$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3fca8b43-eadd-361e-b017-75be3cb82a6a.roa File: 3fca8b43-eadd-361e-b017-75be3cb82a6a.roa (raw, json) Hash identifier: dgJ4up5/muNXLKFoCniBDpv9/P+ERTbSTr+2nXZbscU= Subject key identifier: 0C:DA:2D:3D:36:37:8F:A0:86:9D:76:0E:16:DD:01:25:D0:B7:DB:39 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64311F608C1D3D88FFDB72 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3fca8b43-eadd-361e-b017-75be3cb82a6a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 162.246.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:1f:60:8c:1d:3d:88:ff:db:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=342216ab-6b34-4bb4-8fa4-f90862a4c235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:56:23:a9:f5:d0:18:2a:73:59:32:a6:c1: 9a:a8:fc:d6:d8:db:aa:a3:48:01:30:b7:69:f6:62: f8:32:e5:56:d8:59:06:2e:fa:27:0b:13:37:c1:bf: e1:82:b2:c8:48:69:94:1c:32:f7:bc:83:a1:d3:a0: c9:7c:bb:06:7e:ad:52:20:31:fd:af:bc:11:2f:8c: ee:e8:35:8a:43:9a:66:f7:a7:83:77:b3:7b:d5:52: 49:b4:d7:84:85:e2:68:c8:3d:97:a5:2f:4b:ac:5b: 32:04:61:94:ee:19:cd:0b:24:75:c2:03:21:19:a3: 11:15:a4:5c:25:fa:86:2b:48:0f:c9:ca:cb:84:b3: b4:6e:c1:42:28:27:50:b1:02:6d:d6:6c:a2:f8:15: b8:67:58:8f:2c:38:d1:5d:16:47:ee:e4:3e:0d:92: e8:77:82:f3:0f:b5:9f:1c:16:4f:8e:e4:01:9b:8b: b6:d0:be:3c:69:6a:93:fb:ba:4b:1f:45:a0:c6:bf: 77:1b:12:07:df:43:30:80:ab:16:c6:76:fe:ff:f7: 79:5c:85:5d:bd:9e:a2:f3:f0:77:83:d4:f5:9c:e3: 8a:49:34:e6:2b:6e:ef:d3:56:35:7e:ed:fd:8a:c0: 15:91:a8:cf:a8:07:0e:03:8f:45:fb:b9:ad:c9:bb: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:2D:3D:36:37:8F:A0:86:9D:76:0E:16:DD:01:25:D0:B7:DB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3fca8b43-eadd-361e-b017-75be3cb82a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.246.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:23:c3:d1:c8:e8:cb:a6:16:ee:5b:1c:6e:7e:cd:16:8f:10: ad:13:f7:33:a8:73:a4:05:ef:83:8c:92:74:8c:9d:1a:40:93: dc:83:27:19:1e:4e:d4:44:15:e6:b1:24:c8:ef:66:b0:cd:cf: 89:c2:5f:b8:ce:d8:e5:07:60:cb:ab:8b:d2:31:93:2f:dd:c6: 54:c2:20:47:b2:6d:3f:6c:9f:ad:b9:5d:2a:3f:0d:02:fa:ad: f5:f7:e7:c7:cb:57:8d:62:36:38:c6:7f:d2:bb:7f:55:cf:b3: 14:65:51:2b:57:41:07:0f:35:2b:30:ff:c4:bd:76:43:92:66: 34:4b:3d:b7:30:58:e8:6e:8e:fc:60:53:99:1a:52:fc:68:11: 4e:0d:0d:6d:0e:9d:72:6e:32:93:ff:a9:69:1f:74:ce:6f:4e: f6:56:af:1e:6c:d1:bc:d6:a5:9f:a0:2a:87:7c:d3:45:53:b4: 30:2e:ae:2a:e7:82:fc:5a:00:87:88:38:7d:73:dd:dc:17:5d: 77:66:ae:d9:ba:1b:f7:49:4c:cb:62:e7:f6:d1:d2:03:ce:71: 7d:80:a2:de:05:48:a3:4c:ef:e4:a6:24:78:3c:08:97:15:81: e2:11:18:a8:d8:1e:86:4f:2a:a6:fe:4b:ab:3d:58:b0:7b:a5: 14:f4:25:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDEfYIwdPYj/23IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MzQyMjE2YWItNmIzNC00YmI0LThmYTQtZjkwODYyYTRjMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ5WI6n10Bgqc1kypsGaqPzW2Nuqo0gBMLdp 9mL4MuVW2FkGLvonCxM3wb/hgrLISGmUHDL3vIOh06DJfLsGfq1SIDH9r7wRL4zu 6DWKQ5pm96eDd7N71VJJtNeEheJoyD2XpS9LrFsyBGGU7hnNCyR1wgMhGaMRFaRc JfqGK0gPycrLhLO0bsFCKCdQsQJt1myi+BW4Z1iPLDjRXRZH7uQ+DZLod4LzD7Wf HBZPjuQBm4u20L48aWqT+7pLH0Wgxr93GxIH30MwgKsWxnb+//d5XIVdvZ6i8/B3 g9T1nOOKSTTmK27v01Y1fu39isAVkajPqAcOA49F+7mtybuwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzaLT02N4+ghp12DhbdASXQt9s5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2ZjYThiNDMtZWFkZC0z NjFlLWIwMTctNzViZTNjYjgyYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0jw9HI6MumFu5bHG5+zRaPEK0T9zOoc6QF74OMknSMnRpAk9yDJxke TtREFeaxJMjvZrDNz4nCX7jO2OUHYMuri9Ixky/dxlTCIEeybT9sn625XSo/DQL6 rfX358fLV41iNjjGf9K7f1XPsxRlUStXQQcPNSsw/8S9dkOSZjRLPbcwWOhujvxg U5kaUvxoEU4NDW0OnXJuMpP/qWkfdM5vTvZWrx5s0bzWpZ+gKod800VTtDAurirn gvxaAIeIOH1z3dwXXXdmrtm6G/dJTMti5/bR0gPOcX2Aot4FSKNM7+SmJHg8CJcV geIRGKjYHoZPKqb+S6s9WLB7pRT0Jfg= -----END CERTIFICATE-----Generated at Sat Apr 12 12:50:47 2025 by rpki-client