$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa File: 483d1de4-9ec0-336b-a09e-53bda41f9515.roa (raw, json) Hash identifier: HVZxds1jfzVi/+KGdNOX8Q5/SMWaofepKw6g2/FMG/M= Subject key identifier: 7A:56:C3:55:4C:E1:84:5E:40:7C:17:30:B0:05:73:66:D0:79:19:B6 Certificate issuer: /CN=ca63f656-6be5-42a9-ad64-85773747152a Certificate serial: 010D0C9F4328584953C4100D8BCD7E984A6FAEA0 Authority key identifier: B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 14041 IP address blocks: 161.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:10:0d:8b:cd:7e:98:4a:6f:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca63f656-6be5-42a9-ad64-85773747152a Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=b019fb55-f400-4276-99d4-3444a127a7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:81:82:c1:49:2f:b8:5e:34:ca:fe:54:89: 68:b7:61:41:fe:25:59:7b:95:27:0a:8a:40:60:4f: f4:09:39:26:8f:61:70:88:09:66:82:50:00:78:ce: 06:87:60:6c:d9:dc:c7:1c:59:59:2f:f4:2f:b9:0b: 8a:c3:40:ac:f6:03:9e:7c:db:47:65:d6:e0:66:b2: 5f:50:4d:5d:41:c7:50:46:df:68:24:9d:f9:c5:18: 31:53:7a:e7:43:d4:e9:0f:72:3e:1c:a3:01:f5:e5: 42:2b:2f:2b:35:09:2b:8d:44:8f:39:18:65:05:bb: 4c:41:0a:9b:71:96:8f:90:3c:aa:c0:7b:25:c0:a2: da:14:5e:3b:20:1f:06:87:c7:9d:de:de:d7:38:8d: 2e:91:53:60:19:52:85:9d:4e:00:f8:54:c3:6e:00: 62:6a:06:12:7f:55:46:a2:03:69:ae:ba:4f:be:79: 4e:87:06:2a:5b:7b:5b:e8:a3:2b:4f:1a:de:0b:f6: e6:30:76:e4:70:3e:f2:2f:4c:0a:af:d3:2e:3a:f0: b3:96:25:38:b1:39:42:e6:2e:20:fc:86:90:2d:c0: a2:9a:67:1e:0a:fe:bd:28:4f:ce:4f:69:e0:67:77: 34:81:a6:83:8b:f1:80:a7:f6:39:2e:e6:28:4f:96: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:C3:55:4C:E1:84:5E:40:7C:17:30:B0:05:73:66:D0:79:19:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl X509v3 Authority Key Identifier: keyid:B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer sbgp-ipAddrBlock: critical IPv4: 161.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:59:af:5e:f0:4f:3a:88:b5:21:9e:3b:59:0d:f5:88:5a:1a: e5:01:07:09:1a:d5:88:da:4a:8a:46:a8:da:6a:29:b2:ba:56: 14:9b:77:cc:79:65:5b:66:cf:3e:ca:2d:04:06:1c:16:0d:13: eb:63:6d:04:d2:d0:8d:5c:59:a8:07:bd:18:88:50:ea:e8:1b: 60:33:e0:cc:fe:c8:29:09:0e:bc:3e:52:58:c2:3c:ed:f7:d0: d5:15:c3:a7:15:b9:94:f3:11:24:8c:1c:8b:10:d8:c5:34:7a: 6f:d1:c4:cf:15:e0:ed:0a:a1:02:28:29:a8:b1:0c:c7:15:ef: 83:e9:6f:72:4e:ee:8d:2b:6a:ab:b0:b8:a4:78:43:e5:8c:65: 51:c5:97:0d:fb:d1:77:38:ac:10:20:2c:5e:90:f2:9b:c3:b6: 92:51:3b:4a:d4:29:85:6f:b3:e0:63:6e:cd:4e:b5:e5:f9:25: e2:2f:2b:54:e2:6d:90:2b:e8:e3:28:4f:00:15:24:98:50:ec: c2:01:90:38:7b:d1:dd:1b:fe:6f:8c:64:a5:37:f6:7f:29:15: d7:27:14:b9:ef:1f:3f:c5:f5:7b:5f:2c:52:74:7a:5d:fb:64: 67:5e:fd:63:50:80:49:48:1f:f3:bf:69:ba:b4:63:48:5f:67: ef:55:e8:2b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElTxBANi81+mEpvrqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E2M2Y2NTYtNmJlNS00MmE5LWFkNjQtODU3NzM3NDcx NTJhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjAxOWZiNTUtZjQwMC00Mjc2LTk5ZDQtMzQ0NGExMjdhN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wOBgsFJL7heNMr+VIlot2FB/iVZe5UnCopA YE/0CTkmj2FwiAlmglAAeM4Gh2Bs2dzHHFlZL/QvuQuKw0Cs9gOefNtHZdbgZrJf UE1dQcdQRt9oJJ35xRgxU3rnQ9TpD3I+HKMB9eVCKy8rNQkrjUSPORhlBbtMQQqb cZaPkDyqwHslwKLaFF47IB8Gh8ed3t7XOI0ukVNgGVKFnU4A+FTDbgBiagYSf1VG ogNprrpPvnlOhwYqW3tb6KMrTxreC/bmMHbkcD7yL0wKr9MuOvCzliU4sTlC5i4g /IaQLcCimmceCv69KE/OT2ngZ3c0gaaDi/GAp/Y5LuYoT5YT1QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHpWw1VM4YReQHwXMLAFc2bQeRm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTYz ZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3Mzc0NzE1MmEvNDgzZDFkZTQtOWVjMC0z MzZiLWEwOWUtNTNiZGE0MWY5NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E2M2Y2NTYtNmJlNS00MmE5LWFk NjQtODU3NzM3NDcxNTJhL2NhNjNmNjU2LTZiZTUtNDJhOS1hZDY0LTg1NzczNzQ3 MTUyYS5jcmwwHwYDVR0jBBgwFoAUsh/nXonJdkzHOyoUaSlUPCvuJEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTYzZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3 Mzc0NzE1MmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoWIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARVmvXvBPOoi1IZ47WQ31iFoa5QEHCRrViNpKikao2mopsrpWFJt3zHll W2bPPsotBAYcFg0T62NtBNLQjVxZqAe9GIhQ6ugbYDPgzP7IKQkOvD5SWMI87ffQ 1RXDpxW5lPMRJIwcixDYxTR6b9HEzxXg7QqhAigpqLEMxxXvg+lvck7ujStqq7C4 pHhD5YxlUcWXDfvRdzisECAsXpDym8O2klE7StQphW+z4GNuzU615fkl4i8rVOJt kCvo4yhPABUkmFDswgGQOHvR3Rv+b4xkpTf2fykV1ycUue8fP8X1e18sUnR6Xftk Z179Y1CASUgf879purRjSF9n71XoKw== -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:26 2025 by rpki-client