$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa File: 33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa (raw, json) Hash identifier: GvV9AC4AUTzL/hgkxw2N0U9tfgdYGiucQZo5WxXDBIw= Subject key identifier: A4:04:42:87:31:E1:32:3B:B4:AD:1D:07:86:79:C0:C4:CD:CF:2D:3C Certificate issuer: /CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Certificate serial: 010D0C9F4328584913AC1B33147FB4C835851F80 Authority key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 25593 IP address blocks: 162.208.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1b:33:14:7f:b4:c8:35:85:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=536e5073-0078-462e-9919-07a6c8e9badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:80:6a:89:b7:ac:2a:2b:df:09:59:4c:f9: a8:a0:f4:7f:02:19:00:ba:c8:c4:6e:da:3c:b7:bd: 0a:0b:3f:33:78:eb:71:2d:d0:55:a2:a1:6d:73:c2: b4:75:ac:46:35:d2:db:4f:5d:97:ea:23:85:3f:ef: ae:d0:f4:cb:82:78:02:54:7b:5c:cb:f8:21:08:cf: a8:a8:f9:61:78:cc:76:00:3f:e5:6b:17:31:e4:86: 0c:c9:df:d8:e8:35:61:b0:7b:57:1c:3b:f1:b8:25: 7a:91:20:6e:74:6e:d5:8a:3c:1b:02:ff:1d:15:bc: cb:b6:e0:8a:86:95:e4:b2:de:b7:9d:28:e4:be:b2: e2:e7:20:0a:be:54:ae:e8:28:95:04:78:ca:35:61: d8:22:9e:ea:eb:73:22:cb:49:b4:08:a9:12:a5:6a: ab:d7:18:f2:9b:e4:f3:01:31:8e:79:74:8d:70:f1: af:b4:91:64:f9:45:42:6c:bc:0b:ee:35:80:2b:d7: 63:a2:89:d1:d5:87:4b:67:7e:ae:74:9c:19:a4:bf: 00:fd:fd:85:e0:31:3b:02:8e:1a:21:03:e0:ce:0e: 18:60:34:c3:57:f9:39:de:30:f6:d9:43:64:ae:67: d5:90:4d:2b:10:9c:06:f5:e6:7b:c6:e8:fb:55:e4: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:04:42:87:31:E1:32:3B:B4:AD:1D:07:86:79:C0:C4:CD:CF:2D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl X509v3 Authority Key Identifier: keyid:16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer sbgp-ipAddrBlock: critical IPv4: 162.208.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d3:af:e3:00:fd:de:66:78:8f:2c:99:29:54:23:2b:fb:38: 72:1e:2b:44:7b:bb:e9:ac:83:b5:38:f8:a8:f6:e3:a5:d4:3b: 4d:de:44:52:c3:61:f9:0b:7e:ad:7b:13:63:79:83:d0:54:c0: 1f:db:79:3d:30:86:eb:d0:ba:67:f1:ba:a6:d9:6b:ec:c3:3c: 66:b6:aa:4a:56:b8:77:9e:43:08:d7:f8:c0:d3:9f:87:a0:df: 74:35:68:c3:2d:d5:75:e5:c6:04:a3:49:6b:13:9b:91:77:51: 23:55:e4:12:82:54:f2:51:b5:c7:39:fe:81:c9:1b:d4:1e:74: 56:e6:17:49:9a:b3:c6:f4:77:03:0b:03:9a:35:47:f7:d2:0e: 7f:c7:f1:b5:ca:14:0a:69:19:7c:f3:13:64:24:30:c0:7a:5e: ce:73:9c:a5:a4:c1:f2:b1:9d:f3:4e:c6:14:25:24:16:79:85: eb:91:a8:90:5c:a0:c7:a9:7d:8a:5f:54:cf:cc:72:4e:28:27: b5:5f:82:74:36:00:4e:9b:07:b5:73:f8:bd:8c:3c:ca:24:68: 94:dc:48:e6:c7:13:fc:69:6c:a3:ea:82:ca:b2:95:1e:a3:86: af:b1:b9:92:65:83:7d:f2:bf:95:03:e0:41:a3:01:f3:34:df: 09:0f:f5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBszFH+0yDWFH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljNTJmYWItNTliMC00NmY4LTg1MWQtNjY0NGFhZjFl YWE3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTM2ZTUwNzMtMDA3OC00NjJlLTk5MTktMDdhNmM4ZTliYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEyAaom3rCor3wlZTPmooPR/AhkAusjEbto8 t70KCz8zeOtxLdBVoqFtc8K0daxGNdLbT12X6iOFP++u0PTLgngCVHtcy/ghCM+o qPlheMx2AD/laxcx5IYMyd/Y6DVhsHtXHDvxuCV6kSBudG7VijwbAv8dFbzLtuCK hpXkst63nSjkvrLi5yAKvlSu6CiVBHjKNWHYIp7q63Miy0m0CKkSpWqr1xjym+Tz ATGOeXSNcPGvtJFk+UVCbLwL7jWAK9djoonR1YdLZ36udJwZpL8A/f2F4DE7Ao4a IQPgzg4YYDTDV/k53jD22UNkrmfVkE0rEJwG9eZ7xuj7VeS29QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQEQocx4TI7tK0dB4Z5wMTNzy08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1 MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFmMWVhYTcvMzMwMTVmMWEtYWU5Ni0z OGM0LWI3MDItMGYwYjdmYzAyMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjljNTJmYWItNTliMC00NmY4LTg1 MWQtNjY0NGFhZjFlYWE3LzI5YzUyZmFiLTU5YjAtNDZmOC04NTFkLTY2NDRhYWYx ZWFhNy5jcmwwHwYDVR0jBBgwFoAUFpHzdeIouJ10XDVbqRIusocl/vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0 YWFmMWVhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETTr+MA/d5meI8smSlUIyv7OHIeK0R7u+msg7U4+Kj246XUO03eRFLD YfkLfq17E2N5g9BUwB/beT0whuvQumfxuqbZa+zDPGa2qkpWuHeeQwjX+MDTn4eg 33Q1aMMt1XXlxgSjSWsTm5F3USNV5BKCVPJRtcc5/oHJG9QedFbmF0mas8b0dwML A5o1R/fSDn/H8bXKFAppGXzzE2QkMMB6Xs5znKWkwfKxnfNOxhQlJBZ5heuRqJBc oMepfYpfVM/Mck4oJ7VfgnQ2AE6bB7Vz+L2MPMokaJTcSObHE/xpbKPqgsqylR6j hq+xuZJlg33yv5UD4EGjAfM03wkP9VM= -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:18 2025 by rpki-client