$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/191e156d-df47-348d-ab69-66285d1ae3de.roa File: 191e156d-df47-348d-ab69-66285d1ae3de.roa (raw, json) Hash identifier: LBaG4yiGkpF+41ses/sfXW78Npcpo5RZVG8PCDNAe3o= Subject key identifier: 77:16:63:3D:86:D8:C1:D7:E9:C9:96:02:F5:A3:69:53:86:F6:EC:58 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F43285848BBBB864B2340AE730861D480 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/191e156d-df47-348d-ab69-66285d1ae3de.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 142617 IP address blocks: 162.250.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:86:4b:23:40:ae:73:08:61:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=b01e8461-7d58-4e30-a5c6-eb7008826645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:ea:89:6b:b3:c5:b1:c8:fe:67:0a:7b:af: e6:38:23:04:e0:b8:0b:b0:c1:d2:ba:57:f9:bc:8b: b3:a2:c7:4d:a8:ff:c5:6c:6f:f7:20:ab:79:93:e9: 25:05:36:d2:ef:a0:86:0e:f2:2a:67:d4:38:ed:d8: c8:7d:68:7b:71:89:8a:ae:ae:da:3f:85:e1:d6:fa: 9b:07:55:f8:70:15:0b:1a:87:c8:bc:d8:74:b1:fd: 36:5b:8a:d4:a2:23:d5:94:e3:9f:e5:b7:06:62:1b: 96:ec:31:99:dc:cc:55:ef:89:3c:fb:1c:99:02:a2: bb:96:4a:c5:6d:23:85:99:70:86:f0:64:99:36:2d: ca:4f:c1:e4:a0:f9:01:88:39:db:0d:96:04:43:bf: 61:21:90:51:d2:6f:1c:a1:43:85:4a:b9:e5:1e:ed: f0:4c:db:67:7e:2e:05:c5:93:3a:ad:2d:4e:20:39: ce:f9:3f:bb:a6:4a:dc:5b:73:05:5a:2a:f2:d3:b0: 21:d8:ea:64:fc:3f:b0:e9:c5:10:46:66:26:e4:e3: b2:d8:08:9b:5d:96:42:f3:b8:60:df:28:e0:8d:e4: 31:b3:7a:1b:17:ff:44:ff:1d:83:50:5a:b2:ba:b1: de:04:4d:6e:5f:83:3c:e1:a5:d1:b5:16:05:ed:d4: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:16:63:3D:86:D8:C1:D7:E9:C9:96:02:F5:A3:69:53:86:F6:EC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/191e156d-df47-348d-ab69-66285d1ae3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 162.250.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:97:80:63:ee:71:0b:5d:1d:4f:fc:4d:ae:cf:09:58:d3:a0: 1b:cb:3e:5d:70:46:3f:55:c4:3a:10:b4:51:b0:f7:bd:13:72: a7:a9:03:f5:8a:33:58:fb:ba:57:2e:63:8a:25:a6:d1:19:be: 1f:1c:66:bf:53:52:69:1d:04:84:e9:05:98:b3:15:a9:d8:29: 91:b2:c7:c7:40:46:13:0f:40:e9:97:f8:18:8e:7f:56:1e:41: c6:a7:6b:96:76:3c:7e:e0:ff:d1:8a:fa:ba:23:a5:de:71:c1: 0a:e2:04:6a:5b:48:d3:17:8b:84:f6:94:8c:03:81:a3:cf:97: 88:bb:b9:af:09:2b:56:9d:9a:cb:2b:8d:85:5a:12:e8:08:66: bb:28:2c:da:e8:76:46:d7:a7:91:c6:a0:4d:1a:ac:3d:ce:39: 38:db:4b:29:20:fb:d4:a4:8c:1a:ec:4e:ad:65:f3:0f:cc:20: d3:84:c8:cf:5d:ef:fc:dc:88:1c:bb:ff:55:10:ed:4c:ff:bf: 59:66:09:8e:13:f4:31:bd:30:5b:7a:f8:e9:6f:22:0a:46:ba: 73:e6:6a:57:c9:90:c7:cb:67:0a:80:5b:26:65:f7:c6:3b:61: e6:ea:be:b4:28:5f:f2:ad:28:15:1d:39:a7:18:01:22:0b:c6: 37:c6:15:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4ZLI0Cucwhh1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YjAxZTg0NjEtN2Q1OC00ZTMwLWE1YzYtZWI3MDA4ODI2NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9/qiWuzxbHI/mcKe6/mOCME4LgLsMHSulf5 vIuzosdNqP/FbG/3IKt5k+klBTbS76CGDvIqZ9Q47djIfWh7cYmKrq7aP4Xh1vqb B1X4cBULGofIvNh0sf02W4rUoiPVlOOf5bcGYhuW7DGZ3MxV74k8+xyZAqK7lkrF bSOFmXCG8GSZNi3KT8HkoPkBiDnbDZYEQ79hIZBR0m8coUOFSrnlHu3wTNtnfi4F xZM6rS1OIDnO+T+7pkrcW3MFWiry07Ah2Opk/D+w6cUQRmYm5OOy2AibXZZC87hg 3yjgjeQxs3obF/9E/x2DUFqyurHeBE1uX4M84aXRtRYF7dSNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcWYz2G2MHX6cmWAvWjaVOG9uxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvMTkxZTE1NmQtZGY0Ny0z NDhkLWFiNjktNjYyODVkMWFlM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKXgGPucQtdHU/8Ta7PCVjToBvLPl1wRj9VxDoQtFGw970TcqepA/WK M1j7ulcuY4olptEZvh8cZr9TUmkdBITpBZizFanYKZGyx8dARhMPQOmX+BiOf1Ye Qcana5Z2PH7g/9GK+rojpd5xwQriBGpbSNMXi4T2lIwDgaPPl4i7ua8JK1admssr jYVaEugIZrsoLNrodkbXp5HGoE0arD3OOTjbSykg+9SkjBrsTq1l8w/MINOEyM9d 7/zciBy7/1UQ7Uz/v1lmCY4T9DG9MFt6+OlvIgpGunPmalfJkMfLZwqAWyZl98Y7 YebqvrQoX/KtKBUdOacYASILxjfGFbk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:09 2025 by rpki-client