$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa File: aa088a9e-e7b3-355e-a7d9-845158b85a72.roa (raw, json) Hash identifier: JmroxMGtXXd3ldnwdLQdhrhkjgi520zNxTsuRJ80r1E= Subject key identifier: 45:A5:2A:4C:3A:32:49:65:0E:CD:36:B6:A7:A4:71:0B:EB:85:A5:F5 Certificate issuer: /CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c Certificate serial: 010D0C9F43285848F22C670D1693385F0657E380 Authority key identifier: D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 162.221.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:67:0d:16:93:38:5f:06:57:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=6a3a4da6-13ca-413d-8796-b994ab8f98b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:50:e7:52:cd:63:4b:8d:8d:f4:e4:6c:cc:f4: 46:f9:5b:28:9e:96:4c:e1:3b:24:ee:48:9f:f2:9d: 5e:52:f8:bc:7c:cd:84:b4:2c:f2:e3:4d:2e:2b:00: 89:17:50:e5:8e:52:1b:20:71:43:8e:f7:97:7c:bd: a7:07:88:19:09:1d:1e:ee:6a:67:f4:0c:3e:2d:c6: 4c:4f:b3:d1:ea:41:e6:a5:2a:07:12:57:54:de:ca: c2:2e:c6:e9:78:bb:d6:84:24:39:e5:7a:3c:31:29: ac:1e:b2:98:ec:d2:d8:7a:99:63:84:89:3a:73:c2: ec:93:8f:1a:9d:37:c0:ee:80:f4:63:50:92:f4:a1: 67:11:ae:f9:df:16:68:56:e6:af:4e:d1:09:7a:ae: 7f:7c:5f:77:13:9e:8b:a8:c5:92:9d:f2:11:56:34: e7:9b:4a:66:0b:c4:83:26:d8:80:75:6b:dc:32:5d: b8:ac:84:0f:20:a7:53:05:ff:43:44:23:a0:5b:08: 81:a5:27:fc:c3:bd:e1:ed:00:c1:90:83:c8:00:f5: 52:a7:c7:fc:a8:31:67:9a:1f:91:a7:65:6f:f7:7f: 1f:00:6d:c0:46:bf:5e:d3:46:eb:ba:a9:9f:ee:f9: c2:a0:58:fa:39:1e:1d:22:85:16:22:41:b6:c4:ff: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:2A:4C:3A:32:49:65:0E:CD:36:B6:A7:A4:71:0B:EB:85:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl X509v3 Authority Key Identifier: keyid:D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer sbgp-ipAddrBlock: critical IPv4: 162.221.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f5:0d:2f:dc:c1:e0:fb:36:6c:ca:3a:f9:a2:6c:13:e6:92: da:81:3e:1a:15:fd:a1:29:05:7c:f3:ce:3d:a9:f1:45:47:5f: da:4a:8f:d8:ab:3c:4a:86:8c:a7:bc:50:9c:b2:74:63:1e:7d: 03:37:24:a6:93:0c:08:8e:a4:84:1a:1f:37:9f:04:37:07:14: 91:70:05:2d:6f:dd:db:0a:a9:ce:c9:bc:97:81:45:cd:2d:f0: 1c:2f:67:ae:93:d7:71:6f:8a:7f:c3:63:70:0e:31:3c:b0:06: ab:eb:88:6b:b5:f8:80:76:44:18:38:27:c7:26:a1:8e:5e:28: 44:05:c2:95:bd:77:5e:f4:97:c1:39:94:fb:17:5d:65:ce:81: 24:37:bf:34:14:e3:fb:eb:ed:30:6a:fd:6d:ed:e2:b6:23:77: d9:b7:ce:c6:15:07:a1:0b:e2:c7:53:63:df:45:c7:9d:10:02: 06:a0:92:3e:67:0f:cf:bd:7c:a3:45:a7:01:f4:b1:e0:88:af: 86:c4:02:d5:f8:a2:43:6c:2e:56:a6:79:50:72:7a:05:96:1d: d8:51:f3:4a:cb:a0:d7:61:ef:89:8d:c5:ab:23:7d:e3:f3:22: af:98:18:a5:8a:2c:24:7b:2c:c6:82:16:9e:86:d8:60:69:50: d7:e4:e8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGcNFpM4XwZX44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE3N2UzMjAtYWE1OC00YmI5LWJmNjUtMzIyYmFiNTNh YTdjMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NmEzYTRkYTYtMTNjYS00MTNkLTg3OTYtYjk5NGFiOGY5OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21DnUs1jS42N9ORszPRG+VsonpZM4Tsk7kif 8p1eUvi8fM2EtCzy400uKwCJF1DljlIbIHFDjveXfL2nB4gZCR0e7mpn9Aw+LcZM T7PR6kHmpSoHEldU3srCLsbpeLvWhCQ55Xo8MSmsHrKY7NLYepljhIk6c8Lsk48a nTfA7oD0Y1CS9KFnEa753xZoVuavTtEJeq5/fF93E56LqMWSnfIRVjTnm0pmC8SD JtiAdWvcMl24rIQPIKdTBf9DRCOgWwiBpSf8w73h7QDBkIPIAPVSp8f8qDFnmh+R p2Vv938fAG3ARr9e00bruqmf7vnCoFj6OR4dIoUWIkG2xP/dFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWlKkw6MkllDs02tqekcQvrhaX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81YTc3 ZTMyMC1hYTU4LTRiYjktYmY2NS0zMjJiYWI1M2FhN2MvYWEwODhhOWUtZTdiMy0z NTVlLWE3ZDktODQ1MTU4Yjg1YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWE3N2UzMjAtYWE1OC00YmI5LWJm NjUtMzIyYmFiNTNhYTdjLzVhNzdlMzIwLWFhNTgtNGJiOS1iZjY1LTMyMmJhYjUz YWE3Yy5jcmwwHwYDVR0jBBgwFoAU1DII4z3/xfrcAx1tUTrmxmraUQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81YTc3ZTMyMC1hYTU4LTRiYjktYmY2NS0zMjJi YWI1M2FhN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBot22MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj1DS/cweD7NmzKOvmibBPmktqBPhoV/aEpBXzzzj2p8UVHX9pKj9ir PEqGjKe8UJyydGMefQM3JKaTDAiOpIQaHzefBDcHFJFwBS1v3dsKqc7JvJeBRc0t 8BwvZ66T13Fvin/DY3AOMTywBqvriGu1+IB2RBg4J8cmoY5eKEQFwpW9d170l8E5 lPsXXWXOgSQ3vzQU4/vr7TBq/W3t4rYjd9m3zsYVB6EL4sdTY99Fx50QAgagkj5n D8+9fKNFpwH0seCIr4bEAtX4okNsLlameVByegWWHdhR80rLoNdh74mNxasjfePz Iq+YGKWKLCR7LMaCFp6G2GBpUNfk6Mw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:30:15 2025 by rpki-client