$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa File: 5c1ac775-846b-34c5-befd-aa1852377b7f.roa (raw, json) Hash identifier: n2GsdkcIHyxV3TY35RsnOM48ZyJbd+cX2R3MzhJ2Yns= Subject key identifier: 9D:22:86:45:1C:34:A8:F5:C2:C1:35:96:D1:43:DF:CE:34:77:3F:82 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F43285848CF46346B96EFCC018114DB40 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa Signing time: Sat 08 Feb 2025 02:00:38 +0000 ROA not before: Sat 08 Feb 2025 02:00:38 +0000 ROA not after: Fri 09 May 2025 01:00:38 +0000 asID: 174 IP address blocks: 162.250.96.0/21 maxlen: 24 162.254.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cf:46:34:6b:96:ef:cc:01:81:14:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Feb 8 02:00:38 2025 GMT Not After : May 9 01:00:38 2025 GMT Subject: CN=87e14f23-40bb-4a82-9c06-7ca4ed782abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:78:f4:b2:9e:1d:ac:3d:52:10:bf:4b:b1: 3d:af:a6:96:74:b0:7f:f3:58:69:0a:29:37:af:05: d1:c5:dd:fa:b4:f8:52:cf:6e:34:d8:f6:f1:83:25: b4:0d:44:73:a6:58:32:4d:50:4b:2b:e7:71:0c:72: 8d:2d:71:2d:40:f8:82:71:e9:d4:67:9b:9c:b6:e9: 90:e1:f0:9a:19:b8:d7:f9:3f:5b:99:13:c4:35:22: c8:0a:b9:a4:52:15:d1:47:b5:f3:0a:20:05:93:11: 0f:b7:b1:22:0f:f4:de:36:68:c9:8b:51:ce:2c:57: 70:e3:91:55:0d:00:89:23:3b:72:6a:cd:83:21:8d: 1a:12:6d:36:36:8b:63:8b:77:c9:4f:b0:3b:ec:90: 7b:76:1c:db:3d:5f:57:f7:f2:77:10:d3:c6:25:f4: ea:d9:ed:34:6f:63:94:03:4d:68:4e:79:4b:c0:bc: 4e:10:49:c5:19:f7:87:c7:e2:2c:de:6c:fa:1b:ba: 61:99:a4:f5:a3:15:bb:1c:bc:ef:35:16:c8:53:fb: ae:9f:8c:f2:8b:ec:36:2f:6f:71:41:57:9a:86:4e: bc:3e:dc:d0:40:23:d3:49:b2:ec:8f:5b:82:87:a6: f6:19:50:94:9d:77:f3:b6:8c:e4:7c:7f:ef:5e:66: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:22:86:45:1C:34:A8:F5:C2:C1:35:96:D1:43:DF:CE:34:77:3F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 162.250.96.0/21 162.254.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bf:17:05:71:7f:e9:91:7f:1c:14:d1:e2:7e:6a:a0:b0:06: 56:7f:6d:b3:7e:a1:50:fe:f1:56:84:a9:ec:c6:46:ba:cb:bc: 05:b7:f1:3f:40:4a:00:37:86:eb:2d:34:b6:c4:f0:43:d0:9e: 90:94:da:5a:82:5a:43:bd:0f:74:c0:16:9c:9e:57:e8:cc:ed: ed:d3:94:2d:57:8b:2d:05:1c:25:99:a6:e2:6f:1d:d4:a5:e1: 1e:4e:0b:72:81:d9:d3:2b:f5:9e:f5:bf:43:fd:fd:3a:82:fd: 76:78:d9:ec:68:c9:70:ae:c9:a7:6a:41:75:f3:d9:58:b6:05: 72:11:1e:15:01:39:d7:10:cb:fe:84:b5:5d:88:4e:94:7d:0b: 85:9d:72:3f:cd:f5:2d:6c:9f:76:fc:6c:4c:5d:7a:92:63:8d: bd:78:cc:ff:0d:e0:73:72:aa:68:72:9b:9b:d6:ea:af:2e:62: 2e:ab:e9:3f:8a:87:37:b3:01:aa:dd:de:f9:93:f3:ae:3e:00: 05:6a:c3:ab:31:a4:d0:b3:0d:ea:e0:d4:c3:83:71:19:50:7b: 59:ba:26:57:a1:8c:0b:1d:69:4b:77:b1:e2:eb:24:b2:6e:33: 57:9c:f4:3b:63:25:23:6c:8c:2a:98:15:ca:05:8e:37:64:1f: 49:8c:51:28 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjPRjRrlu/MAYEU20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk ODdlMTRmMjMtNDBiYi00YTgyLTljMDYtN2NhNGVkNzgyYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKR49LKeHaw9UhC/S7E9r6aWdLB/81hpCik3 rwXRxd36tPhSz2402PbxgyW0DURzplgyTVBLK+dxDHKNLXEtQPiCcenUZ5uctumQ 4fCaGbjX+T9bmRPENSLICrmkUhXRR7XzCiAFkxEPt7EiD/TeNmjJi1HOLFdw45FV DQCJIztyas2DIY0aEm02Notji3fJT7A77JB7dhzbPV9X9/J3ENPGJfTq2e00b2OU A01oTnlLwLxOEEnFGfeHx+Is3mz6G7phmaT1oxW7HLzvNRbIU/uun4zyi+w2L29x QVeahk68PtzQQCPTSbLsj1uCh6b2GVCUnXfztozkfH/vXmaICQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ0ihkUcNKj1wsE1ltFD3840dz+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvNWMxYWM3NzUtODQ2Yi0z NGM1LWJlZmQtYWExODUyMzc3YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDovpgAwQD ov4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADO/FwVxf+mRfxwU0eJ+aqCwBlZ/bbN+oVD+8VaEqezGRrrL vAW38T9ASgA3hustNLbE8EPQnpCU2lqCWkO9D3TAFpyeV+jM7e3TlC1Xiy0FHCWZ puJvHdSl4R5OC3KB2dMr9Z71v0P9/TqC/XZ42exoyXCuyadqQXXz2Vi2BXIRHhUB OdcQy/6EtV2ITpR9C4Wdcj/N9S1sn3b8bExdepJjjb14zP8N4HNyqmhym5vW6q8u Yi6r6T+KhzezAard3vmT864+AAVqw6sxpNCzDerg1MODcRlQe1m6JlehjAsdaUt3 seLrJLJuM1ec9DtjJSNsjCqYFcoFjjdkH0mMUSg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:34 2025 by rpki-client