$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa File: 1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa (raw, json) Hash identifier: 7vhho2EtAONcP+0zCia8Ax9n4M/3mkN1RrNwyNVm628= Subject key identifier: 64:78:C4:25:06:FC:A6:FA:19:DD:44:17:46:95:13:9B:A8:96:8E:38 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285848E2D11378336B9E075C74CE80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 396961 IP address blocks: 163.253.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:13:78:33:6b:9e:07:5c:74:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=a7b05dd6-9e6e-44c8-adab-757979a51f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:13:de:c4:e9:92:3e:23:41:4b:d6:19:20: a5:62:3b:a1:54:95:da:d1:87:59:0b:02:c6:80:e8: 04:13:52:4f:12:e4:27:83:c6:b4:38:e2:78:99:ff: 43:ea:1f:e6:8a:a3:7a:a6:e0:01:55:9d:58:96:7c: f2:6b:73:83:8b:da:c9:2e:ed:f0:ec:5d:59:45:a3: 0f:2d:33:9a:3f:81:ba:e1:bd:58:fc:fe:02:23:c8: 40:a3:ed:d6:7b:37:7a:95:87:b6:6d:41:4c:89:f7: a7:66:fc:33:a6:99:cc:04:55:70:00:8f:94:3d:2a: d5:96:7a:c1:b8:11:8f:72:89:4a:a7:96:17:16:10: 01:cc:57:77:fd:f6:1b:17:14:b8:fa:36:08:1e:dd: 0f:d0:09:70:0e:de:8c:11:07:01:db:c8:99:39:28: f2:73:0c:e6:8d:76:9c:64:34:bd:8f:85:32:50:e3: 26:cb:6e:d6:30:a7:c3:91:b8:a7:4f:f5:0b:db:af: a3:f5:ce:3c:b5:5d:05:e5:45:a8:ef:ed:66:dd:ec: e5:f5:49:09:a9:7d:d0:fc:56:e6:5a:e0:a7:e1:1f: d2:5d:92:44:1b:36:3e:4e:89:9b:d3:95:bc:e0:ac: 25:f2:62:4a:3b:d1:4d:32:72:86:d9:3d:02:91:b1: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:C4:25:06:FC:A6:FA:19:DD:44:17:46:95:13:9B:A8:96:8E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4a:9a:d4:7b:03:59:31:94:d2:f6:1f:d0:a6:63:c6:87:09: b5:be:82:39:6e:f9:2a:94:27:60:db:51:79:ed:19:07:57:b4: 39:2f:1c:d3:f7:44:7d:1b:67:b7:c9:2d:e6:ba:ee:b0:c7:fd: 8a:02:a2:c0:0b:68:94:07:fb:24:34:a3:dc:09:94:8b:00:bf: 3a:af:3d:ec:6e:53:27:47:48:5d:dc:fa:ee:f6:4c:16:08:53: ac:d6:b8:0c:e5:35:ba:75:43:e3:cf:76:bb:7e:8e:18:c7:0c: 40:fa:71:f8:9b:5f:ed:4a:1d:0f:01:a1:3d:0e:9b:f7:76:df: 7a:3c:a3:64:5c:b3:2f:ac:1a:90:8c:88:83:ce:fd:e6:50:c9: 67:22:c0:03:89:50:e1:9e:a2:77:71:ec:7a:ae:35:7a:18:54: 1f:dc:6f:c3:7a:20:b4:4b:b6:68:c9:39:b3:07:70:81:d6:2d: b9:8c:84:3a:1c:07:c4:c7:63:d3:22:52:70:04:ba:39:6c:52: da:74:3c:f8:b7:5c:f4:d7:0d:3e:68:99:55:73:3e:c7:e3:37: 74:7e:09:27:e3:42:67:f7:df:0f:2c:f3:ad:aa:b5:77:0d:09: c3:59:15:11:e3:8a:b4:37:02:6e:77:84:c2:5b:3a:31:30:0f: 84:0c:12:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RN4M2ueB1x0zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YTdiMDVkZDYtOWU2ZS00NGM4LWFkYWItNzU3OTc5YTUxZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApggT3sTpkj4jQUvWGSClYjuhVJXa0YdZCwLG gOgEE1JPEuQng8a0OOJ4mf9D6h/miqN6puABVZ1Ylnzya3ODi9rJLu3w7F1ZRaMP LTOaP4G64b1Y/P4CI8hAo+3Wezd6lYe2bUFMifenZvwzppnMBFVwAI+UPSrVlnrB uBGPcolKp5YXFhABzFd3/fYbFxS4+jYIHt0P0AlwDt6MEQcB28iZOSjycwzmjXac ZDS9j4UyUOMmy27WMKfDkbinT/UL26+j9c48tV0F5UWo7+1m3ezl9UkJqX3Q/Fbm WuCn4R/SXZJEGzY+Tomb05W84Kwl8mJKO9FNMnKG2T0CkbHewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR4xCUG/Kb6Gd1EF0aVE5uolo44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMWYyZmEyNmMtOTBjZi0z MGY4LTk0OTItNDNjYjhhNTc0ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVKmtR7A1kxlNL2H9CmY8aHCbW+gjlu+SqUJ2DbUXntGQdXtDkvHNP3 RH0bZ7fJLea67rDH/YoCosALaJQH+yQ0o9wJlIsAvzqvPexuUydHSF3c+u72TBYI U6zWuAzlNbp1Q+PPdrt+jhjHDED6cfibX+1KHQ8BoT0Om/d233o8o2Rcsy+sGpCM iIPO/eZQyWciwAOJUOGeondx7HquNXoYVB/cb8N6ILRLtmjJObMHcIHWLbmMhDoc B8THY9MiUnAEujlsUtp0PPi3XPTXDT5omVVzPsfjN3R+CSfjQmf33w8s862qtXcN CcNZFRHjirQ3Am53hMJbOjEwD4QMEkc= -----END CERTIFICATE-----Generated at Sun Apr 27 16:34:34 2025 by rpki-client