$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa File: e9e5bca2-5780-3ae5-8904-89af2a588865.roa (raw, json) Hash identifier: 9FdJUdg12M6DyxnCEeIdXtrIjpr9oY1pH6w0+ZusfHY= Subject key identifier: FB:D5:80:D5:ED:F7:4F:88:C0:01:8C:FD:A3:6E:C9:4B:52:FB:4F:3E Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584905B6B478DA813A9D12B0E180 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 20253 IP address blocks: 162.222.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b4:78:da:81:3a:9d:12:b0:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=38d140f1-57f9-424b-8166-2810f5da510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:24:4e:92:f9:24:e3:d8:ca:b9:d1:af:4e: cc:33:26:08:ec:41:61:ab:85:40:ec:33:78:20:0d: b3:75:17:0c:5d:f1:68:b4:f9:ef:5a:31:fc:ce:37: ef:fd:b6:94:03:6e:ef:eb:35:ab:e6:e9:07:72:95: 38:15:e1:b6:e3:80:e2:6b:c7:6e:44:da:46:44:9a: 17:b8:11:88:c8:f3:ae:3b:8e:21:86:44:ef:8f:13: 81:e4:1a:31:c9:c4:14:0e:21:bc:ca:6a:7f:d0:8d: 47:43:e9:d7:b1:fa:1c:d4:25:b0:9d:e1:fd:53:09: fc:5e:4f:91:61:f0:1d:66:d8:fb:81:28:27:5a:c3: 54:c7:f7:cd:8e:d4:de:d9:7c:dc:75:ad:7b:8f:c0: 0e:1c:6d:79:fa:0a:8b:1e:2d:93:49:88:d9:af:c8: fe:c5:55:d2:82:1d:dd:0a:54:cf:c8:9c:0c:93:90: 35:96:45:22:dd:dc:4d:04:ba:f1:e6:f8:00:68:5d: d8:11:5f:31:e2:f0:a0:55:bd:7b:7f:dd:09:84:40: a9:60:e4:11:d5:11:3f:db:e3:6e:18:f7:2c:89:96: 92:27:87:92:de:33:2d:55:03:7e:fc:9e:c9:c4:18: eb:3c:ad:97:bb:43:de:45:02:68:8e:e5:bb:7d:15: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D5:80:D5:ED:F7:4F:88:C0:01:8C:FD:A3:6E:C9:4B:52:FB:4F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv4: 162.222.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f9:fa:d6:74:ce:87:4d:df:97:95:3f:5b:ad:4d:12:3f:78: 57:63:00:0f:79:cb:5c:a1:46:b5:bd:7f:7f:e2:3b:58:33:0a: 89:44:7c:47:f6:ef:96:f7:4a:62:57:b5:7d:95:b2:46:54:82: 75:42:85:47:7f:7e:34:d8:6e:6e:d8:56:40:59:3f:de:f1:17: 6c:c1:24:86:65:a8:0e:37:ce:de:c2:8f:5e:80:d8:9d:68:0b: 30:16:b4:c4:d6:59:f5:f7:de:90:15:11:7a:09:24:aa:cd:50: a9:bb:cb:2b:ad:81:73:eb:f0:d5:db:9d:f4:e1:f6:9b:c2:a1: 31:23:c2:65:66:7f:91:7e:80:e9:7d:da:b4:e2:eb:32:df:17: 69:60:6a:dc:41:4c:7f:7d:77:2c:a6:7f:32:19:0b:6a:88:d7: 5a:7e:5c:51:95:68:90:6c:3a:4d:d0:d1:20:73:42:c9:bd:0f: e1:3c:65:e7:b7:be:cf:4c:46:42:ca:2b:cf:2d:93:44:d0:83: 97:93:16:02:19:73:59:cb:12:25:e5:05:e8:31:03:a6:6c:fa: 2c:9f:f7:b1:07:14:5a:26:81:ee:b6:3a:01:2a:9d:2a:24:96: 65:4a:dc:e5:c8:6d:d4:04:00:39:19:fe:17:6f:b7:83:9c:4f: 82:01:d3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrR42oE6nRKw4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MzhkMTQwZjEtNTdmOS00MjRiLTgxNjYtMjgxMGY1ZGE1MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8kTpL5JOPYyrnRr07MMyYI7EFhq4VA7DN4 IA2zdRcMXfFotPnvWjH8zjfv/baUA27v6zWr5ukHcpU4FeG244Dia8duRNpGRJoX uBGIyPOuO44hhkTvjxOB5BoxycQUDiG8ymp/0I1HQ+nXsfoc1CWwneH9Uwn8Xk+R YfAdZtj7gSgnWsNUx/fNjtTe2Xzcda17j8AOHG15+gqLHi2TSYjZr8j+xVXSgh3d ClTPyJwMk5A1lkUi3dxNBLrx5vgAaF3YEV8x4vCgVb17f90JhECpYOQR1RE/2+Nu GPcsiZaSJ4eS3jMtVQN+/J7JxBjrPK2Xu0PeRQJojuW7fRVJqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvVgNXt90+IwAGM/aNuyUtS+08+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZTllNWJjYTItNTc4MC0z YWU1LTg5MDQtODlhZjJhNTg4ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv5+tZ0zodN35eVP1utTRI/eFdjAA95y1yhRrW9f3/iO1gzColEfEf2 75b3SmJXtX2VskZUgnVChUd/fjTYbm7YVkBZP97xF2zBJIZlqA43zt7Cj16A2J1o CzAWtMTWWfX33pAVEXoJJKrNUKm7yyutgXPr8NXbnfTh9pvCoTEjwmVmf5F+gOl9 2rTi6zLfF2lgatxBTH99dyymfzIZC2qI11p+XFGVaJBsOk3Q0SBzQsm9D+E8Zee3 vs9MRkLKK88tk0TQg5eTFgIZc1nLEiXlBegxA6Zs+iyf97EHFFomge62OgEqnSok lmVK3OXIbdQEADkZ/hdvt4OcT4IB0zk= -----END CERTIFICATE-----Generated at Fri Mar 14 13:22:50 2025 by rpki-client