$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/3804b9ed-e081-3a86-97c7-15444867c326.roa File: 3804b9ed-e081-3a86-97c7-15444867c326.roa (raw, json) Hash identifier: BITxeMxJClnm3aDxRIR/EWzBp+g+MgCQ8MC0JLqOwFA= Subject key identifier: 4D:96:12:F0:AB:AD:6E:13:39:53:63:CB:9E:D6:26:4C:E7:BC:3C:5D Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584944694A69B5119F744B9EF280 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/3804b9ed-e081-3a86-97c7-15444867c326.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 396982 IP address blocks: 162.244.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4a:69:b5:11:9f:74:4b:9e:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=5f4c34e6-ce3b-4773-8ce7-634545f57ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0c:77:38:0e:ca:39:33:b8:da:4c:4f:fc:9c: 48:bf:52:f7:09:be:c6:c4:71:50:29:69:61:f9:e7: 0a:c9:8f:f0:8c:c6:ba:e5:79:34:a0:a2:5c:c6:42: 91:82:ef:9b:48:5d:44:fc:82:1a:cc:4e:66:65:30: 21:cc:48:0d:3b:d7:be:60:d8:ec:31:ca:56:a1:68: d9:4d:f3:82:22:76:45:1d:57:53:6b:0f:ac:12:1a: b3:22:f0:4b:48:00:03:7e:da:0f:b3:d2:bd:03:54: 2e:08:79:d8:42:33:8e:09:48:b4:65:c1:66:d3:2f: e6:01:97:4a:60:0d:15:cc:93:1b:a3:dd:23:89:8f: e5:b0:c3:50:78:ec:3c:c4:5e:2a:68:35:80:f9:2c: 01:ab:a4:13:98:38:fa:4f:f3:2e:d1:ec:0e:79:24: 5a:0e:43:98:4b:a1:02:b5:d9:8e:a5:f3:bb:e3:53: 93:ba:14:dd:33:b6:2c:50:60:fb:56:18:20:c0:5b: 1a:6c:83:68:23:09:f2:6b:41:72:82:98:7b:68:3f: 1d:f0:90:10:8b:90:7e:72:d0:7c:7b:03:00:93:3c: cd:01:30:19:b4:5e:32:48:30:1c:be:67:86:1a:c4: 03:8e:89:a8:25:b0:cf:9a:5a:f9:77:b7:42:e0:ab: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:96:12:F0:AB:AD:6E:13:39:53:63:CB:9E:D6:26:4C:E7:BC:3C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/3804b9ed-e081-3a86-97c7-15444867c326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 162.244.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d1:3d:ec:5f:f2:66:58:a6:4e:2f:57:70:68:4b:23:a9:1b: e5:90:c0:f3:6a:f7:f0:43:eb:70:05:da:e7:a5:5f:51:7a:b6: 25:ee:09:9f:ab:5a:0b:05:dd:00:e6:65:58:82:dd:87:07:26: 96:7a:0a:f5:0e:7d:9c:70:0f:46:d6:fa:ac:7d:33:c3:3d:32: 69:f9:a2:c5:b9:bf:24:d6:5f:2b:02:db:34:24:3d:a8:90:38: c8:ad:c1:f1:fc:07:50:15:8b:5c:8c:5d:4d:4d:ef:8a:a0:73: 16:f9:f4:63:c7:a3:9f:f7:7f:7c:70:6a:d4:98:f5:b1:43:4e: 73:29:bb:77:13:6e:94:8f:ec:ed:b1:93:bb:58:fb:31:86:03: 91:4d:73:73:f0:51:98:67:69:f8:dd:e1:3f:09:cb:78:89:52: 1e:ab:b1:a2:81:27:e2:14:7e:15:9b:a2:d9:e4:48:34:97:ff: f4:57:0f:9b:8d:98:c3:c5:44:e6:d4:a0:70:e2:62:c7:4c:d4: 4f:62:b0:63:25:fd:6c:f1:a4:eb:d6:35:e9:e6:a1:c3:77:60: a4:30:8b:32:3e:90:5a:4c:3a:ab:f8:ab:bc:08:71:4b:2c:43: 41:2e:c6:91:b6:2e:79:d7:7b:4c:52:f8:f6:d5:f9:6f:85:1e: f7:4a:09:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUpptRGfdEue8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NWY0YzM0ZTYtY2UzYi00NzczLThjZTctNjM0NTQ1ZjU3YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwx3OA7KOTO42kxP/JxIv1L3Cb7GxHFQKWlh +ecKyY/wjMa65Xk0oKJcxkKRgu+bSF1E/IIazE5mZTAhzEgNO9e+YNjsMcpWoWjZ TfOCInZFHVdTaw+sEhqzIvBLSAADftoPs9K9A1QuCHnYQjOOCUi0ZcFm0y/mAZdK YA0VzJMbo90jiY/lsMNQeOw8xF4qaDWA+SwBq6QTmDj6T/Mu0ewOeSRaDkOYS6EC tdmOpfO741OTuhTdM7YsUGD7VhggwFsabINoIwnya0Fygph7aD8d8JAQi5B+ctB8 ewMAkzzNATAZtF4ySDAcvmeGGsQDjomoJbDPmlr5d7dC4KtxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2WEvCrrW4TOVNjy57WJkznvDxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMzgwNGI5ZWQtZTA4MS0z YTg2LTk3YzctMTU0NDQ4NjdjMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLRPexf8mZYpk4vV3BoSyOpG+WQwPNq9/BD63AF2uelX1F6tiXuCZ+r WgsF3QDmZViC3YcHJpZ6CvUOfZxwD0bW+qx9M8M9Mmn5osW5vyTWXysC2zQkPaiQ OMitwfH8B1AVi1yMXU1N74qgcxb59GPHo5/3f3xwatSY9bFDTnMpu3cTbpSP7O2x k7tY+zGGA5FNc3PwUZhnafjd4T8Jy3iJUh6rsaKBJ+IUfhWbotnkSDSX//RXD5uN mMPFRObUoHDiYsdM1E9isGMl/WzxpOvWNenmocN3YKQwizI+kFpMOqv4q7wIcUss Q0EuxpG2LnnXe0xS+PbV+W+FHvdKCWE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:54 2025 by rpki-client