f2:00:5f:8a:22: 91:ac:3e:8b:38:fc:04:83:d4:b1:ea:b1:7d:a9:f6:01:3a:96: c4:2a:9e:bd:5b:14:66:42:57:f2:31:9d:48:98:7f:4a:68:df: d7:af:68:75:4b:35:10:e4:95:72:3b:93:96:9b:d8:6b:34:36: 57:cc:9f:1f:16:3d:11:55:e5:d6:23:3b:91:69:c7:ea:f8:39: fb:db:5b:74:5a:48:ba:c8:a0:03:4e:3e:19:0a:3b:24:d5:4d: c7:8c:0f:01:a8:3e:b6:e6:06:bb:f3:59:07:12:6d:3f:8c:3e: 64:3c:ce:53:4d:42:b0:f2:76:97:d9:65:7d:bb:91:0d:5a:0e: 77:cf:07:7f:0d:f1:dc:ef:08:27:48:2e:8d:b0:fd:68:18:ce: 3a:b0:cf:ef:cd:e4:aa:91:f1:36:2a:83:53:05:55:0f:c6:e2: 68:6b:3b:58:cb:c3:0b:11:a1:a4:9f:ad:a8:19:2b:23:bd:1f: 8d:3e:7b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3muN228NMZkYY5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YTU5ODAyYjItNGU5Yy00M2RkLTlmODEtNTg4YjRkNWJhZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q4LpwV3D3vPNlynVaiajyXYlfgiFrF+bCHo N11DUUB9isXA2xIMcZ3X+vVu9YlJpx+hfY+aKKVr65DRmHk+iSmX66hd7MtzNWFR YPRtp1UlcPhLE+G9T6yarbhUOmO+hfgjy/EUH8S60IVfUZuc8/Om/ro1IG16VDST zKB57xgWYq6hVyblyJ69nSWj4WOHAHDklXwcQTmyk3/xdyx3wxaCyI876rtlvJIu bXNvV27dqsaMnDIknzO2JldUhEEL+egHbTWr8qlI1fP9tyRU4lMn7HKNOCgjXNO9 SsFTCuNmQfNf2isrk8lRFlq2ST3FYzUlrd5ldfxixnJ0YXpkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLen2m19OqR/puqpU2aamNWOf6B7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvNzRmZTUxNGYtZjI4Mi0z ZmRmLWI4MmQtNWE3Yzg1ODEzMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrgx7xElqhguaNOiCBXbsiThkAr20pm5/l0vPr0xi5mgpHFPHKkBptv 2QNNquQa4coiAk1oMTxDTuNr0AIjXmDkAznyAF+KIpGsPos4/ASD1LHqsX2p9gE6 lsQqnr1bFGZCV/IxnUiYf0po39evaHVLNRDklXI7k5ab2Gs0NlfMnx8WPRFV5dYj O5Fpx+r4OfvbW3RaSLrIoANOPhkKOyTVTceMDwGoPrbmBrvzWQcSbT+MPmQ8zlNN QrDydpfZZX27kQ1aDnfPB38N8dzvCCdILo2w/WgYzjqwz+/N5KqR8TYqg1MFVQ/G 4mhrO1jLwwsRoaSfragZKyO9H40+e9I= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:52 2025 by rpki-client