$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/78358e57-94d9-3749-be72-74f054906580.roa File: 78358e57-94d9-3749-be72-74f054906580.roa (raw, json) Hash identifier: I4W5U527sfRng5wiy3JLRYBtmcrG/T3mcQY8so/NVA0= Subject key identifier: 7D:87:6D:FA:69:97:FF:FE:0F:1F:AC:27:19:55:45:D2:55:2B:65:5B Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F432858496484431933AC8340F4B85140 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/78358e57-94d9-3749-be72-74f054906580.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 398304 IP address blocks: 162.218.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:43:19:33:ac:83:40:f4:b8:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=a8537f14-35ed-4d15-aa27-9a7a141868da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:0e:eb:9c:9a:cb:79:90:35:fe:d6:36:22: d4:90:a5:57:2f:d5:a3:e3:35:26:48:ef:92:df:54: bb:54:a0:ec:ee:53:41:cc:5a:79:d3:b9:d8:17:7f: 5e:3e:b8:15:5c:92:ce:76:56:17:91:c6:33:13:6b: 9d:06:06:d0:88:c6:ff:52:b7:a1:ab:d6:be:4f:12: d2:45:71:4d:34:df:44:8e:a6:f6:71:dd:82:09:be: 64:40:1f:f4:ca:83:fb:c1:cd:bb:a1:66:bc:ab:e8: 00:29:93:0e:07:19:fd:4e:5f:61:5a:44:22:f8:fa: f1:e2:d8:f6:2c:a1:5a:92:d3:b2:25:77:f0:ba:08: 5a:d2:1f:cd:a8:90:32:f1:1f:6c:d2:66:17:cb:ea: f8:0c:2e:94:a8:fb:24:a6:68:56:6d:71:d8:7f:cc: 73:61:22:60:d3:81:b3:c6:ea:6f:e9:30:e6:34:11: 9d:4b:12:80:bc:4f:fb:14:61:83:f5:52:f8:ab:31: 38:cd:52:87:fd:00:09:a1:f0:31:be:8c:0a:8e:ec: ac:0c:e1:7c:46:64:c3:bf:32:24:f1:c8:15:94:6c: cf:4c:ac:ab:06:1c:51:e8:31:b9:50:2e:1a:c1:f9: 5e:f6:11:ed:ca:5b:b3:af:d0:62:63:77:69:df:91: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:6D:FA:69:97:FF:FE:0F:1F:AC:27:19:55:45:D2:55:2B:65:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/78358e57-94d9-3749-be72-74f054906580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: 162.218.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1b:f4:23:80:45:58:1e:96:f1:48:d1:7f:1f:55:c2:95:b7: d1:e3:53:5b:6f:63:49:85:42:f7:55:63:94:9f:21:c3:76:61: 1e:b2:49:89:f4:29:10:4e:3b:7c:ef:bf:0e:3a:28:92:64:cc: 46:e5:ca:da:4e:ce:f4:55:bc:39:08:f8:fa:3f:95:75:93:0d: 8d:7e:91:ef:d4:72:fd:54:56:a3:62:3d:10:9f:75:70:9a:3f: 0f:b8:d3:82:1e:6e:af:96:f0:3e:7e:06:2b:1d:8a:af:c9:58: 23:1c:78:5f:85:b2:5e:ea:f3:22:76:9c:11:c3:09:80:b1:6b: 69:de:ec:df:e1:f5:77:3e:9a:52:f1:53:9b:5c:ea:43:1d:43: eb:71:95:8d:d7:90:dc:49:c3:f9:40:8d:2d:fb:9e:17:9c:e1: 75:c0:c4:5d:fa:51:4b:47:1e:48:0d:36:ba:36:d7:a0:fa:78: 5d:6b:bd:9c:4c:5b:b2:60:e6:74:38:18:5d:1f:3d:e8:7c:01: aa:0b:06:b2:89:6e:5c:11:a4:bd:f6:f5:18:36:94:8a:77:d8: 50:1f:ea:bc:10:b1:da:d7:3c:f8:4b:ec:c6:0b:5e:ab:37:00: bd:a3:32:c5:55:6e:59:3e:3f:a0:08:87:87:82:90:a6:e1:71: 57:7f:0b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEMZM6yDQPS4UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk YTg1MzdmMTQtMzVlZC00ZDE1LWFhMjctOWE3YTE0MTg2OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuQO65yay3mQNf7WNiLUkKVXL9Wj4zUmSO+S 31S7VKDs7lNBzFp507nYF39ePrgVXJLOdlYXkcYzE2udBgbQiMb/Urehq9a+TxLS RXFNNN9Ejqb2cd2CCb5kQB/0yoP7wc27oWa8q+gAKZMOBxn9Tl9hWkQi+Prx4tj2 LKFaktOyJXfwugha0h/NqJAy8R9s0mYXy+r4DC6UqPskpmhWbXHYf8xzYSJg04Gz xupv6TDmNBGdSxKAvE/7FGGD9VL4qzE4zVKH/QAJofAxvowKjuysDOF8RmTDvzIk 8cgVlGzPTKyrBhxR6DG5UC4awfle9hHtyluzr9BiY3dp35EQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Hbfppl//+Dx+sJxlVRdJVK2VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvNzgzNThlNTctOTRkOS0z NzQ5LWJlNzItNzRmMDU0OTA2NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcb9COARVgelvFI0X8fVcKVt9HjU1tvY0mFQvdVY5SfIcN2YR6ySYn0 KRBOO3zvvw46KJJkzEblytpOzvRVvDkI+Po/lXWTDY1+ke/Ucv1UVqNiPRCfdXCa Pw+404Iebq+W8D5+Bisdiq/JWCMceF+Fsl7q8yJ2nBHDCYCxa2ne7N/h9Xc+mlLx U5tc6kMdQ+txlY3XkNxJw/lAjS37nhec4XXAxF36UUtHHkgNNro216D6eF1rvZxM W7Jg5nQ4GF0fPeh8AaoLBrKJblwRpL329Rg2lIp32FAf6rwQsdrXPPhL7MYLXqs3 AL2jMsVVblk+P6AIh4eCkKbhcVd/C68= -----END CERTIFICATE-----Generated at Sat Apr 12 15:41:41 2025 by rpki-client