$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/0ce99c8f-8a53-38bb-a8fa-f3b075f77b78.roa File: 0ce99c8f-8a53-38bb-a8fa-f3b075f77b78.roa (raw, json) Hash identifier: k3GNG1HoT8pBCCurlw2kuhrQIKhj41Af8C+8NJU/WTQ= Subject key identifier: A0:1D:01:A7:14:26:3A:A1:3B:CB:5F:1E:59:A2:AB:F5:47:7B:05:39 Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Certificate serial: 010D0C9F432858491246AA98B4BBCD283C34C000 Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/0ce99c8f-8a53-38bb-a8fa-f3b075f77b78.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 399122 IP address blocks: 162.251.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:aa:98:b4:bb:cd:28:3c:34:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=eaf0e8f6-9ad8-4a08-9a78-e29dcd05946d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:8c:91:ab:74:45:e2:b0:bc:bd:ba:5c:9f: 84:34:a5:ac:bd:d7:13:85:db:8d:cf:1d:56:39:dd: 6d:b0:0d:99:04:d7:2d:50:4a:be:f8:57:5e:db:fd: 9f:14:75:a5:c3:f8:29:49:15:71:92:68:c2:7d:a5: d7:61:74:17:87:a2:eb:20:b8:3e:53:6e:05:ad:96: fd:f3:f9:b2:f7:cf:fb:21:3f:4a:8b:67:99:8e:33: ea:23:7a:fa:f0:4b:b0:8f:09:05:87:02:e5:fa:fe: d8:40:52:f7:72:6d:a4:91:d6:47:79:f5:82:2d:bd: d7:e0:c8:0e:b1:7a:f0:44:2e:e5:ed:18:fc:ea:11: 41:66:ad:99:90:96:3a:98:72:54:6e:98:1a:72:ae: bb:37:2e:10:32:d2:58:cb:f6:2d:2d:e0:be:c1:27: 79:9a:b4:6f:f9:77:46:75:34:8d:30:c4:ed:f7:ea: ca:98:86:8a:fc:35:bc:e9:02:92:a2:a1:c0:17:b1: 61:51:d8:50:e8:83:75:f7:0e:f1:ea:e1:5e:40:da: a7:80:99:e6:bd:b5:01:99:b1:27:80:b3:67:4d:55: 7a:f5:9a:76:db:c6:2f:39:df:c1:da:e5:0c:40:1b: 78:90:94:2e:6d:97:62:df:30:b5:e2:3f:cf:26:ab: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1D:01:A7:14:26:3A:A1:3B:CB:5F:1E:59:A2:AB:F5:47:7B:05:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/0ce99c8f-8a53-38bb-a8fa-f3b075f77b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl X509v3 Authority Key Identifier: keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer sbgp-ipAddrBlock: critical IPv4: 162.251.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:77:6b:32:b4:b9:39:9c:bc:25:74:7d:9f:09:78:6d:6b:68: 10:e9:68:cc:d4:7b:05:e4:55:2a:a2:65:53:92:05:85:07:0a: 41:00:1f:06:d6:10:f6:39:f3:f1:82:6d:96:bd:1a:b2:26:70: 68:61:3a:77:62:26:8e:aa:a2:74:df:71:e1:05:8e:b7:3b:fb: 3d:2b:c6:0e:a7:1f:44:c6:21:54:23:ea:26:19:aa:96:1c:a1: a4:68:4a:2a:ec:90:d3:02:e1:36:1a:ba:90:b4:2a:69:a1:8b: 1b:6e:d9:b3:98:24:fb:8f:9f:be:b9:6f:66:a6:a3:b5:08:c3: 03:68:f3:80:a9:53:86:b0:36:6f:22:ef:77:87:e0:94:b5:e4: 92:d3:f4:9d:e8:f4:49:4f:e9:b9:37:f6:ac:ad:dd:55:9b:e1: 3f:b5:eb:c8:47:b9:eb:76:f0:60:94:7f:55:d0:d0:fe:5c:10: 3b:10:23:ad:24:3e:6e:92:41:4f:95:37:5b:41:56:e3:95:88: f8:4b:29:a0:e5:b1:af:34:d7:e1:86:c5:d1:4b:f4:40:53:76: ec:a4:f0:4b:86:d6:1b:38:65:2b:d2:10:1d:bc:31:52:85:00: 6d:05:2f:27:0c:00:a9:3a:2a:14:dc:e8:a9:32:e6:cf:7e:20: 20:13:70:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqqYtLvNKDw0wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0 NGM1MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZWFmMGU4ZjYtOWFkOC00YTA4LTlhNzgtZTI5ZGNkMDU5NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioaMkat0ReKwvL26XJ+ENKWsvdcThduNzx1W Od1tsA2ZBNctUEq++Fde2/2fFHWlw/gpSRVxkmjCfaXXYXQXh6LrILg+U24FrZb9 8/my98/7IT9Ki2eZjjPqI3r68EuwjwkFhwLl+v7YQFL3cm2kkdZHefWCLb3X4MgO sXrwRC7l7Rj86hFBZq2ZkJY6mHJUbpgacq67Ny4QMtJYy/YtLeC+wSd5mrRv+XdG dTSNMMTt9+rKmIaK/DW86QKSoqHAF7FhUdhQ6IN19w7x6uFeQNqngJnmvbUBmbEn gLNnTVV69Zp228YvOd/B2uUMQBt4kJQubZdi3zC14j/PJquFywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAdAacUJjqhO8tfHlmiq/VHewU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2 MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvMGNlOTljOGYtOGE1My0z OGJiLWE4ZmEtZjNiMDc1Zjc3Yjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0 NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy NDkzNDQ0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh3azK0uTmcvCV0fZ8JeG1raBDpaMzUewXkVSqiZVOSBYUHCkEAHwbW EPY58/GCbZa9GrImcGhhOndiJo6qonTfceEFjrc7+z0rxg6nH0TGIVQj6iYZqpYc oaRoSirskNMC4TYaupC0Kmmhixtu2bOYJPuPn765b2amo7UIwwNo84CpU4awNm8i 73eH4JS15JLT9J3o9ElP6bk39qyt3VWb4T+168hHuet28GCUf1XQ0P5cEDsQI60k Pm6SQU+VN1tBVuOViPhLKaDlsa801+GGxdFL9EBTduyk8EuG1hs4ZSvSEB28MVKF AG0FLycMAKk6KhTc6Kky5s9+ICATcLo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:28:02 2025 by rpki-client