$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa File: 0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa (raw, json) Hash identifier: 3VyzmLpI9l3wuGugUg7tkSi8djIMjE7El5QcKAy6N28= Subject key identifier: 99:DF:37:17:92:0A:7C:3A:3B:33:52:CC:94:2E:36:D4:2D:08:FB:3C Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584919417ABE5A7CA1DDC2C29780 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 23467 IP address blocks: 162.247.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7a:be:5a:7c:a1:dd:c2:c2:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=4a21a7dd-d0d8-4a5c-87ef-b967542e2d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:31:f6:ee:51:9e:c0:de:1f:ef:af:85:b0: a5:3c:fc:f9:9a:b4:af:78:7e:60:ec:5f:40:ad:3e: cb:7a:45:00:50:56:3a:8e:d0:ad:4f:a6:06:08:51: ae:51:93:22:bd:e9:bc:63:36:5b:e8:31:4b:0c:d6: a3:69:ef:23:ce:98:d5:51:6c:32:95:22:1c:42:86: 59:52:8c:43:81:6e:c7:01:2e:5c:2b:b8:9f:08:b7: 7c:71:5f:70:0f:59:d9:74:ac:02:cb:f1:60:d7:2e: b7:8d:7e:2a:89:0e:2a:55:63:9e:3a:b7:ad:a1:45: 2c:a1:5d:16:9c:52:8e:f0:9b:e6:8c:89:8a:93:40: 49:c6:e4:38:7c:9d:e4:45:5f:14:a0:e5:55:51:37: 8b:cc:5d:36:eb:a4:72:6b:f9:9b:f4:b9:17:8e:90: 7a:db:4b:cd:02:dd:73:7d:64:cf:e7:fc:60:61:00: 08:52:ad:52:b5:d5:f2:67:02:68:68:5c:65:44:d5: d4:ac:e0:ef:81:31:58:d4:74:3f:8f:03:b9:25:97: 0f:f7:91:8d:23:37:ed:a7:3e:9c:71:f1:ae:57:48: e5:fb:c7:41:8f:a5:e7:a3:96:57:18:6e:eb:de:02: b1:f9:ea:a9:a2:d7:7b:e1:ab:5a:fa:19:0b:ce:89: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DF:37:17:92:0A:7C:3A:3B:33:52:CC:94:2E:36:D4:2D:08:FB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:31:2c:7c:08:39:fb:65:7f:54:b5:ff:ed:8a:cf:bb:9a:38: 54:a6:98:93:f3:35:a9:de:0c:38:5a:eb:78:91:75:74:24:72: 2d:a1:fd:b2:28:b6:c3:6a:c6:a1:64:cc:8f:92:a6:ad:bc:ed: 0a:1f:52:a4:e3:a5:6b:b2:e8:ef:a3:69:47:b7:9b:32:39:e1: fd:9e:96:ce:71:50:16:80:a3:24:b2:82:d0:20:08:9d:2c:c2: 90:de:32:ad:68:ce:96:1c:dc:2b:dd:c4:29:f7:85:37:43:7e: 36:2b:66:cc:60:53:f8:a2:fb:8f:2a:92:78:a9:b2:1f:0d:53: 86:8f:2c:ff:16:a5:47:ee:55:30:ff:79:51:64:4f:75:cc:e1: 79:17:74:a7:bc:4d:73:38:40:dc:51:ea:91:b7:9e:61:86:8d: 24:17:16:e6:3c:f5:bf:be:75:a3:56:c6:e0:b1:0f:e9:3f:b1: 69:71:60:9f:25:07:c6:34:81:4a:85:fa:a1:98:44:53:bb:f3: d1:fe:2e:9f:c1:38:a7:d9:a0:3b:75:d7:6e:b0:54:18:e9:85: 8b:f1:fd:dc:62:da:a9:46:10:bc:e1:f2:da:66:c2:42:09:b9: bb:a5:30:45:9d:c6:eb:b1:b6:c6:d2:2f:f0:88:db:87:27:50: e6:56:49:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXq+Wnyh3cLCl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NGEyMWE3ZGQtZDBkOC00YTVjLTg3ZWYtYjk2NzU0MmUyZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH0x9u5RnsDeH++vhbClPPz5mrSveH5g7F9A rT7LekUAUFY6jtCtT6YGCFGuUZMivem8YzZb6DFLDNajae8jzpjVUWwylSIcQoZZ UoxDgW7HAS5cK7ifCLd8cV9wD1nZdKwCy/Fg1y63jX4qiQ4qVWOeOretoUUsoV0W nFKO8JvmjImKk0BJxuQ4fJ3kRV8UoOVVUTeLzF0266Rya/mb9LkXjpB620vNAt1z fWTP5/xgYQAIUq1StdXyZwJoaFxlRNXUrODvgTFY1HQ/jwO5JZcP95GNIzftpz6c cfGuV0jl+8dBj6Xno5ZXGG7r3gKx+eqpotd74ata+hkLzokKyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnfNxeSCnw6OzNSzJQuNtQtCPs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDc0NmI0ZjctNzZmNS0z NWQ2LWJhYWEtM2M1Nzg1MTg4ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIxLHwIOftlf1S1/+2Kz7uaOFSmmJPzNaneDDha63iRdXQkci2h/bIo tsNqxqFkzI+Spq287QofUqTjpWuy6O+jaUe3mzI54f2els5xUBaAoySygtAgCJ0s wpDeMq1ozpYc3CvdxCn3hTdDfjYrZsxgU/ii+48qknipsh8NU4aPLP8WpUfuVTD/ eVFkT3XM4XkXdKe8TXM4QNxR6pG3nmGGjSQXFuY89b++daNWxuCxD+k/sWlxYJ8l B8Y0gUqF+qGYRFO789H+Lp/BOKfZoDt1126wVBjphYvx/dxi2qlGELzh8tpmwkIJ ubulMEWdxuuxtsbSL/CI24cnUOZWSQM= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:54 2025 by rpki-client