$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/fea5e7b5-9d32-36d1-ba5c-bf232de03f6d.roa File: fea5e7b5-9d32-36d1-ba5c-bf232de03f6d.roa (raw, json) Hash identifier: mhsZ7KViqrtlzI083w2vWJmLV5HbkkQGRFjuU/QR6ww= Subject key identifier: 16:A9:0B:91:37:FD:F4:7B:D2:D0:94:E6:B9:44:50:7C:D6:9F:C5:34 Certificate issuer: /CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6 Certificate serial: 010D0C9F4328584875F0592E262DA98ADA529FC0 Authority key identifier: 89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/fea5e7b5-9d32-36d1-ba5c-bf232de03f6d.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 7018 IP address blocks: 162.251.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:59:2e:26:2d:a9:8a:da:52:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=89d6a8c1-fa36-4c9c-9b8c-60f575e4e7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:7e:38:6f:fd:b4:12:e2:3f:c7:29:fe:a7: 7b:ed:40:de:c0:43:6c:89:a6:3c:6b:7d:5e:ac:0e: 3a:7b:ce:4b:0c:89:86:5c:7c:f5:ed:ae:6e:fd:a1: 76:0a:83:98:41:b6:33:02:70:19:95:fa:c8:b6:0f: a0:c2:9b:02:cc:35:7d:45:af:c6:0a:c0:66:7f:36: 25:0d:a7:a8:59:ed:b9:ee:85:44:ab:c6:a5:3d:34: 77:e3:10:3c:76:6e:66:31:70:3f:0d:05:22:16:96: 2c:08:bb:36:94:f9:c7:72:ae:b8:29:fa:85:c8:25: dd:9a:db:86:af:c6:ef:d7:67:be:ca:67:6f:e4:a6: 73:4e:d9:b1:1b:be:69:9a:09:e7:08:cf:6f:f5:03: 3a:53:91:28:a5:96:fe:79:6c:8d:a2:c2:e7:fc:41: 00:20:e3:45:41:65:4b:af:95:45:30:0c:bb:f7:08: e7:8e:4b:e3:e9:25:5f:ef:9b:11:dd:18:23:57:8d: 85:29:34:f8:28:77:e1:07:6c:cf:21:30:47:6b:8a: c0:12:64:69:61:fd:84:a7:7f:5b:8f:5f:a6:76:59: 83:5c:b8:70:51:ff:81:51:ab:3b:3b:41:d9:e5:70: 37:ca:40:75:04:13:d9:0b:00:d1:d7:09:11:28:bd: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A9:0B:91:37:FD:F4:7B:D2:D0:94:E6:B9:44:50:7C:D6:9F:C5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/fea5e7b5-9d32-36d1-ba5c-bf232de03f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl X509v3 Authority Key Identifier: keyid:89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer sbgp-ipAddrBlock: critical IPv4: 162.251.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:22:18:6f:28:70:ea:f1:b4:28:bc:4b:1e:fe:e8:31:bb:75: 43:2e:06:67:c5:88:d0:2b:bb:a7:e7:c8:24:b4:9b:c2:cb:97: c8:96:24:9c:cc:12:9a:93:b7:e8:2a:da:c2:16:fb:a1:c5:60: 9b:fe:eb:6f:c8:65:06:60:a9:c3:e7:31:45:e8:f6:29:98:c2: 35:16:3e:19:aa:28:57:a7:46:6b:ba:34:5c:03:a3:42:22:1c: d6:75:f2:37:4a:35:b6:4b:e6:d2:b4:22:8f:4c:1f:50:1a:40: 62:b0:2b:a3:22:f9:00:80:01:61:ed:29:72:01:c2:80:17:f0: 04:e7:79:b4:a8:17:42:38:a9:59:88:b2:84:81:2b:3d:c7:31: 8d:3f:8a:02:0b:69:07:ad:88:07:5b:05:1d:22:a3:16:fe:46: 18:f9:ca:ba:a8:9d:69:92:9e:3a:8c:18:43:fd:1c:02:50:eb: 0b:d5:52:20:04:fc:87:6d:43:9d:c8:ac:73:bd:1a:49:2f:a4: 7b:36:03:7e:80:cd:e1:d1:fb:e6:1a:3a:9c:2b:ca:89:a6:ce: df:e8:b9:32:ec:82:c3:01:5b:9f:19:77:e5:65:3e:05:4a:68: a5:c9:05:7f:aa:35:82:11:b8:44:89:db:fe:8f:91:0a:30:f9: 12:60:4b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FkuJi2pitpSn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI2OTkzZjYtYTYxNi00ZGUxLWIwYTItMWQ5M2ZjMWI5 NmY2MB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk ODlkNmE4YzEtZmEzNi00YzljLTliOGMtNjBmNTc1ZTRlN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkax+OG/9tBLiP8cp/qd77UDewENsiaY8a31e rA46e85LDImGXHz17a5u/aF2CoOYQbYzAnAZlfrItg+gwpsCzDV9Ra/GCsBmfzYl DaeoWe257oVEq8alPTR34xA8dm5mMXA/DQUiFpYsCLs2lPnHcq64KfqFyCXdmtuG r8bv12e+ymdv5KZzTtmxG75pmgnnCM9v9QM6U5EopZb+eWyNosLn/EEAIONFQWVL r5VFMAy79wjnjkvj6SVf75sR3RgjV42FKTT4KHfhB2zPITBHa4rAEmRpYf2Ep39b j1+mdlmDXLhwUf+BUas7O0HZ5XA3ykB1BBPZCwDR1wkRKL3i5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBapC5E3/fR70tCU5rlEUHzWn8U0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MjY5 OTNmNi1hNjE2LTRkZTEtYjBhMi0xZDkzZmMxYjk2ZjYvZmVhNWU3YjUtOWQzMi0z NmQxLWJhNWMtYmYyMzJkZTAzZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDI2OTkzZjYtYTYxNi00ZGUxLWIw YTItMWQ5M2ZjMWI5NmY2LzQyNjk5M2Y2LWE2MTYtNGRlMS1iMGEyLTFkOTNmYzFi OTZmNi5jcmwwHwYDVR0jBBgwFoAUiSVQ0RlaO6tKXuHHIrBsq0do4sowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MjY5OTNmNi1hNjE2LTRkZTEtYjBhMi0xZDkz ZmMxYjk2ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUiGG8ocOrxtCi8Sx7+6DG7dUMuBmfFiNAru6fnyCS0m8LLl8iWJJzM EpqTt+gq2sIW+6HFYJv+62/IZQZgqcPnMUXo9imYwjUWPhmqKFenRmu6NFwDo0Ii HNZ18jdKNbZL5tK0Io9MH1AaQGKwK6Mi+QCAAWHtKXIBwoAX8ATnebSoF0I4qVmI soSBKz3HMY0/igILaQetiAdbBR0ioxb+Rhj5yrqonWmSnjqMGEP9HAJQ6wvVUiAE /IdtQ53IrHO9GkkvpHs2A36AzeHR++YaOpwryommzt/ouTLsgsMBW58Zd+VlPgVK aKXJBX+qNYIRuESJ2/6PkQow+RJgS2Y= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:21 2025 by rpki-client