$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/543cadac-ba66-3f23-9708-c1662122b93f.roa File: 543cadac-ba66-3f23-9708-c1662122b93f.roa (raw, json) Hash identifier: MHiUtOc6A7kABX0OkikXJW6iA3cjKFEUe5u3CC2/Ct0= Subject key identifier: BD:25:25:A5:4B:9F:40:41:33:9A:61:B8:A8:FD:06:C2:97:68:DF:95 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584953C41FEC1618AA4DFAE95480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/543cadac-ba66-3f23-9708-c1662122b93f.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 7029 IP address blocks: 170.62.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1f:ec:16:18:aa:4d:fa:e9:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=0bf2b384-7f8d-4c27-aad5-9c8ee6ac5e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:b9:a2:8d:af:0c:09:81:2d:92:97:f5:e4: 03:2f:06:c5:47:2a:fc:e4:6c:1b:b2:73:e5:0c:d1: 4e:ab:c6:f1:4b:fa:30:9a:6a:d7:23:24:d6:02:16: 8c:7b:32:f2:e8:3c:16:ec:cc:08:78:46:6f:64:28: 92:e2:ee:72:66:e4:6b:db:ef:80:f8:14:24:34:db: f7:01:69:59:80:5f:76:df:b5:cc:0d:2d:ab:7f:07: 04:50:dd:f1:7d:5f:b1:c8:7a:93:50:9d:18:69:7d: 5b:bd:1c:4d:09:97:16:ae:5c:e4:5f:37:83:dd:4a: af:65:f1:63:57:0b:6f:0f:52:c6:00:c5:d3:4e:11: de:cd:3a:5e:ae:f9:60:b0:4c:46:77:4b:90:fe:22: c7:3a:93:06:31:18:bc:73:9a:a8:f2:c2:d0:31:64: 01:54:57:41:b1:64:78:27:00:12:c8:f7:5f:f1:79: 0d:5e:0a:01:c1:70:89:1e:ab:28:5b:68:9a:a9:5a: a7:46:2c:11:af:db:56:88:82:7e:c6:b5:5a:6e:b0: 55:54:16:b7:ae:88:fc:e8:79:cf:53:14:6d:53:4c: 6c:c5:a5:9a:11:e1:14:42:96:b1:09:63:ca:f0:8f: 0d:e1:8f:3b:ef:3d:16:e9:c0:0e:79:eb:6f:e1:7d: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:25:25:A5:4B:9F:40:41:33:9A:61:B8:A8:FD:06:C2:97:68:DF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/543cadac-ba66-3f23-9708-c1662122b93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fb:0d:09:ee:51:bf:81:71:ce:86:3f:be:9f:5c:a8:5e:d1: 44:c6:4c:3f:91:48:0e:d5:6f:bb:a1:70:3a:60:fd:11:32:d0: c4:ad:52:5f:c6:af:e9:f2:33:40:6a:55:22:e3:bf:a2:58:23: aa:2b:d9:bd:d2:be:98:2c:ce:12:ab:8b:c0:99:90:87:29:63: 49:5a:b1:4c:8d:93:53:9f:b3:09:92:1a:31:58:a2:fe:7c:de: 43:18:97:db:bf:b6:2f:06:35:93:72:08:03:0e:05:97:73:09: e8:4b:7c:2a:83:69:fc:d4:4b:ca:06:66:85:03:0a:d6:12:54: 55:fe:15:f5:e4:b2:4c:16:28:32:71:26:15:e9:ec:d2:64:5c: 22:71:e8:88:f8:a6:95:66:0c:58:45:d5:b1:26:a9:7d:eb:fe: cd:12:be:f3:34:0f:29:66:eb:2d:00:37:6d:4f:37:76:5f:95: af:aa:08:5d:31:c0:b5:64:d4:88:5b:e9:50:d8:0f:f4:2d:28: 6b:8f:60:b5:40:13:2c:2a:87:f4:49:62:04:61:0a:4f:6f:f7: 34:87:61:5c:1d:2d:8b:b3:f4:47:1b:48:f6:12:8d:96:6f:8a: 99:ab:68:ce:77:3f:cc:93:52:04:17:8d:c5:c3:a8:4e:a2:6d: 83:3a:e8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB/sFhiqTfrpVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGJmMmIzODQtN2Y4ZC00YzI3LWFhZDUtOWM4ZWU2YWM1ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXy5oo2vDAmBLZKX9eQDLwbFRyr85GwbsnPl DNFOq8bxS/owmmrXIyTWAhaMezLy6DwW7MwIeEZvZCiS4u5yZuRr2++A+BQkNNv3 AWlZgF9237XMDS2rfwcEUN3xfV+xyHqTUJ0YaX1bvRxNCZcWrlzkXzeD3UqvZfFj VwtvD1LGAMXTThHezTpervlgsExGd0uQ/iLHOpMGMRi8c5qo8sLQMWQBVFdBsWR4 JwASyPdf8XkNXgoBwXCJHqsoW2iaqVqnRiwRr9tWiIJ+xrVabrBVVBa3roj86HnP UxRtU0xsxaWaEeEUQpaxCWPK8I8N4Y877z0W6cAOeetv4X2rLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0lJaVLn0BBM5phuKj9BsKXaN+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTQzY2FkYWMtYmE2Ni0z ZjIzLTk3MDgtYzE2NjIxMjJiOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf7DQnuUb+Bcc6GP76fXKhe0UTGTD+RSA7Vb7uhcDpg/REy0MStUl/G r+nyM0BqVSLjv6JYI6or2b3SvpgszhKri8CZkIcpY0lasUyNk1OfswmSGjFYov58 3kMYl9u/ti8GNZNyCAMOBZdzCehLfCqDafzUS8oGZoUDCtYSVFX+FfXkskwWKDJx JhXp7NJkXCJx6Ij4ppVmDFhF1bEmqX3r/s0SvvM0Dylm6y0AN21PN3Zfla+qCF0x wLVk1Ihb6VDYD/QtKGuPYLVAEywqh/RJYgRhCk9v9zSHYVwdLYuz9EcbSPYSjZZv ipmraM53P8yTUgQXjcXDqE6ibYM66K4= -----END CERTIFICATE-----Generated at Sat Apr 5 03:04:19 2025 by rpki-client