$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa File: 8a9eb713-161d-3028-8382-e60a2ef1c07d.roa (raw, json) Hash identifier: gqaeQ648id8swq2Yj+MNpqJSjjIYkGdivpAZ9c/W5IA= Subject key identifier: 4B:7F:CD:B8:03:14:B5:13:AF:3F:A4:2E:D4:6D:9A:5C:5D:D8:33:2C Certificate issuer: /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Certificate serial: 010D0C9F4328584A2ABADCE5800508BE8AD7CA58 Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 17 IP address blocks: 163.245.0.0/16 maxlen: 24 205.215.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:dc:e5:80:05:08:be:8a:d7:ca:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=d191c6cc-ff7e-4c14-80ba-c82cfb13d88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:31:94:f3:8b:e3:66:13:30:57:82:d1:bf: b8:16:3e:5a:a3:2b:aa:fb:2b:16:40:f7:84:ec:12: ba:69:f5:98:df:e4:ee:17:e7:e8:30:f6:3e:32:2a: 57:d0:c2:5b:da:09:58:93:e6:67:b6:41:33:44:1e: 2c:1d:54:66:50:15:63:fe:15:31:14:b0:3c:42:72: d0:cd:f8:a3:26:c5:31:42:c3:d1:81:d1:97:55:df: f0:ab:cb:2a:18:fd:7c:1a:fa:49:78:86:f6:21:10: 5e:a5:25:f3:98:bf:d5:c1:48:e1:de:c1:b2:62:b5: c0:b1:b0:5e:6f:21:38:ab:79:2b:24:f0:51:e9:a4: e3:10:c6:93:81:d4:1a:4d:0e:bf:22:0b:0e:36:5d: 37:c4:58:4b:d3:76:8c:c5:d2:bb:bc:fb:d1:d9:54: b6:c2:4d:e1:df:ce:0c:98:92:3d:5d:13:a7:b5:6d: 14:c7:89:ec:a5:36:0f:0e:0a:32:ee:43:0c:a1:6f: 66:3a:42:49:d3:7a:3a:89:70:79:8c:d8:2f:9c:c8: 30:05:8b:4a:d6:e4:80:8e:c9:b1:4c:63:52:12:79: b2:e4:82:37:2f:ce:f9:fe:26:32:e6:84:0a:e4:d6: 0b:de:85:84:07:89:d0:31:6a:2a:0e:b6:4e:29:84: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:CD:B8:03:14:B5:13:AF:3F:A4:2E:D4:6D:9A:5C:5D:D8:33:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl X509v3 Authority Key Identifier: keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer sbgp-ipAddrBlock: critical IPv4: 163.245.0.0/16 205.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1e:13:43:ef:fe:bb:96:3a:17:42:6c:33:b4:f5:a5:52:0f: 9c:cc:86:c4:95:f0:eb:ae:79:a4:de:40:7f:ad:37:b3:1c:91: d4:b3:53:bc:ad:18:96:5f:4a:21:a7:62:78:50:ed:d7:76:53: 8c:99:c7:66:b8:e6:8a:6c:72:46:86:d9:4a:9e:9c:2b:0b:21: b6:96:1e:04:0a:3c:5c:1a:d9:de:8f:69:e7:10:c1:31:cb:3d: c0:04:9a:5c:2a:58:5a:0b:f6:4f:8d:bc:ba:3c:bd:5a:6c:0b: b8:0b:19:7d:54:05:a8:f2:8b:e3:b9:d9:f1:68:1e:8d:59:62: 47:73:73:51:5f:a1:f6:f1:af:90:49:da:98:b4:82:a4:b9:ad: 75:4f:d2:cf:64:29:48:dd:59:be:e2:90:58:33:18:fd:19:5f: 29:11:a0:69:e1:e9:72:df:f6:ad:ba:9f:d3:8d:74:48:a9:aa: 26:11:9e:45:0c:8b:7e:a7:f2:fb:8d:ca:1e:7b:2c:fc:e8:4e: f7:06:07:0e:da:68:2b:a8:2a:31:3f:cc:cd:0e:de:b0:55:6f: c9:fb:84:51:fd:4a:00:cb:05:38:e3:08:5d:c3:c8:37:e9:e8: b4:ab:65:c7:7c:8a:dd:c8:61:14:3f:9b:7f:fc:58:f6:66:fe: ce:af:ea:22 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEoqutzlgAUIvorXylgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRm YmJhMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDE5MWM2Y2MtZmY3ZS00YzE0LTgwYmEtYzgyY2ZiMTNkODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DoxlPOL42YTMFeC0b+4Fj5aoyuq+ysWQPeE 7BK6afWY3+TuF+foMPY+MipX0MJb2glYk+ZntkEzRB4sHVRmUBVj/hUxFLA8QnLQ zfijJsUxQsPRgdGXVd/wq8sqGP18GvpJeIb2IRBepSXzmL/VwUjh3sGyYrXAsbBe byE4q3krJPBR6aTjEMaTgdQaTQ6/IgsONl03xFhL03aMxdK7vPvR2VS2wk3h384M mJI9XROntW0Ux4nspTYPDgoy7kMMoW9mOkJJ03o6iXB5jNgvnMgwBYtK1uSAjsmx TGNSEnmy5II3L875/iYy5oQK5NYL3oWEB4nQMWoqDrZOKYTWlQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFEt/zbgDFLUTrz+kLtRtmlxd2DMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZTZl MjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvOGE5ZWI3MTMtMTYxZC0z MDI4LTgzODItZTYwYTJlZjFjMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWU2ZTI2MGMtNDIxZC00OGMzLWI0 N2QtZDc2YWMwNzRmYmJhL2FlNmUyNjBjLTQyMWQtNDhjMy1iNDdkLWQ3NmFjMDc0 ZmJiYS5jcmwwHwYDVR0jBBgwFoAUdJNgXKylcmMaureVLt1nAoPePOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZh YzA3NGZiYmEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAo/UDBAbN 10AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAGx4TQ+/+u5Y6F0JsM7T1pVIPnMyGxJXw6655pN5Af603sxyR 1LNTvK0Yll9KIadieFDt13ZTjJnHZrjmimxyRobZSp6cKwshtpYeBAo8XBrZ3o9p 5xDBMcs9wASaXCpYWgv2T428ujy9WmwLuAsZfVQFqPKL47nZ8WgejVliR3NzUV+h 9vGvkEnamLSCpLmtdU/Sz2QpSN1ZvuKQWDMY/RlfKRGgaeHpct/2rbqf0410SKmq JhGeRQyLfqfy+43KHnss/OhO9wYHDtpoK6gqMT/MzQ7esFVvyfuEUf1KAMsFOOMI XcPIN+notKtlx3yK3chhFD+bf/xY9mb+zq/qIg== -----END CERTIFICATE-----Generated at Sat Jun 14 20:59:25 2025 by rpki-client