$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa File: 541b454a-f70e-3454-bcae-4a7dff7be3ef.roa (raw, json) Hash identifier: SJyhQaa7hk2e26i1QDvZhcXHL4hR0vgNH99BkB2ZKvQ= Subject key identifier: C3:69:DA:6B:A4:CF:4A:FF:22:05:81:F5:EB:6D:15:F5:CC:E0:B2:DC Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858495EEEEFF8CEE6F96BFB8B4BE0 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 14618 IP address blocks: 162.212.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ef:f8:ce:e6:f9:6b:fb:8b:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=1c142c3b-56cb-4753-bde3-894f248ee95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:a9:d4:22:30:4c:10:a4:79:7d:0b:68:cf: f5:3e:8b:13:12:a6:fa:48:66:ae:8d:e0:cb:87:e1: 26:0c:48:09:a8:00:8b:99:f7:85:e3:5f:72:45:30: be:42:b0:a6:f3:ab:22:76:c8:ef:60:b1:e6:79:ab: 59:9f:7e:78:15:05:33:4e:9e:17:3b:8d:8f:e3:73: ef:9d:cb:cf:18:d8:6a:ae:25:e5:77:94:d6:11:7f: a7:fe:92:f7:41:b4:22:0a:7e:ea:8c:59:0d:c6:55: 5a:51:45:09:a7:53:84:2f:fa:17:6d:26:d8:6a:61: dd:d1:2f:b2:b8:5e:fc:dc:0c:f3:81:ac:4d:f4:f1: 80:87:3e:0d:d6:cd:67:77:b9:72:5a:54:0e:32:b2: 66:45:ee:f1:01:24:54:b5:9c:22:2e:84:0a:e1:bb: 72:1a:a2:2b:50:2a:72:b5:2f:a7:92:3e:c0:96:77: 52:18:b1:d8:56:e9:a4:29:28:14:81:be:3c:4b:b2: 41:ec:43:37:fb:af:d3:04:f5:3a:cf:43:45:06:6d: 82:27:bb:37:86:c0:d9:31:12:9a:f2:85:5d:24:5b: 86:fc:79:fc:96:78:e1:a4:b5:b8:92:a3:16:70:9f: e8:aa:9c:df:22:87:42:9f:ad:15:9d:aa:91:18:c0: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:DA:6B:A4:CF:4A:FF:22:05:81:F5:EB:6D:15:F5:CC:E0:B2:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 162.212.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:02:7e:cb:02:32:74:d5:82:6a:36:7b:60:eb:28:c0:bd:4d: 54:b4:43:7f:14:06:ec:88:35:8d:2f:f7:de:75:24:47:9d:37: 80:b4:81:43:14:3f:a2:13:19:fa:fc:46:02:2d:f1:bf:d5:ee: 2f:f1:97:01:62:a2:f5:00:b3:c0:68:ae:11:4e:00:ce:be:05: ac:1b:81:88:04:58:14:2c:49:ab:e3:b2:95:0e:b1:d5:78:f4: aa:5c:55:df:28:96:59:ba:3f:ac:fe:ad:38:cc:78:88:97:13: e4:e0:42:9d:76:e3:87:35:4d:c1:5c:d5:c5:1f:69:a7:bd:97: 84:de:13:73:25:8b:f6:89:d9:74:82:64:04:b5:67:f4:56:1a: 4f:fb:88:da:72:b5:23:1f:63:eb:3f:0f:9c:d5:76:d5:38:61: a0:1e:18:d3:50:5b:96:be:47:7c:d9:ca:82:6f:06:06:d5:e4: 8d:20:c3:db:dc:25:a9:97:fa:e8:58:63:bd:c5:ce:28:e5:a0: 44:b9:59:36:68:93:bf:ab:df:3c:3a:9f:52:24:5d:2a:a8:b2: 1d:61:d3:06:4c:5d:17:6f:47:d4:0d:65:67:dd:e2:72:16:bd: ad:69:20:3d:ef:db:a5:e9:f3:78:c4:77:a9:18:14:a5:1c:36: cb:af:66:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7u/4zub5a/uLS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MWMxNDJjM2ItNTZjYi00NzUzLWJkZTMtODk0ZjI0OGVlOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDyp1CIwTBCkeX0LaM/1PosTEqb6SGaujeDL h+EmDEgJqACLmfeF419yRTC+QrCm86sidsjvYLHmeatZn354FQUzTp4XO42P43Pv ncvPGNhqriXld5TWEX+n/pL3QbQiCn7qjFkNxlVaUUUJp1OEL/oXbSbYamHd0S+y uF783AzzgaxN9PGAhz4N1s1nd7lyWlQOMrJmRe7xASRUtZwiLoQK4btyGqIrUCpy tS+nkj7AlndSGLHYVumkKSgUgb48S7JB7EM3+6/TBPU6z0NFBm2CJ7s3hsDZMRKa 8oVdJFuG/Hn8lnjhpLW4kqMWcJ/oqpzfIodCn60VnaqRGMDFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNp2mukz0r/IgWB9ettFfXM4LLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNTQxYjQ1NGEtZjcwZS0z NDU0LWJjYWUtNGE3ZGZmN2JlM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIACfssCMnTVgmo2e2DrKMC9TVS0Q38UBuyINY0v9951JEedN4C0gUMU P6ITGfr8RgIt8b/V7i/xlwFiovUAs8BorhFOAM6+BawbgYgEWBQsSavjspUOsdV4 9KpcVd8ollm6P6z+rTjMeIiXE+TgQp1244c1TcFc1cUfaae9l4TeE3Mli/aJ2XSC ZAS1Z/RWGk/7iNpytSMfY+s/D5zVdtU4YaAeGNNQW5a+R3zZyoJvBgbV5I0gw9vc JamX+uhYY73FzijloES5WTZok7+r3zw6n1IkXSqosh1h0wZMXRdvR9QNZWfd4nIW va1pID3v26Xp83jEd6kYFKUcNsuvZmw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:25 2025 by rpki-client