$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa File: aa20e92c-ef1d-3334-9d2a-c581e247163f.roa (raw, json) Hash identifier: xeDDrvqlIBkcTEYaYtptc80WKVdT+FKmDXHNHvuPovQ= Subject key identifier: 40:64:AA:EB:CC:9F:DB:91:A5:9D:08:EE:55:E0:87:DF:AA:21:D4:A8 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584902EC273484ADAC1B8DDD6180 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 198148 IP address blocks: 63.222.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:27:34:84:ad:ac:1b:8d:dd:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=1f93976a-39c2-4b94-85a2-585cd3aab0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:1b:3e:ee:2f:2f:aa:56:44:58:88:0f:fd: 7d:f6:14:87:08:f1:28:52:f4:ae:9a:aa:28:e8:83: e8:4c:ae:40:11:bc:6e:1b:e2:e9:56:76:f9:18:72: 47:53:7d:9b:5c:db:f4:4e:6d:84:6d:6c:6d:3e:5a: e5:53:93:0a:12:68:e6:8b:0a:5c:e3:7c:e2:84:e3: 1c:1b:f5:b6:79:dd:96:05:80:52:17:ff:35:51:f9: b4:9b:3a:8c:f5:0f:f0:fd:53:1a:d5:29:f6:27:e5: 6f:b9:97:bb:90:1a:50:c3:85:2a:5d:4c:63:9b:85: e2:fe:0d:a7:65:b4:d5:91:7f:e0:28:62:a1:f8:1b: df:6c:4d:26:8b:6b:0d:b2:15:fa:36:61:ec:47:5b: 26:49:db:04:ba:b6:a8:b3:55:e2:95:95:54:78:9e: e8:c7:bd:5b:b2:67:fa:61:ea:b5:e3:98:fe:3e:60: fb:e1:1e:9a:e8:81:b3:62:70:da:80:e2:b3:36:9d: 9d:95:33:02:8a:31:68:09:01:a5:a0:5e:3c:3e:7e: bb:b3:92:e3:55:63:c1:80:c4:77:19:b5:53:af:74: 71:63:38:9e:50:18:2d:58:ea:ad:8c:33:9f:ac:76: f3:bc:6c:42:53:e0:4a:54:89:a8:c4:7c:76:cc:50: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:AA:EB:CC:9F:DB:91:A5:9D:08:EE:55:E0:87:DF:AA:21:D4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:7b:3d:a2:5e:fa:6d:08:13:6c:1c:cc:6c:d8:99:94:54:1a: b5:de:97:61:70:ff:17:7b:ae:ab:3c:ad:6a:7e:65:fc:29:7f: e4:d4:d5:94:d4:c5:2a:38:8f:8e:40:c8:54:26:05:c2:d4:91: 99:9d:f3:a7:3b:67:03:c7:18:39:7f:bb:7d:ca:2e:4a:08:3f: e5:ad:dd:69:75:22:7d:27:b9:09:9b:ca:53:7b:30:fe:a1:ed: 49:d9:a6:d1:a6:9d:9c:f6:81:cd:92:f4:b8:db:05:89:31:ad: 9d:f4:17:c0:3e:0e:94:64:dd:08:db:5d:24:99:8f:75:83:34: a4:13:7a:95:62:d5:d7:79:4d:7f:3a:b5:dd:c3:90:8c:4c:9a: 56:14:70:69:71:e0:f0:a8:81:01:c7:63:b5:f0:9d:e8:43:7f: 65:20:ce:10:9f:90:68:09:f3:48:18:d9:d4:61:57:f1:a3:b5: f1:39:67:52:ef:e5:ea:39:e2:02:04:1d:8d:bc:fd:ee:3f:86: 05:2e:0f:4b:45:57:ba:f4:8f:fb:4b:f4:eb:90:49:67:5c:3b: 9c:d7:a3:ae:87:ea:a4:a6:6a:36:63:b1:b2:ca:a4:84:70:7c: 97:c3:c8:ab:b0:72:53:ce:4e:3c:60:df:61:5f:55:4b:47:d1: 00:0b:4e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Cc0hK2sG43dYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MWY5Mzk3NmEtMzljMi00Yjk0LTg1YTItNTg1Y2QzYWFiMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pEbPu4vL6pWRFiID/199hSHCPEoUvSumqoo 6IPoTK5AEbxuG+LpVnb5GHJHU32bXNv0Tm2EbWxtPlrlU5MKEmjmiwpc43zihOMc G/W2ed2WBYBSF/81Ufm0mzqM9Q/w/VMa1Sn2J+VvuZe7kBpQw4UqXUxjm4Xi/g2n ZbTVkX/gKGKh+BvfbE0mi2sNshX6NmHsR1smSdsEuraos1XilZVUeJ7ox71bsmf6 Yeq145j+PmD74R6a6IGzYnDagOKzNp2dlTMCijFoCQGloF48Pn67s5LjVWPBgMR3 GbVTr3RxYzieUBgtWOqtjDOfrHbzvGxCU+BKVImoxHx2zFBDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBkquvMn9uRpZ0I7lXgh9+qIdSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYWEyMGU5MmMtZWYxZC0z MzM0LTlkMmEtYzU4MWUyNDcxNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP969MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZ7PaJe+m0IE2wczGzYmZRUGrXel2Fw/xd7rqs8rWp+Zfwpf+TU1ZTU xSo4j45AyFQmBcLUkZmd86c7ZwPHGDl/u33KLkoIP+Wt3Wl1In0nuQmbylN7MP6h 7UnZptGmnZz2gc2S9LjbBYkxrZ30F8A+DpRk3QjbXSSZj3WDNKQTepVi1dd5TX86 td3DkIxMmlYUcGlx4PCogQHHY7XwnehDf2UgzhCfkGgJ80gY2dRhV/GjtfE5Z1Lv 5eo54gIEHY28/e4/hgUuD0tFV7r0j/tL9OuQSWdcO5zXo66H6qSmajZjsbLKpIRw fJfDyKuwclPOTjxg32FfVUtH0QALTvs= -----END CERTIFICATE-----Generated at Sun Apr 6 14:36:57 2025 by rpki-client