$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/720a27f4-1f1a-3a71-b385-a3d01090242f.roa File: 720a27f4-1f1a-3a71-b385-a3d01090242f.roa (raw, json) Hash identifier: 5AVz/8QgMgcL1Oe1H5dzNdddbCO2jyOBleewT9qkdo8= Subject key identifier: 04:BC:56:5C:9E:68:CD:9D:8B:65:81:99:45:69:00:37:B5:E7:69:B5 Certificate issuer: /CN=02e3db6d-40b5-4639-a499-a02b80a4befe Certificate serial: 010D0C9F43285849A784C25AE0E5931FD77B6300 Authority key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/720a27f4-1f1a-3a71-b385-a3d01090242f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 62488 IP address blocks: 162.216.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c2:5a:e0:e5:93:1f:d7:7b:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e3db6d-40b5-4639-a499-a02b80a4befe Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ac9abdb2-d941-4b91-a965-64d8e2b91082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:7c:53:a8:9a:c4:2f:d1:61:05:30:4b:54: e5:0b:99:67:69:78:3a:6f:2e:79:5f:7e:ae:11:ff: 8e:35:e6:e1:65:8a:26:5d:d3:9e:12:a7:5b:83:df: 15:48:f0:3f:a4:73:c6:a4:ed:99:97:d7:1f:f1:62: 8b:d1:ee:bc:e1:ec:a6:9b:2e:0b:53:71:42:dc:df: 9d:8f:2e:04:d1:60:83:6e:23:33:3b:d2:7f:99:ef: d2:a8:d1:2a:d2:8f:c0:05:c2:95:ce:00:3c:f8:37: 81:35:07:f6:dd:18:d3:0c:dc:80:a4:36:36:e7:f2: a0:2b:9a:69:67:a5:e2:14:b9:e4:5b:35:95:e3:47: 13:20:37:31:e4:ab:f6:f8:d2:5a:42:7f:66:1b:52: e8:de:ea:ec:65:95:5a:1f:84:66:7f:7b:67:10:aa: da:4f:55:50:8e:14:dd:0c:ae:f1:d8:b1:da:f0:ca: 6e:14:13:8a:f7:4a:03:41:a6:77:ba:76:57:29:3f: 07:61:18:c6:42:5e:d2:cb:46:67:87:6b:2c:fe:1e: d0:25:d6:2a:f8:1c:7b:a1:2d:80:23:89:18:9f:99: 45:73:08:35:5e:74:77:7c:6e:a1:b8:27:da:00:bd: 25:14:37:b6:6c:ca:28:34:24:30:da:be:de:ac:27: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BC:56:5C:9E:68:CD:9D:8B:65:81:99:45:69:00:37:B5:E7:69:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/720a27f4-1f1a-3a71-b385-a3d01090242f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl X509v3 Authority Key Identifier: keyid:CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer sbgp-ipAddrBlock: critical IPv4: 162.216.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:cc:a3:7f:cd:6b:d7:06:64:57:38:e1:c5:7c:3b:4a:12:17: a6:ef:50:1e:c5:c1:f6:a1:1d:2e:58:61:92:a2:f1:3b:50:5c: e1:ed:5d:19:e4:02:e8:f8:a9:6b:f9:1c:ee:b7:b7:49:e8:f6: de:7b:28:de:2a:b5:72:6f:d1:5d:74:cb:81:7c:04:c8:8b:a4: 92:75:0d:b9:71:3e:3c:2e:90:6f:ea:81:ef:9b:f1:18:53:f8: 0d:ea:37:09:2b:f9:54:bf:85:db:aa:72:61:f7:ee:22:45:23: 00:9d:bc:c8:9f:82:dc:00:f0:17:68:54:bf:2c:0a:de:5d:be: 50:43:17:85:57:17:7e:6d:36:71:9f:0f:3c:63:77:13:50:0a: fd:fc:0a:dc:a9:1e:15:41:01:a4:0d:d1:5b:a6:3c:fc:c6:9c: f5:e2:2b:54:21:fe:f6:92:48:3e:f3:f1:ac:13:93:af:2f:5b: e3:7c:f2:c8:a2:5d:c0:58:fe:18:0c:58:2c:96:98:96:a4:61: 7e:5d:0c:da:5d:fa:23:f0:b0:52:86:21:3e:13:8b:89:e6:8b: c4:7b:e9:b5:36:4b:2a:fc:2a:4b:dc:f5:3c:49:c8:7d:9c:dc: e3:b7:bf:64:d2:71:6b:6b:cb:db:8a:09:ab:0a:4a:8a:ac:7b: 7f:99:59:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMJa4OWTH9d7YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlM2RiNmQtNDBiNS00NjM5LWE0OTktYTAyYjgwYTRi ZWZlMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWM5YWJkYjItZDk0MS00YjkxLWE5NjUtNjRkOGUyYjkxMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn58U6iaxC/RYQUwS1TlC5lnaXg6by55X36u Ef+ONebhZYomXdOeEqdbg98VSPA/pHPGpO2Zl9cf8WKL0e684eymmy4LU3FC3N+d jy4E0WCDbiMzO9J/me/SqNEq0o/ABcKVzgA8+DeBNQf23RjTDNyApDY25/KgK5pp Z6XiFLnkWzWV40cTIDcx5Kv2+NJaQn9mG1Lo3ursZZVaH4Rmf3tnEKraT1VQjhTd DK7x2LHa8MpuFBOK90oDQaZ3unZXKT8HYRjGQl7Sy0Znh2ss/h7QJdYq+Bx7oS2A I4kYn5lFcwg1XnR3fG6huCfaAL0lFDe2bMooNCQw2r7erCcSIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS8VlyeaM2di2WBmUVpADe152m1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmUz ZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJiODBhNGJlZmUvNzIwYTI3ZjQtMWYxYS0z YTcxLWIzODUtYTNkMDEwOTAyNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDJlM2RiNmQtNDBiNS00NjM5LWE0 OTktYTAyYjgwYTRiZWZlLzAyZTNkYjZkLTQwYjUtNDYzOS1hNDk5LWEwMmI4MGE0 YmVmZS5jcmwwHwYDVR0jBBgwFoAUzGII0y3oa3ErofLAhqi2YpmB77IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMmUzZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJi ODBhNGJlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLMo3/Na9cGZFc44cV8O0oSF6bvUB7FwfahHS5YYZKi8TtQXOHtXRnk Auj4qWv5HO63t0no9t57KN4qtXJv0V10y4F8BMiLpJJ1DblxPjwukG/qge+b8RhT +A3qNwkr+VS/hduqcmH37iJFIwCdvMifgtwA8BdoVL8sCt5dvlBDF4VXF35tNnGf DzxjdxNQCv38CtypHhVBAaQN0VumPPzGnPXiK1Qh/vaSSD7z8awTk68vW+N88sii XcBY/hgMWCyWmJakYX5dDNpd+iPwsFKGIT4Ti4nmi8R76bU2Syr8Kkvc9TxJyH2c 3OO3v2TScWtry9uKCasKSoqse3+ZWZU= -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:11 2025 by rpki-client