$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa File: f1adbd29-319d-377f-910e-3fd95df8a73b.roa (raw, json) Hash identifier: Owscp1jGNPlTmR9cMN1iOk6hBidtphKzkRjwhPy11ao= Subject key identifier: FF:53:FA:88:80:F2:81:34:15:88:08:7C:F6:D5:54:E7:66:4B:1E:FE Certificate issuer: /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Certificate serial: 010D0C9F43285849D1650A9ECCE18FEAAD51AF00 Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 162.219.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0a:9e:cc:e1:8f:ea:ad:51:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=383f6d0b-7fb9-4646-a479-af160e17fe50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:07:7c:52:84:df:3f:85:83:5f:b1:d1:cf: 15:56:25:c9:ae:2d:7b:05:3f:47:99:72:f6:b3:26: a2:a3:84:7b:75:3f:67:dc:0e:27:a3:53:c9:16:f7: 75:1b:a9:2c:95:52:1e:fe:6e:0f:64:29:c6:c3:74: bb:67:00:de:40:36:1b:b4:fa:fc:e2:16:bb:ac:2f: de:d6:ce:66:16:82:1e:7e:e1:12:b6:7a:6d:61:ae: 74:97:51:1b:c6:f7:98:59:99:04:49:59:e0:b9:3c: 8e:fd:cd:64:49:2d:f8:88:a1:0c:4e:7c:ca:b9:d6: 75:d6:fb:ee:05:f9:2a:64:c1:e2:f0:21:e8:c4:54: 90:60:c5:f1:8e:10:77:e4:fb:b3:94:9f:27:5d:24: e1:2b:2e:cd:5e:5a:aa:71:02:18:ed:d3:72:4e:a7: ac:42:95:b3:cf:56:75:6b:4e:9a:b6:4b:8c:04:f7: bc:77:50:ec:a1:8d:0e:6c:94:04:b4:9a:5d:87:3e: c9:20:bb:ed:0e:4a:aa:a3:a5:98:0c:b3:a6:22:3b: c7:66:49:6e:0a:2c:c7:16:2f:98:dc:af:1e:cb:1f: f2:b5:4b:e1:c7:4c:97:3f:ca:ed:60:4b:ae:3b:64: 22:a7:6e:be:14:43:36:e6:42:1f:be:91:3f:d2:aa: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:53:FA:88:80:F2:81:34:15:88:08:7C:F6:D5:54:E7:66:4B:1E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl X509v3 Authority Key Identifier: keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c7:94:32:6b:c7:09:83:9b:52:d1:a8:33:85:1d:76:83:6d: d6:b4:7c:c4:89:31:02:03:58:ed:8f:1b:24:ec:2f:db:05:44: 38:82:a0:40:3e:d7:af:3c:99:d9:57:66:22:c5:83:9f:a2:e7: cb:21:96:fb:10:21:b1:f7:c3:6a:51:e9:6e:ab:57:3f:94:19: 88:f6:6a:10:8c:69:49:ce:8b:19:45:60:86:67:77:82:27:9e: fe:17:9c:7c:43:9e:bb:4b:5a:44:b3:72:7f:e8:ef:40:4e:1e: a1:a4:3c:3f:81:8e:a4:12:f5:28:48:ca:71:08:b3:07:cc:15: 7a:42:6a:b4:a4:c1:3c:02:31:6b:54:09:3e:f6:e5:4d:d6:7e: 40:fe:e0:9d:3d:12:f3:e0:2c:91:e9:df:c0:d5:a7:c0:8a:fa: e1:16:02:a1:e2:9f:02:c5:66:11:a3:9f:4f:9e:eb:96:ca:e5: cf:f9:85:1c:c4:1a:8d:b3:33:e1:f3:f8:5f:1b:b0:8d:00:09: a1:80:ee:ad:fd:fb:71:ef:66:75:3b:db:0f:f0:3c:08:87:11: 0b:3e:07:c7:0a:cf:cb:94:ee:ef:77:7e:48:b1:a1:80:f1:37: 68:78:b8:fc:d5:b3:81:3c:1d:ad:6b:10:29:06:6a:24:82:09: de:22:22:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQqezOGP6q1RrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0NzgtOTU4NDljYjc3 ZTVlMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MzgzZjZkMGItN2ZiOS00NjQ2LWE0NzktYWYxNjBlMTdmZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkQHfFKE3z+Fg1+x0c8VViXJri17BT9HmXL2 syaio4R7dT9n3A4no1PJFvd1G6kslVIe/m4PZCnGw3S7ZwDeQDYbtPr84ha7rC/e 1s5mFoIefuEStnptYa50l1EbxveYWZkESVnguTyO/c1kSS34iKEMTnzKudZ11vvu BfkqZMHi8CHoxFSQYMXxjhB35PuzlJ8nXSThKy7NXlqqcQIY7dNyTqesQpWzz1Z1 a06atkuMBPe8d1DsoY0ObJQEtJpdhz7JILvtDkqqo6WYDLOmIjvHZkluCizHFi+Y 3K8eyx/ytUvhx0yXP8rtYEuuO2Qip26+FEM25kIfvpE/0qpNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9T+oiA8oE0FYgIfPbVVOdmSx7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNTdm NTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0OWNiNzdlNWUvZjFhZGJkMjktMzE5ZC0z NzdmLTkxMGUtM2ZkOTVkZjhhNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0 NzgtOTU4NDljYjc3ZTVlL2E1N2Y1NDNkLTU0ZjctNGRkNi1hNDc4LTk1ODQ5Y2I3 N2U1ZS5jcmwwHwYDVR0jBBgwFoAUzQLYTm7RMgTKPzjYIZZ9u+A0nZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNTdmNTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0 OWNiNzdlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArHlDJrxwmDm1LRqDOFHXaDbda0fMSJMQIDWO2PGyTsL9sFRDiCoEA+ 1688mdlXZiLFg5+i58shlvsQIbH3w2pR6W6rVz+UGYj2ahCMaUnOixlFYIZnd4In nv4XnHxDnrtLWkSzcn/o70BOHqGkPD+BjqQS9ShIynEIswfMFXpCarSkwTwCMWtU CT725U3WfkD+4J09EvPgLJHp38DVp8CK+uEWAqHinwLFZhGjn0+e65bK5c/5hRzE Go2zM+Hz+F8bsI0ACaGA7q39+3HvZnU72w/wPAiHEQs+B8cKz8uU7u93fkixoYDx N2h4uPzVs4E8Ha1rECkGaiSCCd4iIo4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:26 2025 by rpki-client