$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c296aecb-f798-3a12-84b4-358d8042815a.roa File: c296aecb-f798-3a12-84b4-358d8042815a.roa (raw, json) Hash identifier: 55BdEi01NAplzBabyCRksCRqjTFUp+dbPX50d8yF69A= Subject key identifier: 02:CC:FB:06:0E:A2:E0:82:AC:E8:BD:84:D8:E6:41:60:D1:C2:EF:98 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F43285849287E611DBB7673BD10CCD200 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c296aecb-f798-3a12-84b4-358d8042815a.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 399139 IP address blocks: 63.161.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:61:1d:bb:76:73:bd:10:cc:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=ee7d9904-e219-49ef-9f90-427a5a490edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:9f:32:e7:e4:65:11:c0:98:88:72:f9:06: 99:5f:23:f2:3e:ac:49:2b:c9:e9:4d:b3:cf:04:08: 6f:3c:bb:dc:3c:5b:6c:d6:52:4e:8e:34:93:59:19: 45:e3:16:33:3c:b7:cb:b5:00:c6:0c:d1:45:3b:6b: db:2e:81:90:fe:8b:b4:f9:e5:84:5c:27:56:a3:be: 0c:94:1e:8c:35:49:da:f5:86:a0:d5:d9:c8:2d:56: a0:e7:c8:60:30:0d:d7:92:13:1b:47:11:81:db:6d: 75:54:04:b3:ad:2e:67:4a:82:29:e4:22:2d:b8:53: 55:02:dc:80:90:27:1d:4b:1d:19:36:ef:0e:16:16: 4b:07:af:85:e4:d4:cc:6f:6e:15:10:ca:28:59:62: 71:67:b7:2c:25:41:ef:e4:1d:e1:be:91:30:ab:fd: 2b:6f:57:d1:ef:88:c5:9d:78:d1:43:5f:c3:04:04: d0:32:f0:1c:fc:71:7c:3f:f0:fc:c3:91:fc:f3:92: 1b:e0:e3:06:33:06:de:37:36:56:4b:8d:cf:be:18: b7:c1:75:69:5d:aa:d3:1d:e6:fc:46:ad:09:a7:cf: 2b:06:65:25:1d:a8:c2:75:d4:25:db:db:30:7a:fd: 73:05:39:99:98:68:80:15:19:48:57:33:86:ac:a4: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CC:FB:06:0E:A2:E0:82:AC:E8:BD:84:D8:E6:41:60:D1:C2:EF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c296aecb-f798-3a12-84b4-358d8042815a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bd:3b:a0:e7:57:0d:6f:48:33:75:10:09:71:56:dd:b8:e1: 6c:14:78:b9:55:66:1c:3a:b8:21:df:ba:5e:50:22:ee:3a:d3: 0c:98:a3:37:45:2b:e2:81:ee:67:54:cb:44:c9:37:2c:a6:c1: 2a:2d:d6:55:7a:31:7e:87:14:6e:d4:9d:7d:ed:10:70:78:de: 03:be:06:b2:cf:af:fb:55:19:45:2f:7f:89:bd:03:81:47:eb: 5c:be:97:3d:7a:3e:c9:8c:36:ab:d6:46:77:13:3f:b3:fb:c8: be:34:f0:4e:d7:53:ac:94:4d:50:03:2f:dc:e7:13:6d:c3:cf: fa:fa:d1:bc:8f:ca:6b:4d:5a:af:1b:01:36:c9:b7:3b:5a:a8: 97:a1:65:91:23:c9:27:21:49:d2:e8:21:a9:8c:08:c1:ff:65: 5d:cd:4e:46:2d:ec:2e:9b:f7:1f:1a:16:12:97:4f:76:ca:fb: ec:fa:77:9d:0d:43:ee:0e:bc:d9:53:84:61:23:72:a9:cd:ec: 38:d7:fa:56:d3:b1:f7:5f:e1:63:ed:07:07:7e:f7:19:ce:cd: 4b:73:7d:d5:14:d1:40:72:6c:e2:80:be:73:cf:23:c6:84:8e: 1a:37:89:c2:ae:08:9c:2f:ce:6e:13:92:61:5c:f3:0e:f6:f1: ea:55:86:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmEdu3ZzvRDM0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWU3ZDk5MDQtZTIxOS00OWVmLTlmOTAtNDI3YTVhNDkwZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJGfMufkZRHAmIhy+QaZXyPyPqxJK8npTbPP BAhvPLvcPFts1lJOjjSTWRlF4xYzPLfLtQDGDNFFO2vbLoGQ/ou0+eWEXCdWo74M lB6MNUna9Yag1dnILVag58hgMA3XkhMbRxGB2211VASzrS5nSoIp5CItuFNVAtyA kCcdSx0ZNu8OFhZLB6+F5NTMb24VEMooWWJxZ7csJUHv5B3hvpEwq/0rb1fR74jF nXjRQ1/DBATQMvAc/HF8P/D8w5H885Ib4OMGMwbeNzZWS43Pvhi3wXVpXarTHeb8 Rq0Jp88rBmUlHajCddQl29swev1zBTmZmGiAFRlIVzOGrKRl8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALM+wYOouCCrOi9hNjmQWDRwu+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYzI5NmFlY2ItZjc5OC0z YTEyLTg0YjQtMzU4ZDgwNDI4MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6FrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO9O6DnVw1vSDN1EAlxVt244WwUeLlVZhw6uCHful5QIu460wyYozdF K+KB7mdUy0TJNyymwSot1lV6MX6HFG7UnX3tEHB43gO+BrLPr/tVGUUvf4m9A4FH 61y+lz16PsmMNqvWRncTP7P7yL408E7XU6yUTVADL9znE23Dz/r60byPymtNWq8b ATbJtztaqJehZZEjySchSdLoIamMCMH/ZV3NTkYt7C6b9x8aFhKXT3bK++z6d50N Q+4OvNlThGEjcqnN7DjX+lbTsfdf4WPtBwd+9xnOzUtzfdUU0UBybOKAvnPPI8aE jho3icKuCJwvzm4TkmFc8w728epVhr0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:12 2025 by rpki-client