$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa File: 5a789292-2e18-3e5d-9145-faab5fa7d256.roa (raw, json) Hash identifier: 0w91HgaQRvZE8htKCzLFmrlTVXjciX5F1NgKwuYDFWo= Subject key identifier: B9:59:BC:83:50:67:C6:7B:F8:C9:9D:68:95:4A:D5:1E:A4:34:39:48 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F432858496A199F1E652BD77E88728140 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 394688 IP address blocks: 162.221.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:9f:1e:65:2b:d7:7e:88:72:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=b2544de5-ac62-4e94-9f55-327532b70534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:4c:0c:7e:ca:b3:aa:75:23:17:d7:87:0d: 35:c6:83:bb:44:80:98:1d:b4:6a:28:5c:30:d8:16: be:f2:8a:8b:bb:b1:fe:cd:38:f6:12:39:ab:aa:21: e0:e9:8a:3f:c5:aa:ef:63:bd:0b:97:37:37:72:c7: d9:71:fc:44:4c:94:3e:f5:61:e4:88:29:4c:ea:41: a7:f6:d5:43:b4:e4:d2:8b:0f:4e:8d:a1:21:b4:bb: d0:1c:9b:00:5e:67:f7:5c:6c:dd:8f:f8:d5:8a:48: 7d:3e:ca:06:b6:f3:74:1e:f9:51:bf:eb:6e:a0:5d: 4b:07:ef:07:44:25:a7:f1:c5:12:71:49:d8:03:52: 20:64:8c:ae:40:74:25:34:e5:e6:6a:34:6d:e7:bd: df:48:73:54:27:79:68:89:1e:3c:2d:78:f5:5a:b9: b5:e5:20:ef:38:b2:dc:60:f9:e5:e3:83:db:0e:88: 7c:5a:f2:fe:20:7c:6a:79:b0:34:15:1c:28:fc:9c: fd:73:2c:6a:12:87:3d:b7:ba:16:02:18:72:48:ec: ea:00:06:37:27:fd:8e:a5:d5:17:da:43:3e:91:e2: 61:f3:c3:0c:9b:89:e8:35:9d:47:b9:d2:4d:7d:41: 2e:1d:48:bb:42:32:36:0b:c0:18:38:eb:c5:fe:61: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:BC:83:50:67:C6:7B:F8:C9:9D:68:95:4A:D5:1E:A4:34:39:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.221.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:83:6c:3a:03:4a:be:71:90:2f:53:91:9f:3e:d2:c7:26:43: 67:30:b8:4f:1b:9d:d2:6c:0e:38:de:dd:c1:2a:46:be:b4:0a: cc:10:67:26:dc:2e:98:ba:00:72:fa:b4:d5:7e:cc:c1:43:fd: fe:e7:78:5c:6e:fe:d8:0b:80:3a:34:5f:75:46:19:74:65:7c: 74:24:66:06:3f:f0:35:f0:d5:f3:47:13:6e:53:1e:fa:4c:38: 5a:cc:e1:d7:ab:7b:79:b2:56:16:65:53:4b:98:86:78:f2:15: 30:89:35:48:04:f9:f5:eb:8e:9c:18:6c:b9:c8:05:c4:31:d7: 27:1a:6c:b9:74:b6:3d:65:4a:0e:d1:31:0b:09:4b:c6:8c:d6: 21:11:28:88:82:fd:3f:a5:43:8e:11:89:5a:49:12:8d:37:1b: cd:58:0d:e8:04:6f:2e:57:e7:b6:2d:1e:64:f6:57:13:4b:5d: d2:cc:4a:50:55:9b:82:86:5f:0e:f9:86:f3:0f:33:18:03:fb: df:32:e6:fe:80:7c:06:39:53:59:38:e9:fc:63:55:74:95:69: c7:16:c1:c7:66:0a:ca:67:52:a7:6a:44:e1:37:ae:b3:04:0e: 57:bd:a2:c6:83:ac:2d:50:ee:63:a4:d7:94:6a:b8:c5:24:9c: 42:fa:12:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZ8eZSvXfohygUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YjI1NDRkZTUtYWM2Mi00ZTk0LTlmNTUtMzI3NTMyYjcwNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSFMDH7Ks6p1IxfXhw01xoO7RICYHbRqKFww 2Ba+8oqLu7H+zTj2EjmrqiHg6Yo/xarvY70Llzc3csfZcfxETJQ+9WHkiClM6kGn 9tVDtOTSiw9OjaEhtLvQHJsAXmf3XGzdj/jVikh9PsoGtvN0HvlRv+tuoF1LB+8H RCWn8cUScUnYA1IgZIyuQHQlNOXmajRt573fSHNUJ3loiR48LXj1Wrm15SDvOLLc YPnl44PbDoh8WvL+IHxqebA0FRwo/Jz9cyxqEoc9t7oWAhhySOzqAAY3J/2OpdUX 2kM+keJh88MMm4noNZ1HudJNfUEuHUi7QjI2C8AYOOvF/mFAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlZvINQZ8Z7+MmdaJVK1R6kNDlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvNWE3ODkyOTItMmUxOC0z ZTVkLTkxNDUtZmFhYjVmYTdkMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKDbDoDSr5xkC9TkZ8+0scmQ2cwuE8bndJsDjje3cEqRr60CswQZybc Lpi6AHL6tNV+zMFD/f7neFxu/tgLgDo0X3VGGXRlfHQkZgY/8DXw1fNHE25THvpM OFrM4dere3myVhZlU0uYhnjyFTCJNUgE+fXrjpwYbLnIBcQx1ycabLl0tj1lSg7R MQsJS8aM1iERKIiC/T+lQ44RiVpJEo03G81YDegEby5X57YtHmT2VxNLXdLMSlBV m4KGXw75hvMPMxgD+98y5v6AfAY5U1k46fxjVXSVaccWwcdmCspnUqdqROE3rrME Dle9osaDrC1Q7mOk15RquMUknEL6EqY= -----END CERTIFICATE-----Generated at Sun Apr 6 21:25:49 2025 by rpki-client