$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa File: a580ddd2-3fff-3151-bac9-d463c9b57686.roa (raw, json) Hash identifier: X8YNjZ9A7zpRESPax5vdXN5RR37Gm8MmtqbaclXiW+0= Subject key identifier: 3C:02:1A:8B:CA:3C:C8:BC:40:0C:AE:9A:45:36:66:DD:93:ED:C0:C2 Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Certificate serial: 010D0C9F4328584948EE10A7AFC314104D8DD754 Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa Signing time: Sun 23 Mar 2025 15:51:42 +0000 ROA not before: Sun 23 Mar 2025 15:51:42 +0000 ROA not after: Sat 21 Jun 2025 15:51:42 +0000 asID: 32258 IP address blocks: 12.109.223.0/24 maxlen: 24 12.198.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:48:ee:10:a7:af:c3:14:10:4d:8d:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Validity Not Before: Mar 23 15:51:42 2025 GMT Not After : Jun 21 15:51:42 2025 GMT Subject: CN=52860122-8357-4ab8-a3df-4d8b1748699b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b0:fc:52:7b:ad:6d:27:99:0a:e1:da:4d:07: 39:92:c5:7a:07:e7:cc:85:2f:7d:56:42:b2:e8:5a: 85:d4:1e:bf:b7:5c:10:af:36:fb:c8:d0:71:c5:46: 8c:df:ec:1a:4f:55:db:ea:74:05:2c:64:ca:a4:ce: 6b:44:77:0f:af:00:25:8a:ad:ef:31:df:61:a6:09: 40:05:59:ca:51:2d:ee:ed:6d:d9:e8:e2:46:f4:3d: c4:37:73:70:6b:83:4a:22:07:65:c0:6f:2b:d5:e2: bb:e9:ec:f2:47:8b:4b:f3:c7:2a:43:53:4b:88:23: c1:27:7f:d2:33:b3:5c:2e:6a:fb:c9:bc:46:25:48: f6:f3:85:a9:8c:00:c7:e9:56:d6:39:32:9a:cb:d9: bd:4c:8d:7d:21:1f:5d:bf:84:af:3b:48:85:9a:5d: 22:7f:20:f8:d9:4c:79:5d:2b:91:58:bb:c9:dc:76: 1c:37:4d:d5:36:ba:ad:c9:b8:ff:63:99:da:fe:c7: 2a:41:e7:d8:af:9c:1a:83:d5:60:9c:43:72:0e:a6: 21:75:26:de:39:4b:a2:ab:17:2c:94:95:92:37:e2: ce:ff:2b:15:01:25:ed:70:a4:4d:1b:66:66:ae:46: d9:4f:79:34:f7:1f:f8:e8:1c:af:40:a5:cb:21:12: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:1A:8B:CA:3C:C8:BC:40:0C:AE:9A:45:36:66:DD:93:ED:C0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl X509v3 Authority Key Identifier: keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer sbgp-ipAddrBlock: critical IPv4: 12.109.223.0/24 12.198.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2a:1b:4c:3c:76:1c:55:b6:8c:fd:cb:79:5d:ce:07:1d:d4: 72:b0:f3:7d:35:c4:c3:32:cd:ac:28:a0:73:32:e3:f1:6b:f6: 3a:6d:d6:1a:83:29:6e:4a:49:e3:a5:b0:6e:1b:14:5c:a0:94: 78:3b:61:8d:b7:cb:ce:19:cb:24:b3:2c:e9:dd:c3:12:e1:d7: 42:84:3c:d8:a7:63:57:52:03:4e:de:63:80:83:b6:7d:97:93: 76:79:1e:cd:b9:36:5d:6a:60:f5:23:74:fa:99:ce:f4:1f:7c: 86:bd:d6:cd:78:cf:b8:32:be:e7:24:14:be:77:32:39:80:55: 97:86:12:3a:ae:f6:a3:f6:eb:f5:aa:6d:8b:61:93:38:83:33: 2f:1e:ff:fe:ee:fb:0e:bd:3c:36:cd:20:bf:71:5d:31:79:53: 5f:b9:41:85:2b:88:74:9a:50:83:08:6d:3c:da:a5:32:da:6e: 3c:6c:50:27:ba:81:b8:85:38:f9:53:8d:37:dd:a2:fb:67:89: 04:fa:8a:1d:b0:25:cd:e8:59:3c:47:32:cd:c8:ce:d5:8d:2d: 1c:08:d4:4b:e7:6d:0f:c2:33:74:62:b5:3a:77:69:8d:85:7d: aa:62:64:b8:8f:9b:35:0f:14:ea:f1:85:72:f5:7e:bf:8b:13: af:9c:8e:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElI7hCnr8MUEE2N11QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw NGE4MB4XDTI1MDMyMzE1NTE0MloXDTI1MDYyMTE1NTE0MlowLzEtMCsGA1UEAxMk NTI4NjAxMjItODM1Ny00YWI4LWEzZGYtNGQ4YjE3NDg2OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LD8UnutbSeZCuHaTQc5ksV6B+fMhS99VkKy 6FqF1B6/t1wQrzb7yNBxxUaM3+waT1Xb6nQFLGTKpM5rRHcPrwAliq3vMd9hpglA BVnKUS3u7W3Z6OJG9D3EN3Nwa4NKIgdlwG8r1eK76ezyR4tL88cqQ1NLiCPBJ3/S M7NcLmr7ybxGJUj284WpjADH6VbWOTKay9m9TI19IR9dv4SvO0iFml0ifyD42Ux5 XSuRWLvJ3HYcN03VNrqtybj/Y5na/scqQefYr5wag9VgnENyDqYhdSbeOUuiqxcs lJWSN+LO/ysVASXtcKRNG2ZmrkbZT3k09x/46ByvQKXLIRKs8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDwCGovKPMi8QAyumkU2Zt2T7cDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvYTU4MGRkZDItM2ZmZi0z MTUxLWJhYzktZDQ2M2M5YjU3Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj MmJiZTA0YTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADG3fAwQA DMaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFcqG0w8dhxVtoz9y3ldzgcd1HKw8301xMMyzawooHMy4/Fr 9jpt1hqDKW5KSeOlsG4bFFyglHg7YY23y84ZyySzLOndwxLh10KEPNinY1dSA07e Y4CDtn2Xk3Z5Hs25Nl1qYPUjdPqZzvQffIa91s14z7gyvuckFL53MjmAVZeGEjqu 9qP26/WqbYthkziDMy8e//7u+w69PDbNIL9xXTF5U1+5QYUriHSaUIMIbTzapTLa bjxsUCe6gbiFOPlTjTfdovtniQT6ih2wJc3oWTxHMs3IztWNLRwI1EvnbQ/CM3Ri tTp3aY2FfapiZLiPmzUPFOrxhXL1fr+LE6+cjk4= -----END CERTIFICATE-----Generated at Tue Apr 15 11:37:21 2025 by rpki-client