$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa File: 295d7e62-9ba8-30e9-976f-7b86d221816e.roa (raw, json) Hash identifier: Ur0sb3KUXaxScBDzSGcd4mcKCWG+BHBXHXdnivR7dg8= Subject key identifier: 90:8E:78:84:40:7E:63:EB:7F:2A:47:BE:86:0B:69:8B:B9:0A:C0:4C Certificate issuer: /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Certificate serial: 010D0C9F43285848F22C6A0E543237AC5FB0D400 Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 162.219.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6a:0e:54:32:37:ac:5f:b0:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=2ab17ea7-5998-47fb-9066-c3b830f2542e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:a1:50:97:63:d0:f8:dc:68:1a:90:c5:8c: f2:95:44:bf:f6:45:0b:17:03:d8:81:41:a0:a1:77: 6b:0c:de:fc:1b:0b:4e:09:c2:d9:18:d1:a0:f9:dd: f3:bb:9e:5a:f4:26:e1:84:e3:ac:cd:f0:7d:52:61: ba:f7:df:c1:e8:b1:8f:7d:0c:ff:b6:c3:5a:5c:3c: c2:29:f6:b1:1c:85:a7:ec:da:25:ad:7d:f1:fe:8c: 6f:0d:2a:5a:08:57:a9:33:e0:db:d3:45:f7:23:e6: f7:ac:47:9d:5d:e4:82:07:73:a4:64:18:55:f4:a0: 05:ae:4e:68:5b:17:7e:77:af:c4:ac:cb:81:e9:6d: e0:44:e0:d2:ed:f7:3b:d4:f2:eb:0d:af:c3:03:c9: 4e:5e:0c:c9:6f:48:49:e7:a6:dd:2c:1d:b7:21:0e: fe:99:f7:d7:4b:4a:a0:9b:97:f6:2b:5b:75:d2:fa: d8:f3:f4:68:48:f3:fb:82:07:d8:2f:81:c2:85:c6: 47:95:86:82:21:a3:8a:f5:17:6c:66:81:9f:62:06: c0:39:04:06:9b:e6:ee:63:02:3d:47:73:8f:d4:ae: 52:70:2b:39:d8:4b:ef:cc:09:d4:4a:0e:80:73:e0: d8:44:74:9e:e2:f8:c4:a2:d2:4d:05:7b:56:1d:cc: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8E:78:84:40:7E:63:EB:7F:2A:47:BE:86:0B:69:8B:B9:0A:C0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl X509v3 Authority Key Identifier: keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:6d:a9:7e:10:8f:1d:e5:e5:7d:c7:19:5c:a0:ab:7d:be:46: 3c:81:66:2b:05:37:d1:c5:d7:e8:b2:52:aa:bb:5f:6e:d2:87: 63:f7:ef:56:7f:a6:f7:92:6d:e5:f9:93:e1:ae:d2:2b:8f:17: 72:6a:8d:ab:32:9a:c5:58:30:14:97:d7:2b:2f:11:f7:7c:8f: 2f:d1:5d:73:02:6e:6b:f9:d2:14:a4:68:0b:27:00:9c:df:fc: 3d:b3:73:71:1a:9f:97:35:0c:2e:c0:8f:65:53:6c:93:61:f5: 25:b0:40:6e:ef:d3:e0:1f:b3:d4:df:d1:37:f1:83:1b:e9:e2: 74:83:f4:45:7f:a0:f2:1e:4f:4d:f5:11:06:25:4d:56:74:c8: a9:1b:4a:bb:72:ec:c1:2b:f1:b0:3b:cc:13:ec:f8:4f:86:54: f1:6a:43:e3:49:2a:f8:24:d4:be:1e:bb:ff:86:f0:cc:c5:fb: 2d:40:c4:91:c7:0e:93:79:53:8a:cc:f2:90:a3:e4:13:cd:ff: c4:53:95:6c:e4:22:31:b8:87:68:a8:c8:ad:92:cc:05:7b:15: e8:3c:16:cd:62:26:f5:46:92:f8:af:e8:24:08:20:6d:9a:d0: e4:7f:dc:46:b7:70:8d:c4:78:06:89:be:34:28:3b:39:49:7e: 00:e6:0e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGoOVDI3rF+w1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0NzgtOTU4NDljYjc3 ZTVlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MmFiMTdlYTctNTk5OC00N2ZiLTkwNjYtYzNiODMwZjI1NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33qhUJdj0PjcaBqQxYzylUS/9kULFwPYgUGg oXdrDN78GwtOCcLZGNGg+d3zu55a9CbhhOOszfB9UmG699/B6LGPfQz/tsNaXDzC KfaxHIWn7NolrX3x/oxvDSpaCFepM+Db00X3I+b3rEedXeSCB3OkZBhV9KAFrk5o Wxd+d6/ErMuB6W3gRODS7fc71PLrDa/DA8lOXgzJb0hJ56bdLB23IQ7+mffXS0qg m5f2K1t10vrY8/RoSPP7ggfYL4HChcZHlYaCIaOK9RdsZoGfYgbAOQQGm+buYwI9 R3OP1K5ScCs52EvvzAnUSg6Ac+DYRHSe4vjEotJNBXtWHczxFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCOeIRAfmPrfypHvoYLaYu5CsBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNTdm NTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0OWNiNzdlNWUvMjk1ZDdlNjItOWJhOC0z MGU5LTk3NmYtN2I4NmQyMjE4MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0 NzgtOTU4NDljYjc3ZTVlL2E1N2Y1NDNkLTU0ZjctNGRkNi1hNDc4LTk1ODQ5Y2I3 N2U1ZS5jcmwwHwYDVR0jBBgwFoAUzQLYTm7RMgTKPzjYIZZ9u+A0nZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNTdmNTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0 OWNiNzdlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZtqX4Qjx3l5X3HGVygq32+RjyBZisFN9HF1+iyUqq7X27Sh2P371Z/ pveSbeX5k+Gu0iuPF3JqjasymsVYMBSX1ysvEfd8jy/RXXMCbmv50hSkaAsnAJzf /D2zc3Ean5c1DC7Aj2VTbJNh9SWwQG7v0+Afs9Tf0Tfxgxvp4nSD9EV/oPIeT031 EQYlTVZ0yKkbSrty7MEr8bA7zBPs+E+GVPFqQ+NJKvgk1L4eu/+G8MzF+y1AxJHH DpN5U4rM8pCj5BPN/8RTlWzkIjG4h2ioyK2SzAV7Feg8Fs1iJvVGkviv6CQIIG2a 0OR/3Ea3cI3EeAaJvjQoOzlJfgDmDo4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:45 2025 by rpki-client