$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa File: 2ec7296e-d780-32a1-af56-003ea6c04f3c.roa (raw, json) Hash identifier: LsfT7UdD11odCNh8S/f0ygwBzRz/O4AUqJzjfqCfUVs= Subject key identifier: 5F:80:85:EC:F0:FF:B8:FF:50:C9:47:11:9E:DD:CC:42:58:07:84:B5 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285848E2D10C566B0BB38A68B71300 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 11537 IP address blocks: 163.253.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0c:56:6b:0b:b3:8a:68:b7:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=19115dd8-1e23-4957-9753-b30ae6e4ebf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:0b:69:c5:15:37:0c:3f:00:a1:ed:43:48: c4:38:1a:93:2d:de:cd:d9:5c:2d:8f:90:bb:ad:65: 6b:91:ed:3a:28:43:ea:3b:bc:0b:bd:f0:fb:7a:f5: 45:4d:85:fb:56:29:ad:3c:25:1a:b6:65:81:11:c9: cc:5a:6f:0c:8e:67:4e:44:20:98:28:2d:06:60:fd: e5:27:09:a5:1d:e9:51:c5:ef:d1:9e:98:71:72:be: c2:26:c7:6f:61:e6:3d:e8:5c:c3:53:95:21:a4:a2: f9:80:9c:81:64:84:7d:bb:fc:38:00:32:3f:4e:9d: f1:75:7f:a9:0c:9a:13:ac:7e:f2:fd:e9:01:c0:85: f3:67:e6:c6:54:b6:8b:8a:04:a5:19:d1:69:c0:f7: f2:8b:c1:4e:63:1e:fa:f7:fa:99:1c:03:01:35:91: fb:a2:ed:fc:af:a0:1c:5e:54:45:57:bb:c8:62:9f: 4a:b1:ab:2b:eb:33:c4:43:c6:9e:65:cf:98:b5:12: 74:21:dc:d5:f1:d9:01:c7:19:ad:26:16:fb:8b:af: 31:4c:30:a4:e2:e0:9c:ae:53:b2:f3:99:84:62:70: 25:c8:e7:37:4f:68:f1:6d:ac:9f:76:3b:d6:ec:98: d8:67:ef:c6:d6:3a:7f:e6:72:40:fd:2c:f8:43:ff: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:85:EC:F0:FF:B8:FF:50:C9:47:11:9E:DD:CC:42:58:07:84:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:21:fe:d9:31:61:04:00:79:d1:3f:f6:c2:1a:1a:26:1c:41: fc:48:ae:72:df:ae:60:b0:b4:7a:4d:3c:2a:03:91:0b:dd:e2: b6:cd:e5:6f:9f:a9:09:c8:a2:12:cd:a2:0f:76:7a:7a:89:7a: 2f:cb:70:b4:09:cb:66:98:cd:e8:23:a6:1b:65:2c:34:1d:d0: bd:29:6e:4a:03:42:22:0c:29:a8:a7:0e:cd:64:76:d6:55:8b: d1:84:81:63:3c:59:d3:d6:d1:dd:70:11:95:02:c0:5c:9a:e2: 08:0f:6a:ea:d4:b7:68:be:68:9d:d9:ae:92:4e:ab:8c:f1:e9: 8f:83:b7:99:33:57:0e:46:1e:2c:7f:ed:60:d6:2a:2b:84:d1: a3:7e:4a:0a:c2:3b:03:13:f8:35:7f:a5:d9:e4:73:0c:c1:73: 23:96:4c:70:df:01:e7:af:0e:aa:d5:fe:b6:e2:5d:cf:f8:6b: 12:48:91:fa:90:85:0b:b8:3b:20:dd:e1:6e:18:b1:ab:ec:c9: 6f:cb:22:0d:a3:b0:12:1d:8b:3a:55:e4:49:0f:00:ca:45:e6: 79:e3:88:49:55:21:58:f4:74:38:f2:0c:cf:63:94:32:04:b2: c2:99:bc:31:52:29:c0:e1:76:45:43:36:2a:44:31:31:43:96: c9:26:40:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QxWawuzimi3EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MTkxMTVkZDgtMWUyMy00OTU3LTk3NTMtYjMwYWU2ZTRlYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAoLacUVNww/AKHtQ0jEOBqTLd7N2Vwtj5C7 rWVrke06KEPqO7wLvfD7evVFTYX7VimtPCUatmWBEcnMWm8MjmdORCCYKC0GYP3l JwmlHelRxe/Rnphxcr7CJsdvYeY96FzDU5UhpKL5gJyBZIR9u/w4ADI/Tp3xdX+p DJoTrH7y/ekBwIXzZ+bGVLaLigSlGdFpwPfyi8FOYx769/qZHAMBNZH7ou38r6Ac XlRFV7vIYp9Ksasr6zPEQ8aeZc+YtRJ0IdzV8dkBxxmtJhb7i68xTDCk4uCcrlOy 85mEYnAlyOc3T2jxbayfdjvW7JjYZ+/G1jp/5nJA/Sz4Q/94oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+Ahezw/7j/UMlHEZ7dzEJYB4S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmVjNzI5NmUtZDc4MC0z MmExLWFmNTYtMDAzZWE2YzA0ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo/0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8h/tkxYQQAedE/9sIaGiYcQfxIrnLfrmCwtHpNPCoDkQvd4rbN5W+f qQnIohLNog92enqJei/LcLQJy2aYzegjphtlLDQd0L0pbkoDQiIMKainDs1kdtZV i9GEgWM8WdPW0d1wEZUCwFya4ggPaurUt2i+aJ3ZrpJOq4zx6Y+Dt5kzVw5GHix/ 7WDWKiuE0aN+SgrCOwMT+DV/pdnkcwzBcyOWTHDfAeevDqrV/rbiXc/4axJIkfqQ hQu4OyDd4W4YsavsyW/LIg2jsBIdizpV5EkPAMpF5nnjiElVIVj0dDjyDM9jlDIE ssKZvDFSKcDhdkVDNipEMTFDlskmQHg= -----END CERTIFICATE-----Generated at Sat Apr 19 16:35:35 2025 by rpki-client