$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa File: adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa (raw, json) Hash identifier: r+1Jp91u05hgp8vPGxG8rYLbmwmcCoAnl4I9rnteFMA= Subject key identifier: 22:34:1B:AB:BC:22:86:60:36:F1:D1:1B:0B:77:33:C1:3F:E1:1F:81 Certificate issuer: /CN=0457dcf9-b13b-4e0f-b761-d109e41cd945 Certificate serial: 010D0C9F4328584A20F54E9F134DD7E4B3F852A8 Authority key identifier: 5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 393301 IP address blocks: 162.248.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4e:9f:13:4d:d7:e4:b3:f8:52:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0457dcf9-b13b-4e0f-b761-d109e41cd945 Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=f490a322-ad66-4034-8f2e-e5720c30f1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:2b:81:d9:62:ae:27:dc:b4:f8:6c:e6:4f: 3d:35:28:83:e1:66:10:fa:18:0b:e8:b7:82:ad:dc: ff:2c:ca:9c:38:e8:40:07:c4:b7:8c:c0:08:cd:02: 6b:81:e1:ac:bb:e9:1e:63:52:fc:16:25:5f:0f:72: ab:f7:bd:56:e1:dc:9f:82:12:4d:58:60:c9:85:7e: ac:95:c9:12:98:10:2c:a3:c9:e9:87:79:b4:1f:ab: 76:6f:73:5c:88:cb:01:7d:7e:ef:f1:c1:19:f2:9c: 70:a5:28:28:ec:ef:4f:8f:97:58:05:98:e1:f9:05: 5f:cb:7a:04:48:a1:a4:47:89:08:df:bf:83:1d:40: a8:78:66:fe:86:91:26:00:99:5b:4e:b0:b9:94:7e: 6b:b2:78:24:22:60:e2:f5:5c:33:7e:d8:5f:cf:cc: 32:cf:0c:51:71:36:f0:35:b6:a5:b6:68:aa:06:2a: a7:39:62:2e:82:f4:b1:97:4b:6d:7b:38:42:19:25: 5b:dc:1a:bd:6a:08:0e:aa:f6:bd:ae:45:b1:94:0e: 1e:d3:e2:5f:f0:76:f8:b6:26:39:04:1a:2a:b3:7d: d0:f4:ec:5e:5f:75:50:57:bc:54:13:11:1c:9c:d7: 02:4e:7a:8d:d2:51:a6:29:c4:60:85:e6:dd:7f:cf: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:1B:AB:BC:22:86:60:36:F1:D1:1B:0B:77:33:C1:3F:E1:1F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl X509v3 Authority Key Identifier: keyid:5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer sbgp-ipAddrBlock: critical IPv4: 162.248.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d4:ec:d0:3c:9a:69:5d:1c:db:bb:5f:07:0d:2e:57:78:5f: 48:72:58:69:eb:89:27:ee:78:88:98:a4:81:33:bf:01:86:e1: c1:d8:0d:0a:50:c4:d0:a6:fb:4d:99:eb:14:f4:b3:18:1c:81: a9:08:29:86:a1:5b:6c:fa:7b:39:b4:9f:c2:71:3a:af:9a:01: d0:ad:11:d1:39:61:9d:49:aa:10:05:16:56:be:b0:b3:0b:7f: fd:a0:6a:2a:fa:de:3a:70:47:7a:c3:d8:a8:7c:e6:fe:61:43: 78:1a:04:d0:99:19:b7:96:8e:99:e5:73:94:13:3f:0c:cc:91: c5:0e:33:69:97:39:ce:c3:e1:f1:8c:b8:72:da:e0:6c:5a:89: 34:00:fa:1d:63:6c:b9:67:4d:90:ac:93:e6:9f:37:68:9f:3a: 39:6d:ae:57:77:80:35:d3:8d:c2:52:4d:18:15:61:c4:76:6d: 48:81:d4:8f:c4:ba:4e:48:f3:b3:66:21:58:d1:e9:e7:ef:0d: ee:9e:76:2f:d0:38:98:6f:87:dd:40:95:05:60:9e:9b:14:e1: 40:10:5f:a7:c5:a2:db:e9:00:da:39:62:8d:3f:1f:c2:f6:ed: 3a:52:33:c8:9c:91:95:62:1c:be:a8:97:92:91:aa:76:68:83: 6e:33:f2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9U6fE03X5LP4UqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1N2RjZjktYjEzYi00ZTBmLWI3NjEtZDEwOWU0MWNk OTQ1MB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk ZjQ5MGEzMjItYWQ2Ni00MDM0LThmMmUtZTU3MjBjMzBmMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiikrgdlirifctPhs5k89NSiD4WYQ+hgL6LeC rdz/LMqcOOhAB8S3jMAIzQJrgeGsu+keY1L8FiVfD3Kr971W4dyfghJNWGDJhX6s lckSmBAso8nph3m0H6t2b3NciMsBfX7v8cEZ8pxwpSgo7O9Pj5dYBZjh+QVfy3oE SKGkR4kI37+DHUCoeGb+hpEmAJlbTrC5lH5rsngkImDi9Vwzfthfz8wyzwxRcTbw NbaltmiqBiqnOWIugvSxl0ttezhCGSVb3Bq9aggOqva9rkWxlA4e0+Jf8Hb4tiY5 BBoqs33Q9OxeX3VQV7xUExEcnNcCTnqN0lGmKcRghebdf8+9VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI0G6u8IoZgNvHRGwt3M8E/4R+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNDU3 ZGNmOS1iMTNiLTRlMGYtYjc2MS1kMTA5ZTQxY2Q5NDUvYWRjN2IzZTAtZTliOC0z MzUzLWJlMDEtMGUzYjA5YThiOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDQ1N2RjZjktYjEzYi00ZTBmLWI3 NjEtZDEwOWU0MWNkOTQ1LzA0NTdkY2Y5LWIxM2ItNGUwZi1iNzYxLWQxMDllNDFj ZDk0NS5jcmwwHwYDVR0jBBgwFoAUXaekta9k86U9rdOcWc5mtVTGRTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNDU3ZGNmOS1iMTNiLTRlMGYtYjc2MS1kMTA5 ZTQxY2Q5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoviQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbU7NA8mmldHNu7XwcNLld4X0hyWGnriSfueIiYpIEzvwGG4cHYDQpQ xNCm+02Z6xT0sxgcgakIKYahW2z6ezm0n8JxOq+aAdCtEdE5YZ1JqhAFFla+sLML f/2gair63jpwR3rD2Kh85v5hQ3gaBNCZGbeWjpnlc5QTPwzMkcUOM2mXOc7D4fGM uHLa4GxaiTQA+h1jbLlnTZCsk+afN2ifOjltrld3gDXTjcJSTRgVYcR2bUiB1I/E uk5I87NmIVjR6efvDe6edi/QOJhvh91AlQVgnpsU4UAQX6fFotvpANo5Yo0/H8L2 7TpSM8ickZViHL6ol5KRqnZog24z8lQ= -----END CERTIFICATE-----Generated at Mon Jun 16 13:45:15 2025 by rpki-client