$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa File: 67f904de-0911-32b9-bf9c-27f543b6f323.roa (raw, json) Hash identifier: 09MmMTzVZPffMxO3SDg6Y0htQHFI4ZIXfkeGUlBP/iQ= Subject key identifier: 15:26:D9:45:9B:78:D0:E2:EE:CC:ED:A9:28:45:31:7E:BE:51:9B:98 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584961B988EBF1992ABFE2F103A0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 54113 IP address blocks: 162.247.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:88:eb:f1:99:2a:bf:e2:f1:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=22aa8c15-fc3a-4d64-a153-68842db38d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:66:b5:0f:c8:30:94:1e:75:29:62:eb:70: 46:3c:21:47:60:a8:d8:9b:ce:b9:d9:51:34:60:6f: ae:33:af:2d:d3:f1:1a:7a:cc:c2:41:80:eb:9e:2f: ef:d9:d7:7e:43:33:d8:1c:df:ea:98:23:d5:7f:49: 42:f3:c7:5f:90:cf:c2:fb:76:71:79:30:fe:34:6f: 3f:8f:af:14:19:74:d2:81:c2:7f:57:c4:50:4f:b3: 04:69:eb:f8:b9:f6:8e:bd:56:ff:c2:22:0a:f0:36: a8:ca:87:cb:31:2e:e3:74:78:c6:db:93:a0:a9:38: 40:d2:56:e8:5b:69:b1:65:8f:f5:45:66:e6:91:10: 16:59:ac:4f:25:96:0c:8b:84:c3:a1:9c:11:ee:77: bf:b1:cd:c1:50:7a:97:cb:a6:23:53:72:6f:af:da: 8b:50:bb:a5:02:e9:b9:64:d4:70:ed:89:12:66:f8: 0c:91:c3:1b:95:c1:81:0a:2d:45:a9:9b:a7:e7:b4: a2:05:45:30:41:a6:54:4b:21:ac:b8:37:74:76:45: 37:80:0a:5a:3d:fc:c5:4f:be:b4:5a:c2:94:04:c8: fb:e7:77:3d:f4:dd:c8:49:9f:c8:00:9f:82:a1:0d: 27:d1:e6:42:de:1c:42:23:fa:9e:56:51:f9:1e:3a: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:26:D9:45:9B:78:D0:E2:EE:CC:ED:A9:28:45:31:7E:BE:51:9B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:af:61:4d:3c:db:17:d9:5a:d1:26:ae:c4:e2:28:99:a5: b9:b4:bd:b7:e0:f9:af:ca:a4:f9:64:8d:52:e2:14:95:b0:1e: c3:4d:8d:7c:00:5e:b6:4e:40:f2:8f:8e:b4:ef:dd:5e:92:f8: b7:5e:85:40:91:e1:ed:9b:31:71:57:02:5f:31:d1:51:18:75: 37:03:5d:bb:8a:a6:c7:23:60:35:8a:a1:6e:d5:cf:c0:d9:e7: 3a:2b:c0:0b:36:37:c0:95:28:ec:8c:48:66:62:b0:6f:89:0b: e1:5b:d3:b2:f2:5a:e0:49:42:53:1c:66:83:74:94:9e:2b:50: a0:09:2a:34:6f:e4:9d:4d:d4:30:55:aa:86:16:ba:ec:35:d4: 01:8b:5d:f0:c1:4c:cd:f3:a9:71:5a:80:bf:08:01:e2:d9:8e: 85:28:61:c7:f3:ed:9b:e5:f1:50:5e:c4:53:d4:9e:12:21:7d: a9:c9:55:2a:2f:ec:06:38:92:7b:09:a1:88:29:3c:13:dc:b1: 97:08:29:83:d0:bc:47:91:c5:26:a2:6a:9f:16:94:e5:a7:6b: a1:ff:6b:f4:cd:e2:40:f5:c6:c0:21:e7:6c:ab:93:a8:bd:be: 5c:64:4a:c8:c6:6b:0a:2f:7f:38:61:34:f0:e7:a8:db:07:d4: 8d:c5:04:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYjr8Zkqv+LxA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MjJhYThjMTUtZmMzYS00ZDY0LWExNTMtNjg4NDJkYjM4ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyitmtQ/IMJQedSli63BGPCFHYKjYm8652VE0 YG+uM68t0/EaeszCQYDrni/v2dd+QzPYHN/qmCPVf0lC88dfkM/C+3ZxeTD+NG8/ j68UGXTSgcJ/V8RQT7MEaev4ufaOvVb/wiIK8DaoyofLMS7jdHjG25OgqThA0lbo W2mxZY/1RWbmkRAWWaxPJZYMi4TDoZwR7ne/sc3BUHqXy6YjU3Jvr9qLULulAum5 ZNRw7YkSZvgMkcMblcGBCi1FqZun57SiBUUwQaZUSyGsuDd0dkU3gApaPfzFT760 WsKUBMj753c99N3ISZ/IAJ+CoQ0n0eZC3hxCI/qeVlH5Hjp7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUm2UWbeNDi7sztqShFMX6+UZuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNjdmOTA0ZGUtMDkxMS0z MmI5LWJmOWMtMjdmNTQzYjZmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaGr2FNPNsX2VrRJq7E4iiZpbm0vbfg+a/KpPlkjVLiFJWwHsNNjXwA XrZOQPKPjrTv3V6S+LdehUCR4e2bMXFXAl8x0VEYdTcDXbuKpscjYDWKoW7Vz8DZ 5zorwAs2N8CVKOyMSGZisG+JC+Fb07LyWuBJQlMcZoN0lJ4rUKAJKjRv5J1N1DBV qoYWuuw11AGLXfDBTM3zqXFagL8IAeLZjoUoYcfz7Zvl8VBexFPUnhIhfanJVSov 7AY4knsJoYgpPBPcsZcIKYPQvEeRxSaiap8WlOWna6H/a/TN4kD1xsAh52yrk6i9 vlxkSsjGawovfzhhNPDnqNsH1I3FBEo= -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:12 2025 by rpki-client