$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa File: dda697e5-795b-3c5b-960b-01f1086c0e4f.roa (raw, json) Hash identifier: 0PXdiw4lFLuZXInorCKoJ1i7LOloOnd6k/7EebXXBZ0= Subject key identifier: A6:46:82:13:2B:84:08:06:1D:6B:0B:50:48:90:B3:CE:77:5B:68:02 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849C20A0DA3AD231EAC643DF660 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11537 IP address blocks: 163.253.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:0d:a3:ad:23:1e:ac:64:3d:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=519d3c5d-019f-483f-8e31-11bf3fd0eb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:01:6f:a6:6b:32:3d:a6:5e:fa:cb:e6:e2: fb:7e:a0:76:b6:44:d9:96:d0:ed:b5:52:f1:b3:08: 97:39:dc:eb:d7:4b:f4:3c:32:7c:37:17:c3:5a:a0: 90:fd:88:aa:83:2f:fb:2f:7a:36:c8:d0:06:20:4f: 2e:ad:37:bd:8c:f6:1a:b2:fc:6e:fc:42:33:05:0f: 73:35:82:b7:9a:d1:b9:01:90:9f:86:1e:89:d3:de: 26:46:be:39:6e:7c:fd:9d:59:f3:48:82:dc:ca:b7: f2:81:1d:ed:23:e4:d1:ca:29:7e:38:c0:a9:2d:1c: 78:7f:9c:23:3f:af:5e:62:fb:86:af:9b:e4:fd:ea: cd:e8:7b:c1:20:72:0b:96:f5:91:cf:43:20:77:ca: 15:2a:44:05:3e:4f:fe:91:1d:3e:85:92:7e:4c:ed: 46:45:11:63:3b:b3:05:c3:1d:6c:de:77:df:bf:4b: af:c0:28:93:a9:36:a7:0a:a5:ea:2a:dd:ed:39:47: de:f7:e4:78:1f:c6:19:4a:ae:5d:77:f4:80:6d:b6: 31:17:5c:52:34:7c:a3:19:73:71:82:55:45:25:fa: ba:90:d4:fe:d0:62:e5:2b:a3:fd:3d:98:41:b7:46: 70:22:a7:4d:5b:3a:6e:53:65:12:52:5b:a5:97:03: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:82:13:2B:84:08:06:1D:6B:0B:50:48:90:B3:CE:77:5B:68:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:11:b3:f1:1f:63:5c:e0:cd:85:06:4d:e8:0e:f6:88:68:40: 60:18:8a:4a:94:6b:f3:9d:27:bc:77:e6:f6:b6:7c:2d:a8:d9: 4b:ef:b8:91:0b:60:c5:52:e3:9f:b0:c0:5e:71:f2:f1:71:af: ab:f8:c1:d3:d0:80:50:85:08:ec:13:7f:10:ae:b8:cd:75:7a: 0e:80:3a:7b:04:8a:63:6a:f0:81:e8:b2:28:be:0e:d6:36:21: 19:4d:bc:6c:9f:2d:ad:32:25:e5:9f:fb:9b:86:cc:b6:6a:e9: 94:96:fa:b7:cf:f1:25:e9:25:18:a4:c6:af:87:8f:13:a5:8b: 76:82:fb:60:f9:d3:e9:8d:a8:8e:b1:81:c2:60:29:b6:69:44: c3:0a:c2:92:eb:a2:ae:88:7b:68:1a:22:7b:53:ae:6c:2c:de: 91:2f:4e:75:de:a9:41:b4:79:aa:cf:fd:38:8b:34:d2:ad:4c: b2:f4:81:24:c4:ce:f0:a3:e5:97:c8:81:5d:45:2f:9f:b2:84: b5:67:44:64:c1:eb:53:40:2d:2e:c7:88:26:e9:72:68:bd:bf: 86:0b:08:87:be:61:88:05:81:b5:94:47:50:07:cb:e9:31:ed: 79:ee:ab:e2:23:c2:fa:e1:70:c8:c9:57:d5:51:29:81:fb:35: 6d:5a:dc:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCg2jrSMerGQ99mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NTE5ZDNjNWQtMDE5Zi00ODNmLThlMzEtMTFiZjNmZDBlYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAgBb6ZrMj2mXvrL5uL7fqB2tkTZltDttVLx swiXOdzr10v0PDJ8NxfDWqCQ/Yiqgy/7L3o2yNAGIE8urTe9jPYasvxu/EIzBQ9z NYK3mtG5AZCfhh6J094mRr45bnz9nVnzSILcyrfygR3tI+TRyil+OMCpLRx4f5wj P69eYvuGr5vk/erN6HvBIHILlvWRz0Mgd8oVKkQFPk/+kR0+hZJ+TO1GRRFjO7MF wx1s3nffv0uvwCiTqTanCqXqKt3tOUfe9+R4H8YZSq5dd/SAbbYxF1xSNHyjGXNx glVFJfq6kNT+0GLlK6P9PZhBt0ZwIqdNWzpuU2USUlullwON6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZGghMrhAgGHWsLUEiQs853W2gCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGRhNjk3ZTUtNzk1Yi0z YzViLTk2MGItMDFmMTA4NmMwZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIRs/EfY1zgzYUGTegO9ohoQGAYikqUa/OdJ7x35va2fC2o2UvvuJEL YMVS45+wwF5x8vFxr6v4wdPQgFCFCOwTfxCuuM11eg6AOnsEimNq8IHosii+DtY2 IRlNvGyfLa0yJeWf+5uGzLZq6ZSW+rfP8SXpJRikxq+HjxOli3aC+2D50+mNqI6x gcJgKbZpRMMKwpLroq6Ie2gaIntTrmws3pEvTnXeqUG0earP/TiLNNKtTLL0gSTE zvCj5ZfIgV1FL5+yhLVnRGTB61NALS7HiCbpcmi9v4YLCIe+YYgFgbWUR1AHy+kx 7Xnuq+IjwvrhcMjJV9VRKYH7NW1a3Dg= -----END CERTIFICATE-----Generated at Sun Jun 8 00:37:09 2025 by rpki-client