$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0473933-e31c-3f3b-9840-a6a7b666d9d0.roa File: a0473933-e31c-3f3b-9840-a6a7b666d9d0.roa (raw, json) Hash identifier: 4+UHA91/gDi2odgvDUmFh2A3IagFXZxyazkLwALm0xs= Subject key identifier: 03:41:72:30:9D:25:CF:A2:9F:16:2A:E5:B7:CC:91:75:EF:8D:F9:D1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584953C41FADBEC257B2C1844600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0473933-e31c-3f3b-9840-a6a7b666d9d0.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 6939 IP address blocks: 170.62.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1f:ad:be:c2:57:b2:c1:84:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=12ee595e-f45b-47d2-919e-aca249a37a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:e3:31:b8:0e:a2:7f:4c:21:78:9c:2e:c9: bc:c9:b3:57:4c:8a:fc:05:91:9a:1d:c2:ab:c3:04: e5:72:a1:d6:e4:12:d5:d8:a1:11:27:f0:37:5c:94: f9:86:35:f1:0e:7a:60:db:fb:25:71:e0:d7:45:ba: 6c:fc:db:46:75:45:62:a3:a6:6e:01:df:c9:ce:ff: ba:06:7b:4c:42:43:1f:d0:e4:00:ae:92:d2:51:49: 9c:c0:f8:61:d2:4c:23:4d:d1:79:2a:26:30:a5:98: f4:f2:35:28:02:0c:ed:20:71:87:8c:1d:a1:9e:36: 23:72:a2:96:00:b5:f0:e2:7d:97:cb:1e:48:3d:45: 72:67:b7:1a:9b:47:7e:ee:2d:63:22:53:31:0c:9c: 48:dd:d3:de:77:c2:8e:c3:73:f1:d1:8b:df:99:ac: f8:bc:8f:e7:f3:c7:56:0b:85:cf:c7:20:25:fa:d6: 30:ea:5d:10:43:92:e8:f3:52:a6:47:6a:e7:a4:d3: 1a:0f:3e:a2:a0:72:a2:5a:be:57:dd:9f:8c:ff:d2: 9c:9a:a5:aa:46:4e:f6:5c:e2:81:b2:b2:41:3d:69: be:b4:ea:91:46:01:d2:24:8c:46:48:36:84:77:10: 9a:f3:5c:15:d5:90:32:29:fd:cc:7a:e9:a8:95:ea: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:41:72:30:9D:25:CF:A2:9F:16:2A:E5:B7:CC:91:75:EF:8D:F9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0473933-e31c-3f3b-9840-a6a7b666d9d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:33:09:23:e9:f1:01:b2:85:c1:25:f2:21:5f:9b:37:05:07: 8c:40:10:53:1c:a8:b4:4f:fe:b6:4a:53:bf:4d:ed:36:75:67: 90:10:ea:b0:9d:7a:69:c5:9a:36:b0:0a:f4:a7:85:47:23:12: 9d:ba:16:f5:23:93:e2:5b:f1:7f:7c:6a:03:7f:9d:89:98:47: 38:06:ff:49:ec:2a:78:eb:2d:8b:55:6c:5e:e2:9e:c2:b4:79: 90:13:09:92:62:f5:16:35:af:d4:5b:d6:b0:af:1b:9a:8a:53: 24:a7:c2:16:7c:28:b1:7e:6d:fe:a7:86:68:4d:11:41:eb:dd: 8f:b8:0c:47:a8:7c:3b:bc:a2:8d:c8:e5:94:8e:9e:fb:a0:2d: 92:c3:4d:7e:a8:93:c4:ed:ec:86:fe:db:fa:45:e3:b8:62:69: cd:a0:25:d5:da:3e:eb:d6:38:72:e1:f7:9b:a8:8a:e5:5c:0b: 64:fa:bb:44:57:7f:18:9c:06:96:c7:3b:5b:de:4e:b0:bc:a2: bb:d4:9b:7f:af:f3:f0:3b:6b:de:f4:2b:35:43:5f:69:ea:f8: d0:da:88:f5:b7:7f:ee:58:18:fc:17:c8:0d:20:48:7f:0d:12: 42:47:73:0b:c0:a8:b9:57:c5:cf:0b:54:6a:13:7f:fc:c2:e5: 07:9a:88:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB+tvsJXssGERgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTJlZTU5NWUtZjQ1Yi00N2QyLTkxOWUtYWNhMjQ5YTM3YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsknjMbgOon9MIXicLsm8ybNXTIr8BZGaHcKr wwTlcqHW5BLV2KERJ/A3XJT5hjXxDnpg2/slceDXRbps/NtGdUVio6ZuAd/Jzv+6 BntMQkMf0OQArpLSUUmcwPhh0kwjTdF5KiYwpZj08jUoAgztIHGHjB2hnjYjcqKW ALXw4n2Xyx5IPUVyZ7cam0d+7i1jIlMxDJxI3dPed8KOw3Px0Yvfmaz4vI/n88dW C4XPxyAl+tYw6l0QQ5Lo81KmR2rnpNMaDz6ioHKiWr5X3Z+M/9KcmqWqRk72XOKB srJBPWm+tOqRRgHSJIxGSDaEdxCa81wV1ZAyKf3MeumolepvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANBcjCdJc+inxYq5bfMkXXvjfnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTA0NzM5MzMtZTMxYy0z ZjNiLTk4NDAtYTZhN2I2NjZkOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQzCSPp8QGyhcEl8iFfmzcFB4xAEFMcqLRP/rZKU79N7TZ1Z5AQ6rCd emnFmjawCvSnhUcjEp26FvUjk+Jb8X98agN/nYmYRzgG/0nsKnjrLYtVbF7insK0 eZATCZJi9RY1r9Rb1rCvG5qKUySnwhZ8KLF+bf6nhmhNEUHr3Y+4DEeofDu8oo3I 5ZSOnvugLZLDTX6ok8Tt7Ib+2/pF47hiac2gJdXaPuvWOHLh95uoiuVcC2T6u0RX fxicBpbHO1veTrC8orvUm3+v8/A7a970KzVDX2nq+NDaiPW3f+5YGPwXyA0gSH8N EkJHcwvAqLlXxc8LVGoTf/zC5QeaiO8= -----END CERTIFICATE-----Generated at Sat Apr 5 02:33:49 2025 by rpki-client