$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa File: 3405a899-675d-3694-b986-0720ff81db0e.roa (raw, json) Hash identifier: Kcn0DT7iJLuCaJ/zJ10dT0UGAkmMmgHCG7CoGki4j/A= Subject key identifier: 9C:00:EB:A1:EF:72:D0:8E:EA:39:FE:CD:DD:1F:A1:ED:D6:31:E3:09 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285848E2D10C0ED7542493E9879880 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 11537 IP address blocks: 163.253.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0c:0e:d7:54:24:93:e9:87:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=3a513cb7-4ec4-4550-9d56-da721002e939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:64:19:21:8d:e2:48:13:30:d4:7d:b3:50: e1:91:34:d7:5b:ac:c6:a0:15:61:e1:a6:14:01:21: 46:12:16:1d:5e:0b:20:bd:62:d2:8c:36:be:33:f6: c6:b1:f1:ae:12:8f:fa:11:ac:e7:e1:df:44:1b:64: 12:5a:58:4b:0c:30:44:b3:62:d8:1a:b3:24:b2:b8: 05:32:e0:69:e9:a6:b1:70:e4:99:a4:fe:c9:78:0f: f2:e4:05:4f:cb:4d:2b:14:0e:87:cf:11:68:6d:56: 46:3d:2c:a7:9d:b5:e1:2a:16:e6:31:2c:22:33:8a: dc:47:ec:b7:1e:39:64:36:d1:e4:22:72:dd:0f:df: cd:b2:96:37:e9:61:0b:f0:2c:2a:c5:d5:cc:72:b4: cf:ad:1b:b9:9b:9c:cd:17:d3:05:f4:90:37:bc:74: 20:df:05:61:4b:78:11:01:49:87:8c:70:1d:1b:21: 4b:ae:41:85:82:75:e7:9e:87:b5:f3:11:ff:1d:fa: ff:69:e1:aa:c4:9f:e1:1d:e5:65:16:eb:b2:d2:cc: 49:f2:02:43:b6:a2:89:8b:78:9a:b8:03:63:f7:42: 56:e1:ba:1a:ef:c7:6c:2b:a8:01:db:ad:5d:8c:7d: 1b:fd:c9:1f:ac:7f:ba:65:d2:6d:53:25:28:b5:99: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:00:EB:A1:EF:72:D0:8E:EA:39:FE:CD:DD:1F:A1:ED:D6:31:E3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6c:e9:38:80:99:ac:53:bb:5d:c3:f6:a3:7d:ba:f4:c0:e6: a9:f2:ef:e6:b4:a6:49:92:db:c0:ce:34:6e:57:27:5c:45:c6: 32:c7:8a:c2:e2:7f:56:d4:6f:51:b2:53:5b:aa:0e:4c:45:dd: e7:31:5a:70:99:6d:55:c7:8d:da:cb:77:6a:5f:13:ae:9e:cd: b7:2a:0a:da:2f:68:d1:6b:5c:4a:7a:8e:71:91:c4:92:26:5d: 57:ce:85:be:b2:b3:b1:f5:16:5e:5d:26:69:73:01:a4:8a:b8: 3e:3c:f0:d6:c3:03:4b:74:58:79:d6:d5:ac:7e:b0:4c:f7:67: ee:eb:ff:b9:3c:f3:87:b7:c7:dc:77:ca:fd:b0:fc:79:14:09: dc:56:62:a1:4e:5e:74:0f:50:81:4d:2c:71:e5:34:8b:a0:45: 73:79:98:dc:50:19:78:42:5b:98:3a:87:87:29:69:ba:87:ae: 64:dc:66:eb:03:ab:31:e3:17:32:c4:77:01:9f:b9:13:eb:c2: e5:1a:c2:e9:64:25:f2:e8:0c:95:31:91:d7:f1:c0:ac:4e:04: 50:e7:b1:ea:9f:1e:93:bd:25:3c:86:c4:29:8c:b2:18:1a:79: a3:59:00:a7:e9:b3:ca:da:60:f2:ac:75:95:e9:93:1b:80:e3: ee:5e:5a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QwO11Qkk+mHmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk M2E1MTNjYjctNGVjNC00NTUwLTlkNTYtZGE3MjEwMDJlOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroNkGSGN4kgTMNR9s1DhkTTXW6zGoBVh4aYU ASFGEhYdXgsgvWLSjDa+M/bGsfGuEo/6Eazn4d9EG2QSWlhLDDBEs2LYGrMksrgF MuBp6aaxcOSZpP7JeA/y5AVPy00rFA6HzxFobVZGPSynnbXhKhbmMSwiM4rcR+y3 HjlkNtHkInLdD9/NspY36WEL8CwqxdXMcrTPrRu5m5zNF9MF9JA3vHQg3wVhS3gR AUmHjHAdGyFLrkGFgnXnnoe18xH/Hfr/aeGqxJ/hHeVlFuuy0sxJ8gJDtqKJi3ia uANj90JW4boa78dsK6gB261djH0b/ckfrH+6ZdJtUyUotZk9RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwA66HvctCO6jn+zd0foe3WMeMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMzQwNWE4OTktNjc1ZC0z Njk0LWI5ODYtMDcyMGZmODFkYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhs6TiAmaxTu13D9qN9uvTA5qny7+a0pkmS28DONG5XJ1xFxjLHisLi f1bUb1GyU1uqDkxF3ecxWnCZbVXHjdrLd2pfE66ezbcqCtovaNFrXEp6jnGRxJIm XVfOhb6ys7H1Fl5dJmlzAaSKuD488NbDA0t0WHnW1ax+sEz3Z+7r/7k884e3x9x3 yv2w/HkUCdxWYqFOXnQPUIFNLHHlNIugRXN5mNxQGXhCW5g6h4cpabqHrmTcZusD qzHjFzLEdwGfuRPrwuUawulkJfLoDJUxkdfxwKxOBFDnseqfHpO9JTyGxCmMshga eaNZAKfps8raYPKsdZXpkxuA4+5eWn4= -----END CERTIFICATE-----Generated at Fri Apr 18 01:32:57 2025 by rpki-client