$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa File: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (raw, json) Hash identifier: 2y4FSWe1g7nhOOMfjlG9YJyHIJ8MINYZdp7ivJ2OnpI= Subject key identifier: 38:4D:34:7B:02:3D:81:A0:5B:B4:B0:55:CE:26:8A:B8:26:C7:8D:D7 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584965E972F9B7DB9E695075BC00 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 41458 IP address blocks: 162.210.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:72:f9:b7:db:9e:69:50:75:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=ed0c2cb8-b76e-4bb1-95fd-e0da574de7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:20:0d:82:bb:9b:06:a4:34:9e:d1:6c:9e: 93:5a:92:bf:0b:4a:46:20:66:48:ab:75:9a:e6:21: 17:d1:29:3e:65:29:53:39:2f:0e:a3:b5:3e:9b:40: d8:59:de:1f:b5:b5:56:0e:40:9e:51:47:1a:26:40: e2:52:6d:ad:7d:7f:f3:6c:4f:55:3e:3c:d8:34:5b: 11:0d:72:07:2b:a7:cd:15:2d:5d:fb:e2:7c:39:06: af:dc:f0:51:15:af:62:a0:69:2a:ba:36:66:c9:8f: 7c:6a:6a:ac:80:18:43:9d:a5:d2:dc:75:65:bc:49: 75:eb:28:15:e6:40:37:41:bf:ce:21:fd:cf:f1:fe: 60:b9:2b:49:18:02:7f:e4:d9:47:1d:6d:2a:1b:49: 84:0f:84:cb:b9:e7:04:ca:54:00:61:77:5b:28:2a: 76:cc:2a:ee:02:6d:d9:a6:e5:2f:90:48:4e:86:cf: 40:ff:ad:2c:61:ff:11:db:50:5f:b1:c7:8d:02:92: e4:79:94:60:4b:c2:b0:fb:83:3d:dd:ca:93:53:c9: bd:d3:e4:34:f4:00:76:51:06:2b:3c:bd:44:be:ee: 25:76:a4:d2:68:ab:00:24:8a:7c:9e:32:03:75:ab: 3d:03:48:9a:66:71:e9:13:29:9c:b8:63:ef:da:14: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4D:34:7B:02:3D:81:A0:5B:B4:B0:55:CE:26:8A:B8:26:C7:8D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: 162.210.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b0:71:1d:bf:d2:43:cf:13:82:52:88:68:59:7b:2e:2d:12: 84:83:69:a8:76:00:cd:1d:a0:84:f3:22:b3:01:86:78:f8:80: 54:27:7f:93:5f:c3:59:97:68:8c:50:77:92:b6:f5:38:ec:61: de:c1:4f:f3:4f:1e:f9:e3:00:92:29:56:2e:0a:cd:d8:da:60: 70:03:5a:fc:77:85:2c:99:9a:56:90:30:96:63:21:c3:ea:36: 08:47:e3:7c:df:bd:fc:f8:86:3f:11:9e:12:e9:e5:7c:b6:0f: ce:31:e2:2f:c2:eb:45:60:ad:bc:b8:b2:69:0b:c0:b8:08:0b: da:56:02:05:57:8a:c3:0d:cc:cf:fe:c0:98:a2:14:7f:4b:c9: 53:74:e6:9b:30:8b:8e:71:4c:0c:22:f7:4a:4c:5a:fb:c4:cf: 67:83:45:86:9b:62:87:e7:8f:c9:0c:7f:1c:4f:8c:cb:aa:f7: 09:ac:eb:f8:4c:76:bc:b0:cf:3d:ac:30:69:6d:f6:bd:36:78: 7e:2c:47:63:79:1f:44:86:87:5c:d2:f6:f1:e6:8b:48:f2:4f: ca:a3:27:fa:67:10:53:c6:cf:6f:42:5d:de:bb:b4:4d:ea:70: 26:8a:fc:34:5c:3b:2a:4c:3f:ec:c9:e9:4f:c5:23:0d:91:43: 51:94:fb:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XL5t9ueaVB1vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZWQwYzJjYjgtYjc2ZS00YmIxLTk1ZmQtZTBkYTU3NGRlN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIwgDYK7mwakNJ7RbJ6TWpK/C0pGIGZIq3Wa 5iEX0Sk+ZSlTOS8Oo7U+m0DYWd4ftbVWDkCeUUcaJkDiUm2tfX/zbE9VPjzYNFsR DXIHK6fNFS1d++J8OQav3PBRFa9ioGkqujZmyY98amqsgBhDnaXS3HVlvEl16ygV 5kA3Qb/OIf3P8f5guStJGAJ/5NlHHW0qG0mED4TLuecEylQAYXdbKCp2zCruAm3Z puUvkEhOhs9A/60sYf8R21BfsceNApLkeZRgS8Kw+4M93cqTU8m90+Q09AB2UQYr PL1Evu4ldqTSaKsAJIp8njIDdas9A0iaZnHpEymcuGPv2hSBAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhNNHsCPYGgW7SwVc4mirgmx43XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvOTdiOGM2NDAtZmIyYy0z NjllLTkwZDctOTBhZGUxMTQyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiwcR2/0kPPE4JSiGhZey4tEoSDaah2AM0doITzIrMBhnj4gFQnf5Nf w1mXaIxQd5K29TjsYd7BT/NPHvnjAJIpVi4KzdjaYHADWvx3hSyZmlaQMJZjIcPq NghH43zfvfz4hj8RnhLp5Xy2D84x4i/C60Vgrby4smkLwLgIC9pWAgVXisMNzM/+ wJiiFH9LyVN05pswi45xTAwi90pMWvvEz2eDRYabYofnj8kMfxxPjMuq9wms6/hM drywzz2sMGlt9r02eH4sR2N5H0SGh1zS9vHmi0jyT8qjJ/pnEFPGz29CXd67tE3q cCaK/DRcOypMP+zJ6U/FIw2RQ1GU+wM= -----END CERTIFICATE-----Generated at Wed Apr 16 14:09:17 2025 by rpki-client