$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4176f384-feb0-327c-acd4-b0bff9c6eafc.roa File: 4176f384-feb0-327c-acd4-b0bff9c6eafc.roa (raw, json) Hash identifier: huS0wCUY9s76Hxhsj7CmhKT3I1JCk+uQz13o7qMQzoU= Subject key identifier: 64:26:B3:BC:11:B4:48:F0:13:14:15:39:5F:D5:D5:67:72:FA:67:F2 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642E78B1F018996079EC80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4176f384-feb0-327c-acd4-b0bff9c6eafc.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 162.248.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:78:b1:f0:18:99:60:79:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=90672d96-6696-4009-a182-5b51f2eb240c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:1a:d2:2a:0d:f2:cb:3b:2b:4c:6c:85:ad: e7:3a:b9:64:c0:87:a4:89:fc:14:d2:5f:d8:b2:f2: e7:da:1b:9c:2a:83:ee:83:fa:3c:91:ab:53:44:c9: 9a:84:9f:0c:11:31:46:1b:39:59:d4:37:1b:5d:c1: b4:31:84:f6:7a:8a:53:b9:e8:40:e4:a1:16:d1:23: b4:20:9f:3b:20:83:8d:3e:52:f4:1c:bf:ae:3e:ff: 72:1e:b0:b1:6a:3c:8d:9c:df:65:33:e1:a6:09:b7: 56:d5:ee:b4:9f:02:6d:5c:59:23:ba:b0:1b:55:fe: 0c:18:79:07:2a:5a:bb:27:a6:da:9f:50:8d:a5:9b: 56:4b:b5:2d:82:47:9c:fd:a7:fc:d5:23:6b:24:20: 77:fc:c2:33:ff:7d:c7:51:63:0d:46:e2:98:4b:7f: d6:f5:f2:f2:31:68:b3:c4:50:96:34:c7:9c:29:24: 58:04:0b:cd:88:64:92:65:bb:cb:bf:1c:15:9c:d6: 1a:24:33:f1:66:2a:84:b2:33:2d:d6:4d:90:a0:44: 9b:ba:b1:69:7d:ad:74:a2:c1:2b:50:b5:e2:ee:c6: 78:21:d3:f7:20:d2:29:ff:36:e8:b0:bc:5c:2a:db: 3d:1b:4c:10:93:57:f9:f5:68:e6:ee:c1:16:5a:fb: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:B3:BC:11:B4:48:F0:13:14:15:39:5F:D5:D5:67:72:FA:67:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4176f384-feb0-327c-acd4-b0bff9c6eafc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.248.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:95:38:f3:c3:71:7e:77:d3:16:3f:51:2c:53:45:d2:6e:c9: 56:76:b0:71:8e:ca:7e:c5:b6:9f:5f:5f:7f:4f:a2:09:13:f4: e7:a5:69:59:d3:31:c1:f8:fb:3f:87:50:d5:a1:9a:60:39:3f: ff:b9:1d:7e:52:24:19:43:5a:d1:af:a6:7c:bb:77:31:c8:e6: 9e:b9:f3:28:32:fa:f6:21:29:06:d6:21:be:2b:e8:4c:65:02: 2a:49:bb:bb:ff:59:08:f7:36:c7:11:00:79:08:e4:3d:0d:4f: 5a:cf:36:5b:73:e1:de:d4:33:f9:62:2b:98:89:3c:1b:70:51: d5:9b:02:8f:e2:0b:38:78:0c:24:27:48:f9:e8:00:ad:53:4f: 0a:bb:c5:d3:d0:22:68:33:4b:f5:9a:cb:d5:1d:ac:c4:20:19: e9:44:19:02:84:de:f3:2e:22:4d:b3:f2:19:98:d0:71:9e:d1: 86:9f:67:f8:99:0e:3a:f4:51:ce:e8:7e:d7:f4:15:b5:21:76: e5:66:6f:0d:bd:1d:cd:87:cd:e7:e2:3d:d4:3b:8d:96:d7:e1: f8:10:53:37:f7:90:59:60:2b:0a:45:0c:ef:d3:92:fb:5d:c5: bb:90:1e:cf:e5:d4:b7:a4:f9:bf:9e:c7:27:54:c3:dd:61:4d: 41:d2:b6:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC54sfAYmWB57IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTA2NzJkOTYtNjY5Ni00MDA5LWExODItNWI1MWYyZWIyNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFIa0ioN8ss7K0xsha3nOrlkwIekifwU0l/Y svLn2hucKoPug/o8katTRMmahJ8METFGGzlZ1DcbXcG0MYT2eopTuehA5KEW0SO0 IJ87IIONPlL0HL+uPv9yHrCxajyNnN9lM+GmCbdW1e60nwJtXFkjurAbVf4MGHkH Klq7J6ban1CNpZtWS7Utgkec/af81SNrJCB3/MIz/33HUWMNRuKYS3/W9fLyMWiz xFCWNMecKSRYBAvNiGSSZbvLvxwVnNYaJDPxZiqEsjMt1k2QoESburFpfa10osEr ULXi7sZ4IdP3INIp/zbosLxcKts9G0wQk1f59Wjm7sEWWvskSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQms7wRtEjwExQVOV/V1Wdy+mfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDE3NmYzODQtZmViMC0z MjdjLWFjZDQtYjBiZmY5YzZlYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqVOPPDcX530xY/USxTRdJuyVZ2sHGOyn7Ftp9fX39PogkT9OelaVnT McH4+z+HUNWhmmA5P/+5HX5SJBlDWtGvpny7dzHI5p658ygy+vYhKQbWIb4r6Exl AipJu7v/WQj3NscRAHkI5D0NT1rPNltz4d7UM/liK5iJPBtwUdWbAo/iCzh4DCQn SPnoAK1TTwq7xdPQImgzS/Way9UdrMQgGelEGQKE3vMuIk2z8hmY0HGe0YafZ/iZ Djr0Uc7oftf0FbUhduVmbw29Hc2HzefiPdQ7jZbX4fgQUzf3kFlgKwpFDO/Tkvtd xbuQHs/l1Lek+b+exydUw91hTUHStsY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:53 2025 by rpki-client