$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/9c38e697-75d3-3b4a-a423-0458a7ea31e7.roa File: 9c38e697-75d3-3b4a-a423-0458a7ea31e7.roa (raw, json) Hash identifier: AFk2oqqTvE2EayGdt+3+sY+aPJKs0XSA4MGOsevFeWs= Subject key identifier: 3C:76:EE:9B:96:3B:80:27:EB:5A:8B:34:7A:B8:9A:5D:9C:C0:89:31 Certificate issuer: /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba Certificate serial: 010D0C9F432858491246BCE0AC93497E1E666940 Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/9c38e697-75d3-3b4a-a423-0458a7ea31e7.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 54004 IP address blocks: 47.19.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bc:e0:ac:93:49:7e:1e:66:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5f1f60c2-deac-4836-a8f7-ebbf1d6894f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:ea:c9:37:56:07:35:59:2f:81:3d:f7:d2: 8f:ca:6b:51:50:c2:c6:55:e2:9f:bd:12:bb:8e:a5: fe:c3:8e:f2:fc:7d:c0:81:6c:7d:8a:e2:58:2b:99: 12:48:e2:47:fa:9d:f8:54:e1:29:71:59:28:0d:e3: 42:d6:9b:8b:b6:49:7d:93:d1:51:95:5c:64:17:41: bc:ce:21:90:43:39:0e:cf:5c:ec:3a:a8:22:1a:e9: df:92:52:30:82:ba:5e:97:4a:29:11:10:ee:be:f2: 88:66:04:06:14:e2:30:bd:30:a4:30:20:2f:d6:7e: 62:1e:2c:e8:22:db:9b:ca:2b:8e:b1:cb:1d:24:04: ff:de:ea:d2:8e:18:1b:62:14:1d:1e:9c:d3:be:e7: d7:cc:32:43:0f:73:91:c7:02:eb:8f:0a:b1:b7:00: 0f:bb:4b:3a:bf:3e:8c:57:a7:09:29:52:a5:94:5e: 1e:d3:3b:e5:38:7f:89:f9:03:2f:4e:db:b1:68:48: e7:bf:4a:4c:4e:47:88:e3:cb:bb:b4:7a:6b:8b:b3: fe:9c:05:14:da:0c:38:b7:02:9f:de:bc:3e:e1:36: ce:4d:f6:a2:08:da:0a:52:07:2a:b1:c1:37:85:66: 8a:a2:79:56:ac:53:da:43:be:cf:5d:c2:31:a5:d7: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:76:EE:9B:96:3B:80:27:EB:5A:8B:34:7A:B8:9A:5D:9C:C0:89:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/9c38e697-75d3-3b4a-a423-0458a7ea31e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl X509v3 Authority Key Identifier: keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer sbgp-ipAddrBlock: critical IPv4: 47.19.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:2c:07:51:be:a8:f9:5e:f8:6e:fe:36:2f:a8:e0:41:9a:d1: 32:38:20:2b:ed:f7:20:31:f0:1d:f1:99:06:6c:8c:b0:33:72: 9a:22:80:e4:92:95:8c:df:41:4b:b5:7b:b5:75:43:1a:f5:f1: 5d:00:17:57:7e:10:dc:ca:ed:2f:7c:56:09:69:f5:7a:49:65: a4:45:47:6d:ea:37:c6:22:10:93:34:8d:07:8e:65:60:3f:1e: 3a:73:2f:44:7d:f1:37:b7:c2:cb:62:78:24:ad:f6:c1:91:07: 4a:f6:a5:5c:4d:a6:ba:03:7b:3b:25:7d:96:c9:12:cb:47:f2: 80:09:9b:77:8d:35:5b:df:b8:a7:4b:c4:bc:29:9c:40:f0:28: 5b:93:ad:dd:a9:73:3c:de:2e:d7:31:d3:6d:fc:d1:48:f2:da: aa:97:71:f8:11:98:92:85:87:e5:40:1f:d6:d2:7f:dc:c0:2a: 25:81:87:e2:f1:80:9d:61:a2:97:41:79:93:bc:bc:1c:f9:68: 33:26:c0:5d:31:df:24:2d:17:dc:c3:85:a7:13:ea:cb:ff:09: 5b:78:40:81:17:b7:13:4f:a8:d9:c7:fd:99:48:9a:4b:5b:59: bc:38:29:cc:00:15:86:c5:cf:bf:cb:40:6b:2d:8d:10:51:cd: eb:0c:37:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrzgrJNJfh5maUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi N2JhMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NWYxZjYwYzItZGVhYy00ODM2LWE4ZjctZWJiZjFkNjg5NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx07qyTdWBzVZL4E999KPymtRUMLGVeKfvRK7 jqX+w47y/H3AgWx9iuJYK5kSSOJH+p34VOEpcVkoDeNC1puLtkl9k9FRlVxkF0G8 ziGQQzkOz1zsOqgiGunfklIwgrpel0opERDuvvKIZgQGFOIwvTCkMCAv1n5iHizo ItubyiuOscsdJAT/3urSjhgbYhQdHpzTvufXzDJDD3ORxwLrjwqxtwAPu0s6vz6M V6cJKVKllF4e0zvlOH+J+QMvTtuxaEjnv0pMTkeI48u7tHpri7P+nAUU2gw4twKf 3rw+4TbOTfaiCNoKUgcqscE3hWaKonlWrFPaQ77PXcIxpddkJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx27puWO4An61qLNHq4ml2cwIkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2 YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvOWMzOGU2OTctNzVkMy0z YjRhLWE0MjMtMDQ1OGE3ZWEzMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1 NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4 YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxPXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQsB1G+qPle+G7+Ni+o4EGa0TI4ICvt9yAx8B3xmQZsjLAzcpoigOSS lYzfQUu1e7V1Qxr18V0AF1d+ENzK7S98Vglp9XpJZaRFR23qN8YiEJM0jQeOZWA/ HjpzL0R98Te3wstieCSt9sGRB0r2pVxNproDezslfZbJEstH8oAJm3eNNVvfuKdL xLwpnEDwKFuTrd2pczzeLtcx02380Ujy2qqXcfgRmJKFh+VAH9bSf9zAKiWBh+Lx gJ1hopdBeZO8vBz5aDMmwF0x3yQtF9zDhacT6sv/CVt4QIEXtxNPqNnH/ZlImktb Wbw4KcwAFYbFz7/LQGstjRBRzesMNzI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:58:04 2025 by rpki-client