$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4653b429-e21f-3f93-8058-1196b0953db4.roa File: 4653b429-e21f-3f93-8058-1196b0953db4.roa (raw, json) Hash identifier: /ZQulMCS88kWCB7IK/oYnem8g/mWRatkf2jOVW3e7vM= Subject key identifier: 46:12:E0:EE:7A:09:96:DC:CD:25:88:71:9F:D0:1E:23:C8:A1:94:4F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849393E83C098D906884C54D1D0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4653b429-e21f-3f93-8058-1196b0953db4.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 5650 IP address blocks: 168.93.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:83:c0:98:d9:06:88:4c:54:d1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=61d2b80b-30cf-48db-97e3-299dca1358d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:0d:dc:0a:38:27:f5:0a:e8:42:e1:ca:cb: 54:be:fa:76:81:9c:22:33:d9:5d:e6:1d:05:6b:42: 2b:a2:45:c9:ea:0f:0d:e9:48:03:e7:d0:75:0a:8c: a4:4a:e2:de:9e:71:58:68:ec:cd:57:87:a1:0c:27: 3c:81:ce:62:a2:8c:01:d5:f6:7a:a6:ae:91:ff:34: a8:58:70:24:6c:9c:9c:89:a7:75:ff:25:7b:a5:f1: 57:4e:a8:5c:ec:18:a3:f1:73:89:6e:c1:9d:51:49: 44:aa:c1:27:e4:b8:37:79:8e:c1:f2:15:0e:fd:84: 7b:86:69:5e:80:71:25:60:fe:a3:1b:0e:a7:23:f5: 18:ae:6e:7f:05:d6:83:2c:73:7a:40:fe:98:1e:3a: 72:69:dc:98:25:91:06:07:03:28:76:8a:94:2d:ed: 3a:dc:c4:72:81:3b:d5:9c:17:6a:f0:d0:c8:d1:ad: 7e:b6:7f:eb:45:0b:a3:59:86:0c:2c:4f:27:66:82: d9:9b:fd:91:13:ea:9a:67:3d:c5:fd:92:25:e5:47: 80:9a:b5:16:25:ad:82:9f:fc:1c:ad:2c:5a:0e:de: 52:e5:eb:11:8a:f6:d9:03:16:6b:3c:6d:6d:84:08: 55:a7:d5:4e:7e:3b:a2:04:0f:05:c6:77:5b:bc:0f: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:E0:EE:7A:09:96:DC:CD:25:88:71:9F:D0:1E:23:C8:A1:94:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4653b429-e21f-3f93-8058-1196b0953db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:cc:51:6b:0b:a5:c9:68:c4:31:d3:c5:c6:ec:af:e4:b5:9c: 7c:63:6b:0e:0e:b7:4f:07:b4:40:5f:cc:8a:2f:a3:90:5b:ff: 5b:17:37:52:01:cf:1f:67:21:c0:a3:f5:ad:fe:8c:e7:39:e3: 80:5b:2e:ba:e2:50:23:be:8b:ff:de:be:94:cb:fc:64:14:2c: 6c:ad:39:b4:c5:f8:57:11:f4:98:e8:f9:1f:70:4d:b8:fa:1f: e8:c5:98:02:98:12:5f:61:58:c3:1c:9c:45:9c:ef:79:b6:17: 3c:05:2a:29:8b:6f:0a:36:e9:2b:2c:40:37:c0:79:8e:fd:d4: 18:a5:2d:22:99:8c:dd:50:6c:1d:26:1f:86:86:0f:31:3d:b5: 73:cd:ab:bb:07:34:f9:8c:a6:f7:04:66:c1:02:9f:05:f2:f2: 42:7a:93:b1:bb:62:99:d6:86:1c:aa:a4:0c:85:c2:90:4e:8f: e7:1a:36:8d:61:6b:bf:be:1e:c6:9d:bc:cb:e1:8a:83:ab:89: 5b:7d:40:9f:be:f8:3d:2b:25:c7:c0:4a:06:b2:dc:cf:ed:95: 6d:13:e8:37:5f:4b:d2:e4:9d:bb:cd:79:ce:bc:2a:8b:20:68: 7a:90:c5:2c:51:52:a9:bf:d8:d6:b5:f9:05:6e:fb:5a:d3:d5: 4a:b5:13:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PoPAmNkGiExU0dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NjFkMmI4MGItMzBjZi00OGRiLTk3ZTMtMjk5ZGNhMTM1OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5oN3Ao4J/UK6ELhystUvvp2gZwiM9ld5h0F a0IrokXJ6g8N6UgD59B1CoykSuLennFYaOzNV4ehDCc8gc5ioowB1fZ6pq6R/zSo WHAkbJyciad1/yV7pfFXTqhc7Bij8XOJbsGdUUlEqsEn5Lg3eY7B8hUO/YR7hmle gHElYP6jGw6nI/UYrm5/BdaDLHN6QP6YHjpyadyYJZEGBwModoqULe063MRygTvV nBdq8NDI0a1+tn/rRQujWYYMLE8nZoLZm/2RE+qaZz3F/ZIl5UeAmrUWJa2Cn/wc rSxaDt5S5esRivbZAxZrPG1thAhVp9VOfjuiBA8FxndbvA9PxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYS4O56CZbczSWIcZ/QHiPIoZRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDY1M2I0MjktZTIxZi0z ZjkzLTgwNTgtMTE5NmIwOTUzZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnMUWsLpcloxDHTxcbsr+S1nHxjaw4Ot08HtEBfzIovo5Bb/1sXN1IB zx9nIcCj9a3+jOc544BbLrriUCO+i//evpTL/GQULGytObTF+FcR9Jjo+R9wTbj6 H+jFmAKYEl9hWMMcnEWc73m2FzwFKimLbwo26SssQDfAeY791BilLSKZjN1QbB0m H4aGDzE9tXPNq7sHNPmMpvcEZsECnwXy8kJ6k7G7YpnWhhyqpAyFwpBOj+caNo1h a7++HsadvMvhioOriVt9QJ+++D0rJcfASgay3M/tlW0T6DdfS9LknbvNec68Kosg aHqQxSxRUqm/2Na1+QVu+1rT1Uq1Ey0= -----END CERTIFICATE-----Generated at Sun Apr 27 03:52:58 2025 by rpki-client