$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa File: 2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json) Hash identifier: MKFLIaajWSAABK+aEe7dHJkshzJCMRsAT+pIWK9fWdg= Subject key identifier: 4B:EE:72:A0:90:DE:38:F6:4F:6C:25:B3:CB:F7:9E:10:79:21:00:28 Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F4328584961B98BE3F9E4E9B9CB3D4E40 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 32329 IP address blocks: 162.218.224.0/22 maxlen: 24 164.152.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8b:e3:f9:e4:e9:b9:cb:3d:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=5c9af355-b426-4558-9dc8-1734a7b47f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:f3:6e:8a:d3:51:f1:cc:95:6d:c2:4f:6b: 42:a2:c3:a1:fa:42:0f:db:21:fe:0e:46:2f:74:54: 8e:01:7e:2f:60:77:5c:17:f3:a6:12:0c:59:60:5f: 4e:5d:1c:fa:8c:3c:3f:7d:81:4f:27:04:ed:7b:23: a8:ba:bc:de:bd:df:4f:3b:df:01:98:2f:08:10:65: d2:24:a0:bd:88:44:2f:14:18:0b:22:b1:ae:58:41: 82:29:88:41:95:67:5b:5d:95:f7:11:fb:18:57:5e: a5:4a:f4:5e:fb:0d:b9:ba:e4:69:ee:4e:a2:ba:39: c2:d9:59:6e:ec:90:00:77:77:9a:eb:44:31:1a:60: 2d:ce:a0:e5:96:83:02:6c:4a:0d:9b:ca:39:e7:5a: ac:1f:37:14:53:af:e5:7d:64:31:5f:7b:53:51:dc: bd:80:e6:a8:55:b7:b3:35:d7:11:ad:15:03:64:c5: 45:b4:31:89:67:41:01:98:56:57:dc:b1:a3:31:67: 34:b6:e9:1c:75:d8:9a:15:f8:96:d7:83:0f:93:e3: 21:ad:d5:75:d0:c0:b4:a5:ab:8a:d3:ec:b2:ba:06: c7:1a:97:b9:76:a3:53:e9:96:6f:7f:71:02:84:3b: 31:a2:b6:37:24:8a:f9:14:40:b3:6e:b9:e0:cc:c4: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EE:72:A0:90:DE:38:F6:4F:6C:25:B3:CB:F7:9E:10:79:21:00:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 162.218.224.0/22 164.152.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e9:29:e2:c6:c2:8d:f4:d9:a0:d0:7b:b8:f2:a9:05:3a:a9: 63:ef:9b:73:ba:d5:4a:96:f5:1f:14:80:bb:79:a9:71:41:3f: 31:86:ab:c3:61:1f:b9:00:75:37:44:ec:c2:fa:b3:b5:4c:5d: ec:ef:d2:5d:45:80:e9:61:b4:3b:29:21:a3:df:2c:e8:17:73: 05:9a:0e:7a:e3:ff:dc:dc:4d:93:9b:f6:7a:bc:65:e2:ee:1c: ad:8e:50:ea:c7:1f:82:54:e3:72:80:e9:52:da:1a:f8:6f:af: df:5d:2a:75:85:0d:78:88:2f:94:82:f0:6d:f1:29:43:01:4f: 2c:95:7e:12:6b:e7:2e:a5:ad:75:57:13:7c:cf:f9:5e:22:ad: e6:81:b7:30:8b:ff:34:2c:d7:f9:b1:30:47:c8:b3:d5:7c:9a: 58:f2:40:3c:9c:18:bb:90:76:17:1b:0c:4b:08:ab:5e:ae:b8: 4b:ed:b5:12:66:06:77:9d:8d:1a:54:67:05:36:af:bb:12:06: f8:10:8c:4c:63:c4:e3:57:30:5f:06:69:48:74:76:47:64:d6: f8:ff:f2:0f:4f:f0:9a:fc:73:e6:10:3b:3f:ef:a4:6a:46:6d: 25:89:51:de:1a:35:27:46:4f:fb:7f:53:87:55:69:26:f0:85: a4:94:11:4b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElhuYvj+eTpucs9TkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NWM5YWYzNTUtYjQyNi00NTU4LTlkYzgtMTczNGE3YjQ3ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dfzborTUfHMlW3CT2tCosOh+kIP2yH+DkYv dFSOAX4vYHdcF/OmEgxZYF9OXRz6jDw/fYFPJwTteyOourzevd9PO98BmC8IEGXS JKC9iEQvFBgLIrGuWEGCKYhBlWdbXZX3EfsYV16lSvRe+w25uuRp7k6iujnC2Vlu 7JAAd3ea60QxGmAtzqDlloMCbEoNm8o551qsHzcUU6/lfWQxX3tTUdy9gOaoVbez NdcRrRUDZMVFtDGJZ0EBmFZX3LGjMWc0tukcddiaFfiW14MPk+MhrdV10MC0pauK 0+yyugbHGpe5dqNT6ZZvf3EChDsxorY3JIr5FECzbrngzMTT/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEvucqCQ3jj2T2wls8v3nhB5IQAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjQ3M2Q2YmEtM2ZiOS0z NTgyLThjY2MtM2MxOTU1NGNmZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotrgAwQD pJiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKPpKeLGwo302aDQe7jyqQU6qWPvm3O61UqW9R8UgLt5qXFB PzGGq8NhH7kAdTdE7ML6s7VMXezv0l1FgOlhtDspIaPfLOgXcwWaDnrj/9zcTZOb 9nq8ZeLuHK2OUOrHH4JU43KA6VLaGvhvr99dKnWFDXiIL5SC8G3xKUMBTyyVfhJr 5y6lrXVXE3zP+V4ireaBtzCL/zQs1/mxMEfIs9V8mljyQDycGLuQdhcbDEsIq16u uEvttRJmBnedjRpUZwU2r7sSBvgQjExjxONXMF8GaUh0dkdk1vj/8g9P8Jr8c+YQ Oz/vpGpGbSWJUd4aNSdGT/t/U4dVaSbwhaSUEUs= -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:16 2025 by rpki-client