$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa File: 27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json) Hash identifier: ClRgGxQ1VMSvwvSY2vSdXQBp/TF2DWOPwz5A+OyuR2s= Subject key identifier: DD:39:93:25:4C:63:FD:6C:AB:9B:CF:06:2C:D9:56:EB:E3:A3:28:52 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584A14657419839965A15AB87900 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 393433 IP address blocks: 162.254.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:74:19:83:99:65:a1:5a:b8:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=109fa3e3-4b0f-4864-9ea8-b5f22cf5d6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:f6:42:af:41:e9:65:17:9b:f6:2d:90:60: 39:59:d1:a7:76:50:ed:07:ca:24:44:2a:f4:78:c1: ba:85:a7:05:ce:5d:2a:b6:b1:a8:07:dc:b2:b6:c7: 8c:24:92:d3:99:25:26:24:a6:41:25:75:04:e6:7a: 3c:a3:9c:f7:e1:f8:a6:76:35:70:d3:d8:97:6d:50: 51:bf:c2:bd:9a:81:52:56:88:51:a3:cf:d1:8e:cb: 17:1a:46:03:d5:c3:bb:7e:1b:d7:ab:f1:09:21:0b: 99:e8:94:a0:35:27:72:4b:97:d3:00:af:a4:c1:5a: 5b:09:51:31:6c:06:c7:95:25:34:73:7f:6d:a3:f8: e4:0c:4e:19:23:f3:dc:0d:3f:37:b5:d5:cf:c3:bc: 82:f5:7a:40:44:8f:93:32:99:64:da:a4:9e:9c:29: f3:e0:ed:9e:d5:87:83:d7:ac:cb:ee:76:f4:a8:c1: ed:72:1e:84:81:64:87:a2:c1:bc:00:90:33:36:69: dd:de:46:d6:f2:10:71:21:8f:82:89:6d:60:c3:e2: b6:f7:cf:7d:e4:ac:f3:06:60:f2:1d:bf:3e:5c:01: 16:41:6d:cc:58:5f:57:94:b7:0e:85:9d:ee:d0:c3: f5:a1:ef:33:b8:60:b2:c5:f5:c2:fc:ac:ff:6a:0a: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:93:25:4C:63:FD:6C:AB:9B:CF:06:2C:D9:56:EB:E3:A3:28:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a2:bb:48:a2:1f:68:84:66:b6:57:a1:95:0a:02:89:fd:e4: e9:91:84:41:05:dc:c8:eb:1b:94:d8:01:2e:70:9c:26:f4:43: 69:95:e1:42:b8:4e:04:3f:de:05:af:2f:1a:b4:84:af:1b:16: f5:3f:d8:84:42:6f:95:12:eb:8b:60:1c:7a:41:ca:3c:ac:ef: 05:9d:15:45:24:b2:16:94:06:3e:5e:2a:0b:71:f3:40:e1:c9: bc:25:cc:f0:ef:f3:07:84:b4:68:a3:2d:ed:01:9d:8b:2c:53: d8:66:fb:05:e5:f7:c8:da:0c:1b:60:1f:ee:66:b7:f4:83:23: 41:4b:7a:d9:3e:13:09:27:89:35:4d:5a:c6:bb:b0:54:de:d9: 7e:cd:34:07:59:67:44:c7:01:08:63:8c:e5:9c:f8:20:6c:5d: 69:02:2f:fb:85:a6:5a:cc:ad:6f:72:e0:d3:db:0a:a4:2f:a6: fb:7d:d0:58:0f:9e:e1:f5:b6:48:a9:b0:94:82:32:a4:b4:b8: 59:9b:69:40:e6:13:d7:ed:db:3c:f9:f6:9d:d8:59:e0:84:00: c9:cc:47:82:b6:70:0f:98:67:d9:da:35:42:67:48:a5:0a:5d: 60:30:a7:83:79:be:0f:3f:30:e1:48:2e:75:b3:27:5e:4e:b4: 8b:c0:ad:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXQZg5lloVq4eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MTA5ZmEzZTMtNGIwZi00ODY0LTllYTgtYjVmMjJjZjVkNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+D2Qq9B6WUXm/YtkGA5WdGndlDtB8okRCr0 eMG6hacFzl0qtrGoB9yytseMJJLTmSUmJKZBJXUE5no8o5z34fimdjVw09iXbVBR v8K9moFSVohRo8/RjssXGkYD1cO7fhvXq/EJIQuZ6JSgNSdyS5fTAK+kwVpbCVEx bAbHlSU0c39to/jkDE4ZI/PcDT83tdXPw7yC9XpARI+TMplk2qSenCnz4O2e1YeD 16zL7nb0qMHtch6EgWSHosG8AJAzNmnd3kbW8hBxIY+CiW1gw+K298995KzzBmDy Hb8+XAEWQW3MWF9XlLcOhZ3u0MP1oe8zuGCyxfXC/Kz/agrLQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN05kyVMY/1sq5vPBizZVuvjoyhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvMjdkZmEzNGUtZTk5Yi0z YTk1LWFmYWMtZjk4MzM1MGZhMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWiu0iiH2iEZrZXoZUKAon95OmRhEEF3MjrG5TYAS5wnCb0Q2mV4UK4 TgQ/3gWvLxq0hK8bFvU/2IRCb5US64tgHHpByjys7wWdFUUkshaUBj5eKgtx80Dh ybwlzPDv8weEtGijLe0BnYssU9hm+wXl98jaDBtgH+5mt/SDI0FLetk+EwkniTVN Wsa7sFTe2X7NNAdZZ0THAQhjjOWc+CBsXWkCL/uFplrMrW9y4NPbCqQvpvt90FgP nuH1tkipsJSCMqS0uFmbaUDmE9ft2zz59p3YWeCEAMnMR4K2cA+YZ9naNUJnSKUK XWAwp4N5vg8/MOFILnWzJ15OtIvArbw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:26:26 2025 by rpki-client