$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa File: e2891981-1f43-3d06-af0c-d6c2773b6277.roa (raw, json) Hash identifier: 14cXDQ183RtYWTaE/zqzsXBpr47hEvDHwRILQI/QVwg= Subject key identifier: AF:05:3C:72:45:50:2A:8E:D7:C9:BA:5E:79:E4:66:5D:DF:99:39:27 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F432858496CE453678E2BB7414B759500 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 63023 IP address blocks: 162.248.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:53:67:8e:2b:b7:41:4b:75:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=6c45bd40-9417-4eef-b68c-e595e13f1f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:d6:7c:cc:68:aa:c2:a8:d7:9e:0f:0f:42: 3a:e9:9e:88:98:51:ae:f8:4b:81:bb:a9:9a:ac:6b: 65:2c:0a:c8:55:d4:5f:6f:f0:d9:7b:49:f8:29:22: f7:5d:09:8c:f5:01:b9:d1:74:4b:59:0e:fe:71:f9: 0d:5d:ad:3d:b3:e2:5d:2f:ad:27:58:e0:82:d2:17: d7:65:74:39:ee:3a:5d:28:07:f2:6c:1a:07:43:51: 25:0b:6c:b6:c5:6e:29:02:b8:2f:2b:c7:20:c1:7d: 40:e6:be:fa:2e:3a:67:1e:7e:7f:d5:ec:65:27:42: 88:07:fb:0d:b1:00:da:27:8b:da:ba:97:38:b8:8f: fd:31:30:1a:b0:68:e6:98:d7:3c:26:82:1b:a6:1a: 95:ba:45:70:16:cd:01:ef:4c:8b:43:79:8a:ee:0a: 9b:43:8f:90:5c:0f:1c:6c:53:a1:5e:b9:5a:62:93: 82:4c:57:38:81:29:32:ba:23:7a:9d:21:86:5c:58: 37:e2:73:36:2d:1f:88:89:14:bd:e4:f1:86:41:f2: a6:15:35:56:b2:73:c2:ed:39:df:1d:5d:5b:6f:ff: 9e:09:f3:96:cb:e7:66:3b:0f:4a:5e:1a:b2:05:f5: 44:b0:ed:dc:59:d6:53:be:78:fb:9e:e4:ee:0f:11: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:05:3C:72:45:50:2A:8E:D7:C9:BA:5E:79:E4:66:5D:DF:99:39:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/e2891981-1f43-3d06-af0c-d6c2773b6277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e7:1f:15:0a:fc:70:af:da:0b:10:2a:b4:04:35:64:cf:64: 40:ad:b4:63:6d:9c:43:11:81:a2:e6:ae:cb:b9:bf:2e:17:6b: 1c:1b:b3:e0:d0:e6:ec:52:8d:33:d5:c9:76:ae:d5:c8:55:c9: a5:2e:dc:5d:f4:fd:4f:47:a0:ad:da:76:72:c8:cc:4d:ab:79: 0b:88:7b:a6:bf:94:0d:33:a9:e1:fb:f6:02:35:19:b8:96:55: e9:0a:68:b0:ff:b8:82:5b:6a:7e:ef:06:cd:5e:b9:ac:ff:88: 8c:63:ea:a9:28:40:c0:84:c3:27:d3:c4:a4:76:d7:db:e4:e1: a5:d8:fc:2a:8a:4f:13:0e:39:2c:85:ef:58:54:23:ff:d5:8e: e7:02:72:2e:22:39:3d:7d:71:82:08:f1:70:5f:9d:b4:52:c7: e0:b8:1a:de:87:c7:b2:e6:e0:48:26:d2:03:38:0f:c2:ea:52: 97:77:24:9d:23:35:e4:53:ce:fa:97:bf:f9:0d:07:92:d9:01: 0e:ec:18:c6:88:af:0f:b1:aa:39:28:09:2f:17:91:58:50:7e: fb:7b:af:79:ef:5d:dc:87:8d:11:09:e7:15:22:0e:86:0c:99: 2b:26:b1:bf:de:fc:96:fc:c6:e1:9a:8d:b6:54:d0:a5:51:85: 29:3f:6a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FNnjiu3QUt1lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NmM0NWJkNDAtOTQxNy00ZWVmLWI2OGMtZTU5NWUxM2YxZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzrWfMxoqsKo154PD0I66Z6ImFGu+EuBu6ma rGtlLArIVdRfb/DZe0n4KSL3XQmM9QG50XRLWQ7+cfkNXa09s+JdL60nWOCC0hfX ZXQ57jpdKAfybBoHQ1ElC2y2xW4pArgvK8cgwX1A5r76LjpnHn5/1exlJ0KIB/sN sQDaJ4vaupc4uI/9MTAasGjmmNc8JoIbphqVukVwFs0B70yLQ3mK7gqbQ4+QXA8c bFOhXrlaYpOCTFc4gSkyuiN6nSGGXFg34nM2LR+IiRS95PGGQfKmFTVWsnPC7Tnf HV1bb/+eCfOWy+dmOw9KXhqyBfVEsO3cWdZTvnj7nuTuDxEEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8FPHJFUCqO18m6XnnkZl3fmTknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvZTI4OTE5ODEtMWY0My0z ZDA2LWFmMGMtZDZjMjc3M2I2Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3nHxUK/HCv2gsQKrQENWTPZECttGNtnEMRgaLmrsu5vy4Xaxwbs+DQ 5uxSjTPVyXau1chVyaUu3F30/U9HoK3adnLIzE2reQuIe6a/lA0zqeH79gI1GbiW VekKaLD/uIJban7vBs1euaz/iIxj6qkoQMCEwyfTxKR219vk4aXY/CqKTxMOOSyF 71hUI//VjucCci4iOT19cYII8XBfnbRSx+C4Gt6Hx7Lm4Egm0gM4D8LqUpd3JJ0j NeRTzvqXv/kNB5LZAQ7sGMaIrw+xqjkoCS8XkVhQfvt7r3nvXdyHjREJ5xUiDoYM mSsmsb/e/Jb8xuGajbZU0KVRhSk/ajs= -----END CERTIFICATE-----Generated at Wed Apr 9 03:59:22 2025 by rpki-client