$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa File: d0867835-3593-3f05-a0cf-1c9f8cfde811.roa (raw, json) Hash identifier: lQ7V3/Et3P1ssKRYXI6Ul46QcME2Jmglm8VrDDqGdDc= Subject key identifier: F4:27:BE:97:0A:D7:28:0A:0F:99:BC:02:A3:50:7E:CB:10:CF:CD:48 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BE068C645746C2354FC80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 17057 IP address blocks: 63.217.106.0/24 maxlen: 24 63.217.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e0:68:c6:45:74:6c:23:54:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=51d877c4-ea96-4b26-b75b-8b2eb07c5627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:9e:29:89:69:b0:25:87:9b:7d:9e:49:36: 1e:d8:f6:3b:f8:2b:72:a6:67:26:6d:02:b4:72:95: 6d:5b:35:64:05:26:9e:94:c8:49:76:58:41:f8:d5: 2a:5e:b2:36:95:25:70:1f:99:af:82:26:42:67:06: ab:59:38:4e:e6:b2:4e:ce:a9:50:72:77:0e:5e:e8: 21:ca:43:74:bb:39:d9:35:c9:bf:13:a8:50:40:32: 3f:15:64:aa:50:ab:ee:04:b5:31:4e:9a:1e:fa:b8: cf:0a:76:58:34:ba:9c:96:a7:8a:ff:1d:2c:fa:7f: 6a:04:5f:4c:0f:8c:ac:c4:82:af:17:86:80:3c:8c: 65:63:e7:42:e1:ba:f4:d8:98:3b:ab:06:7e:24:65: f4:59:fc:cd:b3:72:13:fc:21:09:c4:3f:81:ee:67: df:95:c6:07:7a:b9:b0:17:9f:8e:65:7a:e4:5d:a8: b7:0e:2b:f8:65:e8:53:c6:bc:7a:d6:dd:e0:16:21: fc:06:94:c4:e1:cb:f2:01:b5:3a:17:3e:7e:44:e8: d3:81:af:ec:92:3f:d4:ea:8f:c3:5a:b0:05:f6:d7: a7:e8:41:81:97:45:dd:45:44:9c:20:55:4c:7b:53: 94:47:92:4b:86:ea:b0:26:03:fc:53:3f:5c:a8:5b: 59:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:BE:97:0A:D7:28:0A:0F:99:BC:02:A3:50:7E:CB:10:CF:CD:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d3:18:34:ae:c8:44:65:a8:f6:83:d4:33:af:fb:51:2d:7e: ab:2a:a3:04:6e:13:b0:90:56:ca:99:ca:bd:1d:25:74:e9:2e: 4a:78:3c:d7:9e:bf:ed:09:52:c8:a0:32:93:95:34:17:e5:95: e3:da:60:13:6b:94:fd:6d:db:04:35:8e:fb:be:46:ac:35:72: df:77:37:cd:39:ca:e6:94:e5:00:28:b1:74:6c:da:59:cb:0a: 04:b9:0c:b5:12:e3:00:5d:9b:04:36:88:b3:28:28:5c:d1:93: 9d:2c:64:c9:3c:51:bf:0b:b6:08:b8:0a:a8:9b:b5:74:a5:3a: 01:a7:37:fe:73:93:b6:2e:0b:c3:ec:aa:85:4d:6b:92:48:08: 14:70:f5:d2:08:1b:4c:02:6a:54:6b:db:f9:90:45:fc:48:01: f8:7b:a7:47:86:d3:99:41:17:55:87:0c:f8:ec:61:86:bf:6c: 5e:19:66:13:56:48:3b:77:8d:cf:9d:a9:64:51:e6:65:79:05: 23:bb:cc:c5:b9:94:5a:7e:4e:be:cb:b0:31:d9:b4:2b:10:b0: 65:3f:8e:87:6c:40:75:be:3e:d5:35:7d:53:dc:d4:04:fe:eb: 92:af:0e:11:56:ee:54:61:8c:54:f9:16:93:d6:20:f1:d2:d4: 60:cb:f2:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+BoxkV0bCNU/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NTFkODc3YzQtZWE5Ni00YjI2LWI3NWItOGIyZWIwN2M1NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJOeKYlpsCWHm32eSTYe2PY7+CtypmcmbQK0 cpVtWzVkBSaelMhJdlhB+NUqXrI2lSVwH5mvgiZCZwarWThO5rJOzqlQcncOXugh ykN0uznZNcm/E6hQQDI/FWSqUKvuBLUxTpoe+rjPCnZYNLqclqeK/x0s+n9qBF9M D4ysxIKvF4aAPIxlY+dC4br02Jg7qwZ+JGX0WfzNs3IT/CEJxD+B7mfflcYHermw F5+OZXrkXai3Div4ZehTxrx61t3gFiH8BpTE4cvyAbU6Fz5+ROjTga/skj/U6o/D WrAF9ten6EGBl0XdRUScIFVMe1OUR5JLhuqwJgP8Uz9cqFtZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQnvpcK1ygKD5m8AqNQfssQz81IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZDA4Njc4MzUtMzU5My0z ZjA1LWEwY2YtMWM5ZjhjZmRlODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP9lqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjTGDSuyERlqPaD1DOv+1EtfqsqowRuE7CQVsqZyr0dJXTpLkp4PNee v+0JUsigMpOVNBfllePaYBNrlP1t2wQ1jvu+Rqw1ct93N805yuaU5QAosXRs2lnL CgS5DLUS4wBdmwQ2iLMoKFzRk50sZMk8Ub8Ltgi4CqibtXSlOgGnN/5zk7YuC8Ps qoVNa5JICBRw9dIIG0wCalRr2/mQRfxIAfh7p0eG05lBF1WHDPjsYYa/bF4ZZhNW SDt3jc+dqWRR5mV5BSO7zMW5lFp+Tr7LsDHZtCsQsGU/jodsQHW+PtU1fVPc1AT+ 65KvDhFW7lRhjFT5FpPWIPHS1GDL8mA= -----END CERTIFICATE-----Generated at Sun Apr 6 14:36:01 2025 by rpki-client