$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa File: 84f02f2f-ae84-308f-a582-83b183cb9f88.roa (raw, json) Hash identifier: 4132x+m6cJdNzWnueTUnZVwNn11kbckx7V2rvzbBcXM= Subject key identifier: 42:7F:17:63:FC:9C:2E:46:03:7A:B5:DD:A9:F4:E5:28:6F:91:5F:DD Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858490B4C24561BF06801F3887A80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 23467 IP address blocks: 162.247.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:24:56:1b:f0:68:01:f3:88:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=99a418f9-7db6-4d9d-8bcd-4a85bff9057b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:56:3c:0e:3f:f3:f7:55:e8:05:8d:47:bb: 16:97:5c:1a:38:91:63:18:69:b9:ef:34:a3:16:7d: 99:fe:4b:59:9d:01:55:b3:d2:45:a2:cb:c5:7e:f4: 99:62:02:e0:e2:60:60:23:6b:9c:16:93:1e:64:f9: 74:68:58:d9:9b:33:a6:e3:be:7c:f4:55:af:31:5b: 93:f5:c2:66:8e:c0:3e:32:fd:b3:d3:3c:28:ea:32: ba:98:c9:f9:58:35:76:e9:a6:3c:e2:cb:8a:29:b7: 8a:25:d3:55:a0:33:06:e2:c8:9e:a9:4a:85:9a:41: 82:8e:d9:73:71:9d:68:0d:53:d2:8f:41:6c:ed:eb: 5d:f2:b2:93:09:93:66:9c:d4:24:60:a9:54:83:23: b9:99:db:1c:05:60:b7:cb:29:f2:de:27:05:9c:fd: 97:56:9a:8d:06:a9:5b:a6:ed:ae:55:80:95:6e:d2: 3c:0c:fb:28:a9:c5:b3:7c:82:22:1a:71:a4:ea:78: a3:7f:2e:25:6c:85:a5:b3:42:0a:06:d6:5c:df:da: 23:96:84:18:f7:49:8f:0b:0c:42:18:c8:3a:b6:73: fe:f6:92:cc:05:17:b2:19:5c:f5:31:3a:11:2b:34: cc:3f:fe:ff:8a:38:f1:60:ac:a0:4c:14:e2:7d:5b: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:17:63:FC:9C:2E:46:03:7A:B5:DD:A9:F4:E5:28:6F:91:5F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d2:dd:6a:c2:e7:c0:11:42:b6:fc:47:f0:c3:c1:1b:1b:6b: 93:2f:d5:7a:03:16:40:df:7b:8c:d7:de:56:f4:c5:62:01:e9: d7:de:d7:b7:b1:8b:cc:9f:38:db:d1:a8:bf:48:91:d5:fe:34: 53:74:cd:f9:1a:7c:8e:bf:17:43:05:ed:aa:b4:b2:1e:b3:c5: 48:10:5f:4a:ff:cb:9d:5c:50:5f:0a:27:dd:5c:0d:a9:7f:8d: dd:46:37:71:70:1b:4a:5d:55:9a:bc:31:7b:b4:a6:67:d6:89: 2f:5f:84:81:31:a8:58:d3:c8:8a:7e:d1:7d:33:15:e7:0a:aa: 1d:22:64:a6:3f:21:91:8d:ca:d9:f2:bb:d8:d8:da:9e:d6:01: 8b:4e:98:16:76:d8:64:52:bd:7d:d7:45:e2:a5:7d:4b:d9:9d: bd:ad:65:3e:e7:55:65:7b:5b:0b:a1:27:1d:58:f8:2f:c6:d5: 38:01:2b:3c:65:f5:57:53:7f:ab:2a:c0:ac:17:1d:1e:3b:e8: 71:12:08:3f:51:cd:c8:0a:87:ce:b2:b5:52:0f:65:3b:54:0d: de:b0:b1:81:8b:6a:1f:7a:da:b7:24:cc:fc:65:6c:8f:19:9c: 03:d9:3c:38:29:41:df:72:ee:77:fb:40:1b:e0:54:d1:81:77: 27:6f:bf:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCRWG/BoAfOIeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OTlhNDE4ZjktN2RiNi00ZDlkLThiY2QtNGE4NWJmZjkwNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB9WPA4/8/dV6AWNR7sWl1waOJFjGGm57zSj Fn2Z/ktZnQFVs9JFosvFfvSZYgLg4mBgI2ucFpMeZPl0aFjZmzOm47589FWvMVuT 9cJmjsA+Mv2z0zwo6jK6mMn5WDV26aY84suKKbeKJdNVoDMG4sieqUqFmkGCjtlz cZ1oDVPSj0Fs7etd8rKTCZNmnNQkYKlUgyO5mdscBWC3yyny3icFnP2XVpqNBqlb pu2uVYCVbtI8DPsoqcWzfIIiGnGk6nijfy4lbIWls0IKBtZc39ojloQY90mPCwxC GMg6tnP+9pLMBReyGVz1MToRKzTMP/7/ijjxYKygTBTifVu/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ/F2P8nC5GA3q13an05ShvkV/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvODRmMDJmMmYtYWU4NC0z MDhmLWE1ODItODNiMTgzY2I5Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbS3WrC58ARQrb8R/DDwRsba5Mv1XoDFkDfe4zX3lb0xWIB6dfe17ex i8yfONvRqL9IkdX+NFN0zfkafI6/F0MF7aq0sh6zxUgQX0r/y51cUF8KJ91cDal/ jd1GN3FwG0pdVZq8MXu0pmfWiS9fhIExqFjTyIp+0X0zFecKqh0iZKY/IZGNytny u9jY2p7WAYtOmBZ22GRSvX3XReKlfUvZnb2tZT7nVWV7WwuhJx1Y+C/G1TgBKzxl 9VdTf6sqwKwXHR476HESCD9RzcgKh86ytVIPZTtUDd6wsYGLah962rckzPxlbI8Z nAPZPDgpQd9y7nf7QBvgVNGBdydvv5o= -----END CERTIFICATE-----Generated at Sun Apr 6 20:44:21 2025 by rpki-client