$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/88992465-c0a1-3d7f-838c-a68a989a9a88.roa File: 88992465-c0a1-3d7f-838c-a68a989a9a88.roa (raw, json) Hash identifier: z1YyAkvLthmOEKieG60aCmpm6HOJaheBTaq/6cnOyx0= Subject key identifier: AA:57:21:37:86:07:31:75:32:CC:14:4C:D8:63:E4:A7:F0:41:95:37 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BE034290C9E57E0B7E540 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/88992465-c0a1-3d7f-838c-a68a989a9a88.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 62627 IP address blocks: 63.221.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e0:34:29:0c:9e:57:e0:b7:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=66916497-c1cc-43b1-a244-6fedae6a2993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:19:09:df:14:59:7e:c1:a5:dd:30:eb:71: ad:c0:32:4a:55:e9:d7:b7:d0:6f:f2:fd:9b:3c:e1: 57:ec:87:cc:e0:da:82:d7:d4:45:f6:6a:a2:c2:1b: e9:cb:f0:05:ed:36:d2:f2:ce:db:34:32:8e:63:96: 3a:1b:c7:57:c2:75:44:fc:0d:07:90:8c:5f:cc:c5: b2:9d:7d:e4:91:38:9e:1c:e1:25:10:b9:df:c3:a6: a9:d5:d4:f7:8a:be:28:5b:73:d3:c5:1e:33:d9:d5: 44:65:f3:8c:2a:00:12:90:87:07:df:42:68:f3:05: 12:88:c5:ef:28:3e:4a:75:bc:1b:e1:ad:5a:94:74: b7:04:9f:39:7c:c9:b4:7f:fe:7f:03:c7:c4:02:c0: 77:c8:d1:0a:3f:8e:e4:06:8f:c1:e4:78:f4:ad:b1: 81:d4:92:b2:4b:40:da:81:14:ac:eb:99:f7:99:5b: ef:c3:a5:41:d7:bb:e3:75:de:bf:c7:91:5b:99:fe: d4:96:96:28:11:bf:e8:19:3d:3e:be:65:39:bd:d8: 37:de:c2:58:f7:1c:75:64:ac:12:fa:ca:5a:5a:f8: 3e:18:45:3a:6d:56:6c:f4:cb:da:98:48:75:f7:fb: e4:b8:3d:82:f6:4c:60:d6:c2:a0:66:94:50:15:52: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:21:37:86:07:31:75:32:CC:14:4C:D8:63:E4:A7:F0:41:95:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/88992465-c0a1-3d7f-838c-a68a989a9a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.221.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d5:11:6a:8d:d8:33:a0:a8:ae:9a:f5:ce:a5:f7:98:ca:7b: e7:67:00:62:ef:b2:bb:23:08:ef:97:06:7b:4c:47:ba:30:6e: 73:d8:dd:6a:00:39:d1:74:48:62:ea:0a:25:11:d2:a5:5b:3d: 93:00:61:7b:11:5c:3e:6d:a6:d0:38:c4:fd:1f:d9:db:bc:dc: 31:fc:bd:ba:e6:90:a4:d6:e2:87:ee:f0:20:ea:f9:95:46:22: 4d:87:01:41:a7:ee:39:f4:df:c9:de:00:a8:0e:61:f0:69:95: f2:a9:83:31:9a:2e:fc:fd:ba:87:d1:da:32:b8:94:77:be:52: ae:b2:1c:07:85:5e:a9:22:33:3f:44:a3:3e:ac:7e:05:af:d7: 2f:b2:6e:98:29:6d:13:57:de:8c:8c:b5:65:03:67:4f:22:d3: 26:33:41:29:2e:37:1c:56:44:f9:44:68:7a:26:12:3b:1f:5a: c9:36:27:28:cd:ae:a8:36:fa:93:68:c8:3d:44:0c:f3:81:b9: c9:1e:ef:66:5f:ea:3a:44:1e:97:be:97:0d:ff:b3:0e:b1:81: 4c:8e:07:45:c6:87:bf:58:72:fc:5b:40:0f:4c:72:0d:40:a6: e0:80:53:c6:42:7f:5a:9d:25:a6:dc:b7:ea:72:c2:1b:fb:c8: 43:b6:24:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+A0KQyeV+C35UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NjY5MTY0OTctYzFjYy00M2IxLWEyNDQtNmZlZGFlNmEyOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX8ZCd8UWX7Bpd0w63GtwDJKVenXt9Bv8v2b POFX7IfM4NqC19RF9mqiwhvpy/AF7TbS8s7bNDKOY5Y6G8dXwnVE/A0HkIxfzMWy nX3kkTieHOElELnfw6ap1dT3ir4oW3PTxR4z2dVEZfOMKgASkIcH30Jo8wUSiMXv KD5Kdbwb4a1alHS3BJ85fMm0f/5/A8fEAsB3yNEKP47kBo/B5Hj0rbGB1JKyS0Da gRSs65n3mVvvw6VB17vjdd6/x5Fbmf7UlpYoEb/oGT0+vmU5vdg33sJY9xx1ZKwS +spaWvg+GEU6bVZs9MvamEh19/vkuD2C9kxg1sKgZpRQFVL3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpXITeGBzF1MswUTNhj5KfwQZU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvODg5OTI0NjUtYzBhMS0z ZDdmLTgzOGMtYTY4YTk4OWE5YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP91hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrVEWqN2DOgqK6a9c6l95jKe+dnAGLvsrsjCO+XBntMR7owbnPY3WoA OdF0SGLqCiUR0qVbPZMAYXsRXD5tptA4xP0f2du83DH8vbrmkKTW4ofu8CDq+ZVG Ik2HAUGn7jn038neAKgOYfBplfKpgzGaLvz9uofR2jK4lHe+Uq6yHAeFXqkiMz9E oz6sfgWv1y+ybpgpbRNX3oyMtWUDZ08i0yYzQSkuNxxWRPlEaHomEjsfWsk2JyjN rqg2+pNoyD1EDPOBucke72Zf6jpEHpe+lw3/sw6xgUyOB0XGh79YcvxbQA9Mcg1A puCAU8ZCf1qdJabct+pywhv7yEO2JII= -----END CERTIFICATE-----Generated at Sun Apr 6 08:15:32 2025 by rpki-client