$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa File: 871747a9-a8a9-3210-938c-b2f4e50362f3.roa (raw, json) Hash identifier: aus2UXvQ7UjGw+bZkF0VMWC+LO/b9u/Yn8A1hSR3UkE= Subject key identifier: EB:78:E3:A5:7E:7B:5F:AF:53:8C:8B:14:E2:DD:E1:BE:1B:33:6F:F9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642E5B6F7FF20C19273C80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 162.222.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:5b:6f:7f:f2:0c:19:27:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=9e9c2595-c028-42f4-9f8d-34a44a5bd71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:63:ce:8f:85:e6:4f:41:63:ad:8c:45:0f: 88:e7:5e:f5:b5:3c:98:43:0e:f5:69:2d:4a:14:83: 34:d9:a4:cf:4f:06:23:33:b9:16:34:76:76:cd:44: 8a:86:a9:61:65:8a:25:f4:ad:07:4f:0b:e4:97:b5: ab:bc:10:22:b5:1e:59:8e:7b:76:8f:61:95:bd:bf: a8:82:58:fb:61:39:5a:24:7e:ce:0b:44:66:98:49: 1f:17:2b:fe:49:31:16:96:71:40:ff:98:a9:d8:5c: 9f:5a:d7:bb:8b:e1:63:6d:83:49:87:d5:d1:09:b0: 9e:39:47:dc:ff:6d:0e:cd:d5:9c:22:fb:17:9f:c4: 5d:f3:08:c5:e8:b7:78:24:9c:e8:ae:a0:40:87:7b: e4:8d:6d:86:05:6c:09:40:94:ac:3a:90:fb:3a:6a: 04:60:bd:79:8d:20:0c:1f:23:a5:af:0f:fe:5c:e5: 83:f2:ab:1b:9c:8b:64:a0:12:85:57:48:7d:cf:28: e9:4a:17:a4:18:32:f4:1f:69:37:91:cf:23:66:81: 40:d7:b6:9f:19:4f:75:08:4f:04:62:39:b7:8d:25: ad:72:29:5c:48:6f:92:62:9b:fc:a5:ae:62:21:eb: fe:a5:ab:53:ed:18:77:8e:da:1b:42:f2:6e:fd:7a: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:78:E3:A5:7E:7B:5F:AF:53:8C:8B:14:E2:DD:E1:BE:1B:33:6F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.222.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:de:71:34:ef:62:5b:cc:31:c8:1b:a3:48:ed:e4:20:ec:e5: 7d:39:06:0c:a9:fb:ad:da:ae:f7:92:b4:4e:d9:3e:a6:ef:55: 67:de:8c:5f:26:47:a5:23:9e:aa:0a:1f:a8:20:b4:2d:e0:64: e1:78:21:45:9c:7c:0d:f6:7e:6a:27:f3:00:17:80:41:83:28: 25:c1:49:5d:ff:cd:4c:db:ef:4d:59:fe:69:01:80:af:12:42: 0b:66:a3:c5:b4:f8:3a:68:0e:61:69:c2:f7:b1:88:15:56:00: 47:d3:50:3d:e7:6e:d1:56:37:eb:1b:64:93:f8:8b:fa:01:09: 09:f7:89:8c:87:fd:4b:dd:f3:67:ec:a7:70:1a:29:49:9a:bd: 7e:c8:df:05:18:ba:26:1a:eb:00:1e:e2:81:a8:03:b8:74:74: 8e:b3:a7:74:7d:dc:ec:8a:70:31:55:9f:ea:2c:d7:27:a3:18: b2:d9:04:81:5a:8c:cc:dc:4a:19:a6:b3:4b:1c:80:b6:4e:06: 19:27:95:78:10:21:62:84:55:c9:5e:2f:10:f6:5f:10:15:a5: 2f:0e:eb:69:36:69:eb:a6:47:fd:6e:b6:b9:81:c2:ce:42:2a: fc:cd:57:a0:dc:77:b9:3b:cd:92:25:98:b2:43:4f:b8:77:65: c8:57:c9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC5bb3/yDBknPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OWU5YzI1OTUtYzAyOC00MmY0LTlmOGQtMzRhNDRhNWJkNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh5jzo+F5k9BY62MRQ+I5171tTyYQw71aS1K FIM02aTPTwYjM7kWNHZ2zUSKhqlhZYol9K0HTwvkl7WrvBAitR5Zjnt2j2GVvb+o glj7YTlaJH7OC0RmmEkfFyv+STEWlnFA/5ip2FyfWte7i+FjbYNJh9XRCbCeOUfc /20OzdWcIvsXn8Rd8wjF6Ld4JJzorqBAh3vkjW2GBWwJQJSsOpD7OmoEYL15jSAM HyOlrw/+XOWD8qsbnItkoBKFV0h9zyjpShekGDL0H2k3kc8jZoFA17afGU91CE8E Yjm3jSWtcilcSG+SYpv8pa5iIev+patT7Rh3jtobQvJu/Xq2qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt446V+e1+vU4yLFOLd4b4bM2/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODcxNzQ3YTktYThhOS0z MjEwLTkzOGMtYjJmNGU1MDM2MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELecTTvYlvMMcgbo0jt5CDs5X05Bgyp+63arveStE7ZPqbvVWfejF8m R6UjnqoKH6ggtC3gZOF4IUWcfA32fmon8wAXgEGDKCXBSV3/zUzb701Z/mkBgK8S Qgtmo8W0+DpoDmFpwvexiBVWAEfTUD3nbtFWN+sbZJP4i/oBCQn3iYyH/Uvd82fs p3AaKUmavX7I3wUYuiYa6wAe4oGoA7h0dI6zp3R93OyKcDFVn+os1yejGLLZBIFa jMzcShmms0scgLZOBhknlXgQIWKEVcleLxD2XxAVpS8O62k2aeumR/1utrmBws5C KvzNV6Dcd7k7zZIlmLJDT7h3ZchXyfQ= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:20 2025 by rpki-client