$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa File: 3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa (raw, json) Hash identifier: OsQ9himQkHDY5NcWEt9t4x2toCqwVVXLBWHKdONhOr4= Subject key identifier: F7:68:F9:DF:E0:3F:41:EF:D3:45:4F:91:58:2C:13:B3:84:7E:36:89 Certificate issuer: /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Certificate serial: 010D0C9F43285848C5822EFA50A87C7E06BD7760 Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 38195 IP address blocks: 162.213.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2e:fa:50:a8:7c:7e:06:bd:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ec67237f-c4df-42ec-8cbc-17e12c3564ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:69:2b:53:f9:2a:60:bf:0d:1d:c6:50:76: a0:62:e7:d7:be:fd:4b:6a:e5:e1:85:6a:a6:1f:7a: 67:13:a4:ab:bc:98:c9:51:07:2a:a7:45:03:c5:f1: 68:c5:a3:37:dd:9a:80:4d:19:5a:12:06:94:5a:45: af:24:31:9e:5e:d6:74:6b:06:b6:bb:15:4a:33:32: 6d:82:3e:16:16:6d:90:1c:f1:30:da:38:58:42:36: 18:df:81:a1:3f:b3:e7:87:53:31:53:6c:d0:21:a7: 68:81:d2:93:bc:5f:9b:a5:90:94:3e:b6:d2:9e:cd: 68:b2:db:cb:dc:24:36:d2:3e:02:12:7f:ce:21:bb: 92:e2:4b:21:e6:34:04:d1:9f:cb:2e:80:78:48:32: 4f:d6:f2:40:e1:4f:45:a7:7f:f9:13:94:e4:d4:21: 37:da:a4:18:bf:9c:8c:fb:74:d3:2d:3b:c7:df:da: a1:86:0a:40:60:58:dd:00:7f:2e:fa:87:92:64:03: 37:4b:52:90:0c:04:d6:ea:08:f8:1e:a5:32:51:5c: f5:6a:b1:1e:80:3d:fc:b6:41:09:65:cb:60:e2:07: cf:db:49:24:1d:39:90:c6:eb:5f:6f:24:3b:69:42: 21:37:fb:7f:0b:03:0b:74:e1:7a:cb:03:41:4c:23: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:68:F9:DF:E0:3F:41:EF:D3:45:4F:91:58:2C:13:B3:84:7E:36:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl X509v3 Authority Key Identifier: keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer sbgp-ipAddrBlock: critical IPv4: 162.213.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5c:e4:b9:a6:a0:b4:8e:4b:7e:8d:2c:c2:27:ee:28:02:29: 7c:0a:0d:9b:76:f1:e2:73:6f:8f:c2:6a:20:47:dc:04:6b:71: ed:f9:0e:0f:8b:c6:20:3e:e9:f1:48:19:08:05:db:8a:ea:ee: 19:d6:8c:29:58:76:6d:20:75:2d:de:96:2c:0d:18:7d:ae:35: 19:e9:db:06:13:c6:64:91:57:fb:50:2d:11:98:4f:2e:c2:59: 22:59:18:68:f5:de:49:cb:ed:eb:e4:5e:88:93:44:14:68:62: 04:b0:c9:31:d4:38:a2:2f:09:c1:6a:de:47:e9:f9:cc:5b:3a: 85:24:8c:d8:01:cb:fe:10:0a:cc:b0:dd:c4:ed:a2:a9:ef:e6: 2a:c5:a3:27:7b:45:58:49:d7:e0:9a:b7:3a:20:7e:13:64:66: ec:a9:45:dd:69:61:14:d1:27:9e:9a:ba:d6:d0:23:0c:c6:65: 3f:a8:94:40:20:3a:0b:f3:f9:c7:db:b1:ae:a1:c7:7d:23:44: 9b:ad:8a:80:68:51:d5:ff:e4:dc:a4:9f:6f:7e:39:00:12:cb: 7c:42:47:f8:5d:b1:de:fa:13:59:b2:6f:ef:56:9c:a3:ef:9e: de:bb:c8:32:15:d0:16:63:d4:39:3b:ef:8b:e8:ea:76:b3:43: 83:53:a0:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi76UKh8fga9d2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi Nzg1MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWM2NzIzN2YtYzRkZi00MmVjLThjYmMtMTdlMTJjMzU2NGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArglpK1P5KmC/DR3GUHagYufXvv1LauXhhWqm H3pnE6SrvJjJUQcqp0UDxfFoxaM33ZqATRlaEgaUWkWvJDGeXtZ0awa2uxVKMzJt gj4WFm2QHPEw2jhYQjYY34GhP7Pnh1MxU2zQIadogdKTvF+bpZCUPrbSns1ostvL 3CQ20j4CEn/OIbuS4ksh5jQE0Z/LLoB4SDJP1vJA4U9Fp3/5E5Tk1CE32qQYv5yM +3TTLTvH39qhhgpAYFjdAH8u+oeSZAM3S1KQDATW6gj4HqUyUVz1arEegD38tkEJ Zctg4gfP20kkHTmQxutfbyQ7aUIhN/t/CwMLdOF6ywNBTCMWEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdo+d/gP0Hv00VPkVgsE7OEfjaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvM2U1MTYxYzctMmE1YS0z MWViLWJmMzctZTYxMjZlNTJjZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw YzU0YmI3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBc5LmmoLSOS36NLMIn7igCKXwKDZt28eJzb4/CaiBH3ARrce35Dg+L xiA+6fFIGQgF24rq7hnWjClYdm0gdS3eliwNGH2uNRnp2wYTxmSRV/tQLRGYTy7C WSJZGGj13knL7evkXoiTRBRoYgSwyTHUOKIvCcFq3kfp+cxbOoUkjNgBy/4QCsyw 3cTtoqnv5irFoyd7RVhJ1+CatzogfhNkZuypRd1pYRTRJ56autbQIwzGZT+olEAg Ogvz+cfbsa6hx30jRJutioBoUdX/5Nykn29+OQASy3xCR/hdsd76E1myb+9WnKPv nt67yDIV0BZj1Dk774vo6nazQ4NToDY= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:57 2025 by rpki-client