$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa File: 148471f6-afa7-3f62-ac8d-1a7a880a2409.roa (raw, json) Hash identifier: cr8Llbz2xkSVgdOcZe5oVqiusmsYh67p10/lN7m5S4s= Subject key identifier: CA:46:E5:0B:81:9B:EC:49:16:F8:C7:F3:46:92:DC:2D:F6:FA:E9:47 Certificate issuer: /CN=7cafc1ae-8aed-47d8-a718-169a271736a5 Certificate serial: 010D0C9F432858496B7ED61B422C96CE25047C20 Authority key identifier: F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 396189 IP address blocks: 163.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d6:1b:42:2c:96:ce:25:04:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cafc1ae-8aed-47d8-a718-169a271736a5 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=a33fe454-3bb2-40b6-a4cb-b2bc6328b3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:39:71:15:28:87:06:07:03:b2:ad:0c:9e: 5d:54:9e:bb:0b:ac:6a:2a:e4:17:52:95:25:6d:af: 88:20:a8:98:32:79:d1:9f:24:4a:85:6b:8a:cb:b6: 40:6b:5f:f0:4c:4d:e9:09:b6:e2:88:0e:3b:2b:eb: 94:70:84:74:c4:dd:2a:a7:f0:78:a5:56:b6:65:ac: b5:a2:a9:ae:6b:47:71:49:ea:d6:d6:81:7f:bd:fa: 6f:cc:2c:e1:c1:26:a2:14:67:0c:11:24:88:da:9b: 1c:93:e3:9e:11:da:9a:bf:63:20:8a:9d:12:26:9f: e7:94:4b:a2:fb:13:54:92:ee:6b:95:7e:36:b5:b6: e4:cf:b5:47:45:a6:80:16:55:9f:10:a7:81:9a:d0: f9:03:3c:95:85:f5:59:f7:2c:fb:60:8c:94:b6:c1: f5:fd:9a:9f:ae:cb:0b:71:a6:bc:fd:6c:c5:c7:a8: 06:68:37:ce:1a:87:f6:70:b3:a0:99:b6:4b:40:41: 1d:4a:3c:dd:6b:ca:61:71:9b:11:9b:89:05:8b:c3: 45:0f:c2:26:11:48:a1:23:bd:2f:4e:bd:08:5b:09: d2:ea:f3:55:5b:1a:0b:2f:b5:34:bc:2b:b6:36:ad: d3:0a:a2:55:93:05:16:fb:b6:80:62:a5:0b:23:a6: b4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:E5:0B:81:9B:EC:49:16:F8:C7:F3:46:92:DC:2D:F6:FA:E9:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl X509v3 Authority Key Identifier: keyid:F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:27:82:97:c0:05:c8:2e:03:37:45:8e:78:12:e4:55:1c:7f: e0:f0:0e:f3:ac:c6:fe:87:fb:34:4f:9d:8e:34:bb:e6:e3:c9: c6:2a:e6:c0:3b:15:75:f0:f4:63:79:41:10:32:b5:d1:d2:35: 44:af:5b:d7:b0:f4:bc:b4:52:58:9f:95:89:a6:4f:78:d1:a4: 83:70:be:65:3b:a9:b3:d7:ff:d6:4e:34:4c:08:75:94:9c:b4: 0b:6d:70:49:60:1f:c0:fd:74:2e:1a:bc:23:03:67:b3:e1:d0: 9e:28:27:da:cd:fd:68:30:ca:4d:02:aa:74:c4:cc:40:55:6b: a8:8b:9d:2e:c8:ea:19:8a:fb:36:d0:db:85:ea:96:6a:54:30: eb:86:46:ac:1a:58:a0:00:3c:4e:30:24:1a:f2:b6:11:99:a6: 56:ff:d8:e4:e8:04:80:e3:3b:83:d1:34:47:39:41:9d:5c:7c: ee:b7:9f:fe:6e:83:fe:26:7f:68:cb:88:c1:d3:49:41:47:b4: a6:81:e6:87:9a:ee:51:d6:d7:02:33:37:db:0a:f8:39:91:15: 9d:73:da:6e:0f:66:da:e5:6b:8a:6b:40:32:3f:e6:6e:e7:8e: 2e:8a:d8:03:2e:a7:92:a7:33:fb:53:28:ae:75:56:77:d6:63: d4:46:40:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftYbQiyWziUEfCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NhZmMxYWUtOGFlZC00N2Q4LWE3MTgtMTY5YTI3MTcz NmE1MB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk YTMzZmU0NTQtM2JiMi00MGI2LWE0Y2ItYjJiYzYzMjhiM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQg5cRUohwYHA7KtDJ5dVJ67C6xqKuQXUpUl ba+IIKiYMnnRnyRKhWuKy7ZAa1/wTE3pCbbiiA47K+uUcIR0xN0qp/B4pVa2Zay1 oqmua0dxSerW1oF/vfpvzCzhwSaiFGcMESSI2psck+OeEdqav2Mgip0SJp/nlEui +xNUku5rlX42tbbkz7VHRaaAFlWfEKeBmtD5AzyVhfVZ9yz7YIyUtsH1/ZqfrssL caa8/WzFx6gGaDfOGof2cLOgmbZLQEEdSjzda8phcZsRm4kFi8NFD8ImEUihI70v Tr0IWwnS6vNVWxoLL7U0vCu2Nq3TCqJVkwUW+7aAYqULI6a0twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpG5QuBm+xJFvjH80aS3C32+ulHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83Y2Fm YzFhZS04YWVkLTQ3ZDgtYTcxOC0xNjlhMjcxNzM2YTUvMTQ4NDcxZjYtYWZhNy0z ZjYyLWFjOGQtMWE3YTg4MGEyNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2NhZmMxYWUtOGFlZC00N2Q4LWE3 MTgtMTY5YTI3MTczNmE1LzdjYWZjMWFlLThhZWQtNDdkOC1hNzE4LTE2OWEyNzE3 MzZhNS5jcmwwHwYDVR0jBBgwFoAU8o4Aj4i63ZhrstmGzY4NYKQ8PDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83Y2FmYzFhZS04YWVkLTQ3ZDgtYTcxOC0xNjlh MjcxNzM2YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4ngpfABcguAzdFjngS5FUcf+DwDvOsxv6H+zRPnY40u+bjycYq5sA7 FXXw9GN5QRAytdHSNUSvW9ew9Ly0UliflYmmT3jRpINwvmU7qbPX/9ZONEwIdZSc tAttcElgH8D9dC4avCMDZ7Ph0J4oJ9rN/Wgwyk0CqnTEzEBVa6iLnS7I6hmK+zbQ 24XqlmpUMOuGRqwaWKAAPE4wJBrythGZplb/2OToBIDjO4PRNEc5QZ1cfO63n/5u g/4mf2jLiMHTSUFHtKaB5oea7lHW1wIzN9sK+DmRFZ1z2m4PZtrla4prQDI/5m7n ji6K2AMup5KnM/tTKK51VnfWY9RGQKk= -----END CERTIFICATE-----Generated at Sat Apr 12 11:49:00 2025 by rpki-client