$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c898db3e-e42a-3e94-ab70-1d3fe27579e0.roa File: c898db3e-e42a-3e94-ab70-1d3fe27579e0.roa (raw, json) Hash identifier: SKzhj1qoWlZvmEG9YYs112+b8exWXD+dAs6HffucH98= Subject key identifier: 86:5D:03:F8:CF:C3:64:95:6A:31:2E:46:8B:4C:2B:3B:43:15:1E:BA Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858488DAB3E03DEE938776EB7DEC0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c898db3e-e42a-3e94-ab70-1d3fe27579e0.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 162.250.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:3e:03:de:e9:38:77:6e:b7:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=0b068eb9-c9ff-4194-b161-3a8eacbe48b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:5f:82:62:c2:b5:3a:06:3b:d5:e0:75:05: f5:ac:01:f7:dd:7c:b5:f5:b9:9b:56:4f:52:2c:f5: 04:61:7a:fb:3b:65:71:4d:70:fd:78:53:1b:82:1c: 89:f9:bc:ac:1f:a1:8e:d0:43:9f:c2:21:a5:e9:88: 81:a0:7a:ef:7b:6d:a2:15:ee:a7:ef:73:ee:ae:bc: 1e:9a:08:61:ec:14:61:72:b2:6e:21:3f:7b:9c:e2: 72:aa:f0:3b:d9:57:6c:9f:04:1f:f1:29:d3:5c:1a: a3:87:c0:db:87:33:df:48:0b:9c:3b:5c:b3:68:ea: 20:51:16:18:6b:6f:25:73:28:49:37:a7:7b:6a:24: 34:4b:2f:51:b1:5c:a1:4e:1f:5d:e1:1f:1c:86:48: 13:4d:0d:10:82:4c:3d:a9:b6:17:e8:02:c2:4c:9d: 01:80:29:76:ba:96:71:24:e2:6d:d9:8c:d8:8d:8e: e5:f6:31:41:84:e7:ae:5b:a9:4a:70:55:78:96:a8: 51:09:ea:3d:4c:bd:f9:0a:fe:03:43:94:56:ab:08: c8:57:33:08:73:c9:e9:02:da:ee:cf:f2:77:bb:a8: 81:a1:a8:98:75:a5:4f:1b:0e:e2:4e:60:b4:16:0b: 8e:ea:77:0a:f1:31:51:dc:3a:50:b7:7a:62:21:fd: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:03:F8:CF:C3:64:95:6A:31:2E:46:8B:4C:2B:3B:43:15:1E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c898db3e-e42a-3e94-ab70-1d3fe27579e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 162.250.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:53:ad:4a:a5:e2:87:a6:3b:e6:b1:13:a2:72:60:c5:55:cf: c1:6f:5f:69:5a:e7:a3:3f:63:3e:bf:81:d6:27:4e:a6:89:f9: 15:ed:fb:43:aa:a1:e7:88:ec:e0:ac:7f:b3:91:e3:f9:4c:1f: ff:b4:ef:8e:c0:14:5c:03:a3:e0:ec:41:18:db:24:46:4e:8e: d4:c0:f1:8f:b2:bb:d3:33:8f:f8:0f:43:1a:93:44:47:2d:9e: 0f:f8:8f:11:2b:b1:f7:c8:84:8c:1f:04:09:23:db:14:f0:a7: 83:79:d2:27:c9:ce:0a:06:28:9a:57:66:18:0b:24:c5:bb:cd: 7e:3e:64:d5:6a:1a:a0:3d:75:57:05:50:e6:10:8e:f7:5c:13: 16:b0:18:8e:72:3a:b8:1b:9c:1c:40:b6:42:11:88:61:e4:99: a8:67:ff:7c:eb:81:c0:01:4e:09:21:23:fc:15:08:ff:4e:13: 11:f2:62:54:fe:32:f9:2c:52:94:a0:44:08:33:27:92:a3:bf: 56:a2:78:f1:5c:8e:df:20:f8:a9:12:bc:d5:f6:77:9d:5d:91: 6f:07:a7:bf:3e:48:6d:30:a2:4e:0d:91:7c:00:f9:fe:44:eb: da:35:ea:7c:f5:b1:6d:a2:3d:08:08:b2:95:e9:d3:ca:2d:61: 17:0d:f1:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNqz4D3uk4d2633sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MGIwNjhlYjktYzlmZi00MTk0LWIxNjEtM2E4ZWFjYmU0OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu91fgmLCtToGO9XgdQX1rAH33Xy19bmbVk9S LPUEYXr7O2VxTXD9eFMbghyJ+bysH6GO0EOfwiGl6YiBoHrve22iFe6n73Purrwe mghh7BRhcrJuIT97nOJyqvA72VdsnwQf8SnTXBqjh8DbhzPfSAucO1yzaOogURYY a28lcyhJN6d7aiQ0Sy9RsVyhTh9d4R8chkgTTQ0Qgkw9qbYX6ALCTJ0BgCl2upZx JOJt2YzYjY7l9jFBhOeuW6lKcFV4lqhRCeo9TL35Cv4DQ5RWqwjIVzMIc8npAtru z/J3u6iBoaiYdaVPGw7iTmC0FguO6ncK8TFR3DpQt3piIf06aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZdA/jPw2SVajEuRotMKztDFR66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzg5OGRiM2UtZTQyYS0z ZTk0LWFiNzAtMWQzZmUyNzU3OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovo9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlTrUql4oemO+axE6JyYMVVz8FvX2la56M/Yz6/gdYnTqaJ+RXt+0Oq oeeI7OCsf7OR4/lMH/+0747AFFwDo+DsQRjbJEZOjtTA8Y+yu9Mzj/gPQxqTREct ng/4jxErsffIhIwfBAkj2xTwp4N50ifJzgoGKJpXZhgLJMW7zX4+ZNVqGqA9dVcF UOYQjvdcExawGI5yOrgbnBxAtkIRiGHkmahn/3zrgcABTgkhI/wVCP9OExHyYlT+ MvksUpSgRAgzJ5Kjv1aiePFcjt8g+KkSvNX2d51dkW8Hp78+SG0wok4NkXwA+f5E 69o16nz1sW2iPQgIspXp08otYRcN8Sk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:08 2025 by rpki-client