$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa File: db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa (raw, json) Hash identifier: KbknLtVHLKzAmHzMmOHwtS1doKBlUyKxoGXiOx5arA0= Subject key identifier: 8A:B8:80:6B:66:68:77:5C:91:95:CA:92:22:2C:CD:52:4F:F6:75:6F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F432858498769AD2F907CA8257C075680 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 11537 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ad:2f:90:7c:a8:25:7c:07:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=4323f881-472c-48c8-9995-59fb6840b414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:7a:81:2c:ac:51:f3:a2:ee:18:5e:99:7c: 31:e6:86:c8:39:28:67:14:db:5b:89:0f:3d:0d:9c: a0:bc:ab:87:84:4a:f1:c9:a7:d2:02:60:f3:e4:e2: 27:1b:21:46:ae:ce:d4:67:84:9d:cd:b4:20:a6:26: e9:d6:32:58:30:54:c4:81:bd:b9:79:07:03:a8:3a: c3:8f:e5:2d:73:31:6a:07:87:20:a3:c7:cb:65:4a: a1:68:1a:52:45:79:db:af:9c:77:63:ea:55:c6:fc: b6:98:81:dd:da:4b:f9:ca:39:cf:c2:64:0d:d0:56: 7b:13:ca:16:8d:fc:b9:ba:7b:c8:36:c4:04:01:0d: f0:b8:78:cb:d7:8e:7c:a9:11:dc:b5:1e:3c:14:66: b5:8a:e2:1a:39:e9:59:25:85:1f:1f:c1:68:33:f3: d2:3f:88:b3:8e:c8:01:0a:3b:1e:04:e5:c3:bb:eb: 60:5f:9d:7f:91:ec:f3:49:58:52:e8:95:d7:b9:ec: dc:83:38:0f:0d:4c:a1:c5:8e:8b:fd:ec:5a:2b:72: 7f:d6:eb:47:2d:7a:4c:9d:72:5d:13:96:8a:75:78: bf:be:01:a8:86:5b:b8:8c:67:d2:63:08:4d:4d:0f: 97:b9:55:bb:85:ee:91:00:7a:e0:0b:a5:10:be:6c: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:80:6B:66:68:77:5C:91:95:CA:92:22:2C:CD:52:4F:F6:75:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1c:39:83:80:e2:f7:a8:a5:2a:a5:03:c1:f2:a9:3e:57:82: 01:0a:3a:56:f4:18:83:06:ca:20:50:22:6f:f4:11:f2:01:b3: 13:ef:24:1c:d1:6f:69:76:05:9f:b5:b2:ad:05:35:d2:c3:7a: 69:c3:9e:9e:33:bd:d0:3a:d1:e1:42:3d:b4:72:ce:a1:2f:08: 0b:9f:13:a1:c2:58:53:54:1c:26:a5:50:49:14:e5:38:93:a5: e5:ab:5a:39:e9:c4:ba:be:31:78:bb:3e:8e:77:7d:c6:32:1a: c0:47:86:f2:09:cd:9c:d6:e5:58:d1:0f:5f:cf:58:61:ed:54: 26:4c:88:81:49:96:35:01:6e:ea:4b:f3:6c:61:9a:a7:79:dc: d3:a5:07:a8:15:95:02:c4:4a:e7:24:8e:c6:cc:6e:1a:f9:5a: 9d:cf:13:fc:ac:bb:4e:45:ef:b0:90:c3:88:75:4b:4d:40:a2: 27:ed:8f:3b:c7:a0:8f:f9:f7:9c:43:61:3a:0f:dc:a5:72:9c: fd:7e:c3:b8:33:78:0c:50:24:1a:73:12:2b:29:14:41:e3:8a: d9:73:74:95:3a:73:73:9d:24:3d:0b:d7:a6:72:7e:b4:13:2f: 57:89:8d:36:2d:f3:ca:96:e8:ac:93:68:8c:a4:16:64:b0:e6: d8:1a:c9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaa0vkHyoJXwHVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NDMyM2Y4ODEtNDcyYy00OGM4LTk5OTUtNTlmYjY4NDBiNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgd6gSysUfOi7hhemXwx5obIOShnFNtbiQ89 DZygvKuHhErxyafSAmDz5OInGyFGrs7UZ4SdzbQgpibp1jJYMFTEgb25eQcDqDrD j+UtczFqB4cgo8fLZUqhaBpSRXnbr5x3Y+pVxvy2mIHd2kv5yjnPwmQN0FZ7E8oW jfy5unvINsQEAQ3wuHjL1458qRHctR48FGa1iuIaOelZJYUfH8FoM/PSP4izjsgB CjseBOXDu+tgX51/kezzSVhS6JXXuezcgzgPDUyhxY6L/exaK3J/1utHLXpMnXJd E5aKdXi/vgGohlu4jGfSYwhNTQ+XuVW7he6RAHrgC6UQvmweVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq4gGtmaHdckZXKkiIszVJP9nVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGIxZWM2ZjEtNjk1MS0z YWFkLWJkMWUtNTY1OWJmNDM4MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUcOYOA4veopSqlA8HyqT5XggEKOlb0GIMGyiBQIm/0EfIBsxPvJBzR b2l2BZ+1sq0FNdLDemnDnp4zvdA60eFCPbRyzqEvCAufE6HCWFNUHCalUEkU5TiT peWrWjnpxLq+MXi7Po53fcYyGsBHhvIJzZzW5VjRD1/PWGHtVCZMiIFJljUBbupL 82xhmqd53NOlB6gVlQLESuckjsbMbhr5Wp3PE/ysu05F77CQw4h1S01AoiftjzvH oI/595xDYToP3KVynP1+w7gzeAxQJBpzEispFEHjitlzdJU6c3OdJD0L16ZyfrQT L1eJjTYt88qW6KyTaIykFmSw5tgayfE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:39 2025 by rpki-client