$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa File: a19e3195-8a84-3cd1-96c4-4347391db867.roa (raw, json) Hash identifier: Hdbl5uC/URSzotZqWO8TiB6lDWKgthbl1CtT4lqLyr0= Subject key identifier: 7E:26:5B:37:D4:E0:43:55:17:36:C9:F0:4B:59:94:C7:1E:DF:18:17 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F43285849350E9A3FD0E5C949C7B66E00 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8075 IP address blocks: 162.254.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9a:3f:d0:e5:c9:49:c7:b6:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=be9fb18f-8db1-4432-b02b-d5eb6ae8c2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:88:bd:ff:d8:6d:a8:d4:d0:a9:6f:ca:00: 22:c4:8d:bb:41:4c:4c:21:3c:31:b3:5d:3e:3a:e0: cd:b3:16:d9:b8:e1:30:f8:47:74:9c:7a:9c:17:8f: 09:4a:2c:f6:25:b4:56:13:6e:a8:cb:41:b4:22:48: 50:57:8b:7a:f4:74:90:59:de:1e:e7:b4:41:db:95: 78:f0:d3:1f:30:d7:4a:32:78:68:2d:40:98:d2:ec: 88:de:b5:38:86:ce:24:c9:59:d5:c7:53:6c:79:8d: 86:2e:ca:13:74:60:d8:15:a4:31:80:4e:dd:0d:6c: 07:78:33:fa:cf:27:9d:25:ed:78:cc:2d:17:55:f5: bf:9a:e3:f1:ee:24:82:48:64:1b:86:b7:2e:71:1f: 9d:c1:22:51:f0:4c:94:5f:2e:30:eb:61:2c:e5:97: 33:81:0e:27:7f:96:d6:98:d6:fe:75:cd:7c:6e:d5: c2:df:fd:d0:5c:f8:55:b4:f8:30:06:a4:30:5b:21: 3d:64:df:b4:3a:23:b9:1c:a2:f4:b4:38:9f:cb:c4: 30:96:b9:26:97:fc:4e:31:a4:7a:f8:ef:5e:a9:e5: 04:15:db:12:74:63:09:cb:34:83:14:6c:ff:90:ea: 94:f8:1a:9e:ff:da:28:37:91:5f:33:ec:7e:48:c4: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:26:5B:37:D4:E0:43:55:17:36:C9:F0:4B:59:94:C7:1E:DF:18:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c4:19:70:d3:dc:ad:f2:c4:e7:a2:9e:ef:40:86:20:6f:ce: f0:27:53:c8:35:c0:8e:ab:26:1b:21:95:6a:2b:7a:7f:b6:9f: 6d:a5:11:b8:1f:4c:29:9d:11:0d:5b:a8:12:80:7b:f3:86:ef: 87:a8:bb:c4:12:18:c6:1b:60:17:ea:fb:2f:47:af:a7:19:17: 01:be:1c:fd:ee:6a:a5:38:e8:33:1a:0d:3d:10:df:9f:91:c0: 44:65:f7:95:83:ab:88:be:e3:c1:02:c5:32:6b:49:50:9c:15: d4:96:bd:41:f2:6b:89:78:24:c2:c2:0f:7a:72:fc:10:40:ea: d2:f0:54:90:73:bf:5c:07:8c:c3:63:64:28:f2:e0:8e:6f:6e: 90:6e:d0:8e:0c:6e:81:2a:79:69:47:32:7b:b8:29:cd:fd:6c: ac:ca:84:dc:42:ce:fc:6c:b7:0a:b9:3a:c4:74:da:72:4d:e1: 58:db:2f:73:b5:14:0e:3c:1b:fe:20:4e:54:0d:55:a3:3b:b9: de:35:1d:73:1e:bd:41:b5:15:a6:e0:a3:19:6d:77:52:d5:d7: d3:aa:ed:5a:0e:c0:c3:9d:e5:c0:66:2a:e5:49:a9:b9:ae:9b: c5:36:91:6f:37:33:a0:09:0f:fc:25:ac:21:19:be:3d:46:84: d9:d2:f4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dpo/0OXJSce2bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmU5ZmIxOGYtOGRiMS00NDMyLWIwMmItZDVlYjZhZThjMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkreIvf/YbajU0KlvygAixI27QUxMITwxs10+ OuDNsxbZuOEw+Ed0nHqcF48JSiz2JbRWE26oy0G0IkhQV4t69HSQWd4e57RB25V4 8NMfMNdKMnhoLUCY0uyI3rU4hs4kyVnVx1NseY2GLsoTdGDYFaQxgE7dDWwHeDP6 zyedJe14zC0XVfW/muPx7iSCSGQbhrcucR+dwSJR8EyUXy4w62Es5ZczgQ4nf5bW mNb+dc18btXC3/3QXPhVtPgwBqQwWyE9ZN+0OiO5HKL0tDify8Qwlrkml/xOMaR6 +O9eqeUEFdsSdGMJyzSDFGz/kOqU+Bqe/9ooN5FfM+x+SMQL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4mWzfU4ENVFzbJ8EtZlMce3xgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvYTE5ZTMxOTUtOGE4NC0z Y2QxLTk2YzQtNDM0NzM5MWRiODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov73MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbEGXDT3K3yxOeinu9AhiBvzvAnU8g1wI6rJhshlWoren+2n22lEbgf TCmdEQ1bqBKAe/OG74eou8QSGMYbYBfq+y9Hr6cZFwG+HP3uaqU46DMaDT0Q35+R wERl95WDq4i+48ECxTJrSVCcFdSWvUHya4l4JMLCD3py/BBA6tLwVJBzv1wHjMNj ZCjy4I5vbpBu0I4MboEqeWlHMnu4Kc39bKzKhNxCzvxstwq5OsR02nJN4VjbL3O1 FA48G/4gTlQNVaM7ud41HXMevUG1Fabgoxltd1LV19Oq7VoOwMOd5cBmKuVJqbmu m8U2kW83M6AJD/wlrCEZvj1GhNnS9M0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:31 2025 by rpki-client