$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa File: 02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa (raw, json) Hash identifier: rFS06x9xAQq++v1gMYdjfAymlOq+mXKZs5oyTPxSv1E= Subject key identifier: 20:3E:83:B5:C1:AC:02:81:80:9B:74:56:B2:17:EF:56:FE:6C:3A:17 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849631EC1DD2D77C6E69535E8C0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 396450 IP address blocks: 163.253.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c1:dd:2d:77:c6:e6:95:35:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=e944071a-57cb-40f2-953a-ce784aa0d8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:b6:8b:e4:f2:ed:80:36:29:74:10:d2:b2: 15:b3:52:05:2a:45:40:5f:00:a3:3a:2c:6f:03:9c: 52:a4:c9:4c:76:8f:cc:ca:69:4a:80:1e:f6:e3:78: 28:93:96:8a:09:81:0b:2a:77:b2:24:c6:de:af:c2: 4b:1b:a2:c1:30:47:e0:43:d8:cb:cf:3b:7f:68:79: 4e:39:70:60:a1:f5:eb:0e:99:14:65:27:dc:31:e6: ae:80:25:20:c3:aa:3e:ee:a1:e1:c5:ea:1d:3e:49: 41:f3:e0:ea:d1:94:1f:bf:0f:4a:6f:1c:f1:cd:78: 1d:2d:91:21:8f:e8:31:65:d0:91:7f:3d:a7:f3:b1: 1a:ee:dd:e7:39:7b:51:d6:9b:a4:14:b9:0e:12:69: 4e:d7:af:a3:47:27:99:6d:9f:bf:21:57:78:ea:57: e8:68:97:b0:68:93:46:96:a7:15:c6:3d:c0:52:8b: d1:6f:1c:82:ac:17:62:38:01:42:60:6f:d5:91:2f: 29:41:a5:b8:d4:8e:b1:37:d4:75:7a:fe:43:ba:88: 9e:6b:0b:fc:b3:92:13:2a:3f:f7:fd:6e:9f:3e:e9: 2d:8c:fd:6c:a0:c1:f5:b7:b2:cd:b4:dd:7d:8b:8a: d1:05:4e:db:cb:d3:85:2a:11:5a:6e:9c:37:07:23: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:83:B5:C1:AC:02:81:80:9B:74:56:B2:17:EF:56:FE:6C:3A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:cc:38:9b:10:9b:39:b6:31:a8:1b:46:18:87:b0:81:03: f2:8a:b5:6c:33:4e:ae:ad:8b:a8:8a:12:64:9b:a4:16:e5:03: 0e:81:2b:aa:c0:f4:87:cc:6e:10:c6:d5:ee:80:fc:86:4a:b7: eb:4b:35:f3:0a:09:08:df:6c:c3:36:9b:74:9c:a5:32:56:ef: b1:4b:da:01:54:a5:52:6f:5b:3d:de:a6:7f:57:84:b3:48:f2: d4:ab:0d:ef:28:dc:be:6c:1e:b2:a0:82:47:97:30:61:94:97: 7d:0d:6e:79:82:48:ee:2f:63:ab:89:81:af:0c:cd:f8:07:c3: 0a:ff:95:f1:c7:4f:3a:af:34:b7:c3:b4:40:42:fe:64:2a:68: cf:4b:fe:0f:41:c9:88:f2:e8:90:5b:50:62:59:f7:4c:e1:bd: bc:e6:d7:ef:5c:1f:91:84:d2:98:71:87:22:06:38:60:f2:3c: 41:d8:92:ed:e2:f2:e2:0c:43:4c:9a:8e:5c:8a:70:21:08:1f: 9d:c3:f9:45:92:89:80:8f:a6:f5:a7:63:e0:a1:82:02:9d:95: a4:70:79:98:d3:f2:d9:2c:2c:cc:67:27:e4:eb:87:32:b7:47: 43:eb:58:3b:b8:9b:2d:e3:d4:47:74:02:a4:ac:9f:c1:3e:c0: 06:37:94:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsHdLXfG5pU16MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZTk0NDA3MWEtNTdjYi00MGYyLTk1M2EtY2U3ODRhYTBkOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8O2i+Ty7YA2KXQQ0rIVs1IFKkVAXwCjOixv A5xSpMlMdo/MymlKgB7243gok5aKCYELKneyJMber8JLG6LBMEfgQ9jLzzt/aHlO OXBgofXrDpkUZSfcMeaugCUgw6o+7qHhxeodPklB8+Dq0ZQfvw9KbxzxzXgdLZEh j+gxZdCRfz2n87Ea7t3nOXtR1pukFLkOEmlO16+jRyeZbZ+/IVd46lfoaJewaJNG lqcVxj3AUovRbxyCrBdiOAFCYG/VkS8pQaW41I6xN9R1ev5Duoieawv8s5ITKj/3 /W6fPuktjP1soMH1t7LNtN19i4rRBU7by9OFKhFabpw3ByPxxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA+g7XBrAKBgJt0VrIX71b+bDoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMDJhM2I3NDgtN2I1NS0z ZjI5LWI4ZGUtNjA1YjVmM2U4YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0VzDibEJs5tjGoG0YYh7CBA/KKtWwzTq6ti6iKEmSbpBblAw6BK6rA 9IfMbhDG1e6A/IZKt+tLNfMKCQjfbMM2m3ScpTJW77FL2gFUpVJvWz3epn9XhLNI 8tSrDe8o3L5sHrKggkeXMGGUl30NbnmCSO4vY6uJga8MzfgHwwr/lfHHTzqvNLfD tEBC/mQqaM9L/g9ByYjy6JBbUGJZ90zhvbzm1+9cH5GE0phxhyIGOGDyPEHYku3i 8uIMQ0yajlyKcCEIH53D+UWSiYCPpvWnY+ChggKdlaRweZjT8tksLMxnJ+TrhzK3 R0PrWDu4my3j1Ed0AqSsn8E+wAY3lNo= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:47 2025 by rpki-client