$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa File: b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa (raw, json) Hash identifier: vmLIDK5nh/p58bmTbHQM7pY0ZXJ2+s+TqcvxnK+3nIE= Subject key identifier: 10:16:11:EA:A1:4B:CE:96:38:3E:19:70:D5:88:C8:C3:4E:88:BF:1D Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F432858494CC94F11649A1B350F1F0100 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 852 IP address blocks: 43.245.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4f:11:64:9a:1b:35:0f:1f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=158d4fe8-a603-4b6b-a87a-5c7967a18d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:af:91:98:b4:f9:6e:8b:94:e4:ad:c2:02:e5: ff:c9:9c:2f:a1:3c:54:71:d8:f7:b4:75:87:61:ed: dc:5e:d2:7d:05:03:ed:ce:4b:40:ec:4b:1e:c3:b5: f3:81:f7:08:54:1c:d1:cc:ae:8a:1e:6f:d0:8d:1d: 67:40:ab:60:08:c3:ad:f9:38:cd:68:ae:12:76:87: f8:dd:97:44:85:26:de:d9:2d:d0:d9:14:3a:e2:ec: 92:c1:76:b3:37:12:83:a9:42:9d:6b:ca:96:2a:dd: 47:2b:9c:83:f0:f9:d4:91:00:a8:80:a9:11:b1:60: 84:61:2c:88:ee:52:d6:0f:85:96:1a:a3:eb:5a:b0: 66:ed:72:51:ab:48:41:2d:f2:53:3c:31:b4:f4:dc: 18:78:02:dd:90:3a:03:a8:88:7f:19:99:43:51:c9: af:91:c5:f1:90:6b:0f:ca:99:31:12:82:7f:3d:56: 77:f9:3e:93:22:ad:05:3d:ac:93:e3:6f:ac:5e:47: f1:88:cb:79:8a:25:76:6d:96:ff:fb:85:b9:e7:9a: b7:93:45:72:cb:e4:74:70:3a:b7:2a:a7:5f:ab:21: 00:62:35:fa:2d:01:6c:36:db:40:32:40:c9:c3:07: 6c:8f:b2:57:b1:94:00:67:6a:d0:11:29:d1:cb:19: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:11:EA:A1:4B:CE:96:38:3E:19:70:D5:88:C8:C3:4E:88:BF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 43.245.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6e:4b:bd:d0:79:77:79:3f:31:ae:b4:c9:f6:ef:c8:b3:c3: 2b:c3:84:0c:61:41:07:2f:79:18:95:b4:53:6d:54:86:4d:f6: 84:0c:28:b5:9e:4b:b0:63:bc:15:60:dc:49:28:19:8c:6d:76: b4:52:8d:f1:4e:a5:f2:7a:bc:6f:2e:99:3c:cb:35:58:c7:41: ab:d5:20:d1:95:17:a4:2f:98:8a:65:ee:4b:d8:0a:b8:7c:72: 2f:1a:4e:ab:3e:e0:34:4c:96:a3:c2:a4:80:75:30:fb:44:a7: 82:88:1f:4d:df:21:64:d5:a3:e7:15:13:93:80:d4:63:ed:f5: 54:ad:a3:88:b4:c6:cf:c6:28:32:0a:05:5b:79:b0:77:b6:55: e4:d1:46:cd:ed:e3:75:f8:70:7a:81:5c:db:96:09:6c:df:30: b5:be:6f:44:89:aa:fe:aa:28:49:52:2e:bd:48:bd:94:1b:c2: 9c:94:20:9f:71:b6:9b:e1:5a:92:a2:df:77:ac:05:06:8f:ae: 45:30:5d:88:df:4d:c0:41:55:75:06:94:03:f6:66:03:ad:2f: ba:0a:aa:3d:7c:a6:15:62:f3:38:39:77:73:05:38:2c:58:6b: b4:e7:25:ce:bb:95:0b:bb:74:b0:a1:7e:9c:a5:bc:31:0a:33: 34:5b:c2:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU8RZJobNQ8fAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MTU4ZDRmZTgtYTYwMy00YjZiLWE4N2EtNWM3OTY3YTE4ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K+RmLT5bouU5K3CAuX/yZwvoTxUcdj3tHWH Ye3cXtJ9BQPtzktA7Esew7XzgfcIVBzRzK6KHm/QjR1nQKtgCMOt+TjNaK4Sdof4 3ZdEhSbe2S3Q2RQ64uySwXazNxKDqUKda8qWKt1HK5yD8PnUkQCogKkRsWCEYSyI 7lLWD4WWGqPrWrBm7XJRq0hBLfJTPDG09NwYeALdkDoDqIh/GZlDUcmvkcXxkGsP ypkxEoJ/PVZ3+T6TIq0FPayT42+sXkfxiMt5iiV2bZb/+4W555q3k0Vyy+R0cDq3 KqdfqyEAYjX6LQFsNttAMkDJwwdsj7JXsZQAZ2rQESnRyxm1wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAWEeqhS86WOD4ZcNWIyMNOiL8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvYjQ2NDhmZGMtYWM5OS0z MWViLTg1OTEtN2ZmYTNmZmM0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhuS73QeXd5PzGutMn278izwyvDhAxhQQcveRiVtFNtVIZN9oQMKLWe S7BjvBVg3EkoGYxtdrRSjfFOpfJ6vG8umTzLNVjHQavVINGVF6QvmIpl7kvYCrh8 ci8aTqs+4DRMlqPCpIB1MPtEp4KIH03fIWTVo+cVE5OA1GPt9VSto4i0xs/GKDIK BVt5sHe2VeTRRs3t43X4cHqBXNuWCWzfMLW+b0SJqv6qKElSLr1IvZQbwpyUIJ9x tpvhWpKi33esBQaPrkUwXYjfTcBBVXUGlAP2ZgOtL7oKqj18phVi8zg5d3MFOCxY a7TnJc67lQu7dLChfpylvDEKMzRbwg4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:17:48 2025 by rpki-client