$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/a55f66b4-ae4a-3ddf-b780-57c4b4384860.roa File: a55f66b4-ae4a-3ddf-b780-57c4b4384860.roa (raw, json) Hash identifier: 3OvOaIUDS9LgY4i5PgoMfNm4i1j66do0T6Ntmg9e3U4= Subject key identifier: 66:56:D4:2F:06:64:60:C2:CA:61:6B:0D:22:A6:A9:71:43:1B:8F:62 Certificate issuer: /CN=0a2d75f1-8f4b-49d3-9661-209643086151 Certificate serial: 010D0C9F432858491AA6B7325B5FF5F629D0A020 Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/a55f66b4-ae4a-3ddf-b780-57c4b4384860.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 11059 IP address blocks: 162.251.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b7:32:5b:5f:f5:f6:29:d0:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=2a1c6c0d-74b4-4f85-8a18-9531c3f97d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:45:0c:55:43:1c:9f:59:10:b4:f8:f2:5e: 3c:b7:70:7f:18:84:5a:38:a4:df:c1:13:86:0c:02: 83:07:59:9a:40:5e:e7:4a:b7:2b:dd:2f:ec:3d:0c: 40:d6:e3:78:d9:0c:d4:36:09:a2:cb:74:1c:b6:6c: cd:eb:93:ae:cf:58:a9:c2:d4:fa:a4:5d:e3:37:ea: e0:23:a0:96:d0:c1:55:b4:62:34:99:7a:76:6c:2b: 60:a7:90:ba:8d:05:e5:6b:c1:16:47:35:22:8b:99: 0f:be:3a:ca:bc:7d:9d:37:ac:77:8e:8b:9d:66:44: b6:a8:5f:10:7a:1f:7c:d7:ee:d6:ab:08:18:b5:3a: a6:c4:9a:6a:5a:5d:b7:8e:b9:07:35:de:8d:82:26: ba:61:f0:01:29:8f:23:95:d7:b5:ca:96:ed:9b:7b: 60:a9:0c:85:66:39:c8:3a:be:ad:b2:53:37:df:05: 01:d1:a6:7a:24:05:1a:83:9a:b3:70:a1:ed:12:69: d3:02:53:87:0a:ad:d2:4c:7f:26:92:34:48:77:07: ad:f6:5c:22:53:bc:e7:90:d4:e3:88:08:91:80:e4: 7b:22:fd:76:8f:3e:5a:f6:85:0a:6e:02:5d:33:49: 01:3f:72:bf:ed:d4:f8:1d:93:3e:54:ee:c3:7f:72: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:56:D4:2F:06:64:60:C2:CA:61:6B:0D:22:A6:A9:71:43:1B:8F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/a55f66b4-ae4a-3ddf-b780-57c4b4384860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl X509v3 Authority Key Identifier: keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer sbgp-ipAddrBlock: critical IPv4: 162.251.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6d:29:af:6f:89:89:47:ad:f4:3b:62:f6:4e:ab:db:f5:00: 46:fd:22:26:8e:f8:b2:02:17:3c:28:85:2f:90:be:da:c7:d8: 9e:2d:29:a9:0c:22:ff:39:38:f4:0d:f3:c3:8e:2f:05:69:3b: b7:80:bd:70:e1:9b:eb:fb:09:28:a4:db:46:43:d1:59:31:23: 15:6a:d6:86:1e:20:3a:69:44:f1:5f:be:05:19:3b:04:3b:06: f6:37:61:b9:e3:b6:8e:ec:d9:3e:d2:b1:88:eb:93:9e:21:6c: b5:23:d1:9f:e4:f4:ef:cc:ef:ce:4b:9d:15:fd:56:ac:dc:ac: 5a:31:ca:df:13:de:3f:bf:1f:1d:8d:cb:e5:45:3e:58:a1:64: 78:87:02:30:45:ac:d9:d2:0f:10:f7:c4:46:2e:9a:4e:93:c1: e0:bc:59:bb:26:31:66:64:57:ea:0f:66:8b:7b:df:02:cb:fc: ea:a8:de:ca:8a:3b:2e:36:b4:66:03:59:ad:a3:95:dd:93:fa: c1:64:af:8c:59:9a:50:9b:ea:9f:76:9b:07:2f:8d:18:c0:68: 32:ad:ae:fb:23:96:c2:c7:5b:20:da:ac:2e:83:50:28:01:f8: 2e:27:a1:b3:2b:f4:59:af:1b:53:bd:83:c8:3d:e9:a0:36:8a: a1:3c:69:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprcyW1/19inQoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2 MTUxMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MmExYzZjMGQtNzRiNC00Zjg1LThhMTgtOTUzMWMzZjk3ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwINFDFVDHJ9ZELT48l48t3B/GIRaOKTfwROG DAKDB1maQF7nSrcr3S/sPQxA1uN42QzUNgmiy3QctmzN65Ouz1ipwtT6pF3jN+rg I6CW0MFVtGI0mXp2bCtgp5C6jQXla8EWRzUii5kPvjrKvH2dN6x3joudZkS2qF8Q eh981+7WqwgYtTqmxJpqWl23jrkHNd6Ngia6YfABKY8jlde1ypbtm3tgqQyFZjnI Or6tslM33wUB0aZ6JAUag5qzcKHtEmnTAlOHCq3STH8mkjRIdwet9lwiU7znkNTj iAiRgOR7Iv12jz5a9oUKbgJdM0kBP3K/7dT4HZM+VO7Df3LzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZW1C8GZGDCymFrDSKmqXFDG49iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvYTU1ZjY2YjQtYWU0YS0z ZGRmLWI3ODAtNTdjNGI0Mzg0ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2 NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4 NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2 NDMwODYxNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNtKa9viYlHrfQ7YvZOq9v1AEb9IiaO+LICFzwohS+QvtrH2J4tKakM Iv85OPQN88OOLwVpO7eAvXDhm+v7CSik20ZD0VkxIxVq1oYeIDppRPFfvgUZOwQ7 BvY3Ybnjto7s2T7SsYjrk54hbLUj0Z/k9O/M785LnRX9VqzcrFoxyt8T3j+/Hx2N y+VFPlihZHiHAjBFrNnSDxD3xEYumk6TweC8WbsmMWZkV+oPZot73wLL/Oqo3sqK Oy42tGYDWa2jld2T+sFkr4xZmlCb6p92mwcvjRjAaDKtrvsjlsLHWyDarC6DUCgB +C4nobMr9FmvG1O9g8g96aA2iqE8aXA= -----END CERTIFICATE-----Generated at Tue Apr 29 18:51:28 2025 by rpki-client