$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa File: 509acabd-b582-367e-a14f-c5a9330423c4.roa (raw, json) Hash identifier: Jq48Ll5At9AvVk9jhQ2aZ3KpCASGfJq9wq6taQl52og= Subject key identifier: DA:1C:2A:7C:E2:B9:9D:3B:D1:94:54:95:88:80:B7:45:88:A1:F8:1C Certificate issuer: /CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a Certificate serial: 010D0C9F43285848EF613834C48E3D2E49C35BE0 Authority key identifier: C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 42473 IP address blocks: 162.220.220.0/22 maxlen: 24 162.250.0.0/21 maxlen: 24 2605:380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:38:34:c4:8e:3d:2e:49:c3:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=8d1b04c3-8c43-47aa-8b5a-f37ea41445f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:2b:5f:e4:f4:a4:ed:7d:ac:8b:0a:b8:19: 0f:87:53:33:db:7e:6c:3e:52:2d:60:b8:43:cd:06: 8d:cc:ff:6a:31:63:52:a0:14:97:22:7f:fc:7f:10: f1:85:ba:36:11:b6:a2:45:4d:71:2e:ee:d1:04:04: ae:35:05:fd:e6:97:86:83:db:f8:3c:27:f9:cf:11: 34:85:ba:14:ff:2d:13:fc:81:51:e3:28:86:55:92: b3:38:b6:fe:1b:dc:31:78:42:39:c7:b2:19:18:95: 2b:70:e3:96:21:f5:89:69:79:a0:43:e7:85:a7:72: 4b:e2:19:32:cf:f0:3f:24:4b:6c:d9:2b:ba:1c:9d: 9e:79:83:93:99:2a:5a:5d:c1:a9:75:b7:19:83:c3: 49:eb:fb:a8:2c:7d:d5:f3:dc:80:e7:d0:b4:e1:2b: 0b:08:cc:1e:19:fe:6a:e3:b7:b6:0c:a4:9a:45:a5: e9:41:bb:7c:66:9b:8e:6f:9a:3b:56:cc:70:f3:e9: e7:cb:6b:df:f8:0a:7a:22:f7:14:5f:b1:a0:ed:7a: 46:c8:17:03:ee:f0:cf:ac:ec:41:e8:3a:3b:82:ee: d9:e8:c0:f7:5e:07:73:b2:18:0b:dd:21:12:c8:d4: 7d:f1:71:7b:33:71:99:c6:2e:ee:c1:49:d8:26:2e: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1C:2A:7C:E2:B9:9D:3B:D1:94:54:95:88:80:B7:45:88:A1:F8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl X509v3 Authority Key Identifier: keyid:C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer sbgp-ipAddrBlock: critical IPv4: 162.220.220.0/22 162.250.0.0/21 IPv6: 2605:380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:05:85:9c:61:4c:1b:e6:41:c8:87:89:13:c1:0b:50:8f:c2: dd:3b:35:f6:e8:5c:dc:b6:38:48:af:93:d3:d2:ea:05:8a:61: 87:34:e9:bb:f1:e0:1b:6d:98:23:6e:db:66:f2:f1:45:12:0b: 06:93:1e:13:f2:6c:b8:c4:ab:31:1e:46:89:26:62:fc:80:91: 51:1c:8d:8d:8b:4e:36:ef:dd:17:bd:1e:9e:a0:76:14:07:54: 73:9f:aa:1e:c4:fe:51:fd:eb:ab:31:4d:ef:0a:5c:53:61:f1: 18:32:18:83:a1:4d:9e:45:2e:80:2d:db:d9:d0:11:73:4b:77: ba:73:33:35:72:68:80:67:32:f1:b8:a9:71:01:ce:5e:d8:5f: 59:32:81:4d:57:dc:44:5a:5d:7f:f6:3d:5e:d8:49:76:11:de: 19:25:8e:ac:9d:c1:02:35:9d:e9:8d:9e:c3:cb:ad:51:f7:55: e9:bf:3e:db:ce:1e:c0:08:8a:e1:28:60:85:98:42:9a:ed:d3: 83:60:c9:a5:e2:ab:be:ef:48:9d:04:69:77:96:92:5c:85:8c: 04:47:cf:1a:0f:83:62:c7:c7:c6:21:0b:cd:52:61:0c:20:15: 50:e4:74:1b:55:b6:93:cf:db:0e:11:8f:7c:7f:6d:05:c9:77: c6:eb:17:0b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjvYTg0xI49LknDW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q2ZjAwNTktN2VjMy00ZjRmLTkwMTQtMGVhMDYzMTY1 NjlhMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OGQxYjA0YzMtOGM0My00N2FhLThiNWEtZjM3ZWE0MTQ0NWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYwrX+T0pO19rIsKuBkPh1Mz235sPlItYLhD zQaNzP9qMWNSoBSXIn/8fxDxhbo2EbaiRU1xLu7RBASuNQX95peGg9v4PCf5zxE0 hboU/y0T/IFR4yiGVZKzOLb+G9wxeEI5x7IZGJUrcOOWIfWJaXmgQ+eFp3JL4hky z/A/JEts2Su6HJ2eeYOTmSpaXcGpdbcZg8NJ6/uoLH3V89yA59C04SsLCMweGf5q 47e2DKSaRaXpQbt8ZpuOb5o7Vsxw8+nny2vf+Ap6IvcUX7Gg7XpGyBcD7vDPrOxB 6Do7gu7Z6MD3XgdzshgL3SESyNR98XF7M3GZxi7uwUnYJi7ARwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNocKnziuZ070ZRUlYiAt0WIofgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZDZm MDA1OS03ZWMzLTRmNGYtOTAxNC0wZWEwNjMxNjU2OWEvNTA5YWNhYmQtYjU4Mi0z NjdlLWExNGYtYzVhOTMzMDQyM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2Q2ZjAwNTktN2VjMy00ZjRmLTkw MTQtMGVhMDYzMTY1NjlhLzdkNmYwMDU5LTdlYzMtNGY0Zi05MDE0LTBlYTA2MzE2 NTY5YS5jcmwwHwYDVR0jBBgwFoAUx8pLxH3a6M8g3nuI7Nh7mBgvyDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZDZmMDA1OS03ZWMzLTRmNGYtOTAxNC0wZWEw NjMxNjU2OWEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCotzcAwQD ovoAMA0EAgACMAcDBQAmBQOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGEFhZxhTBvmQciHiRPBC1CPwt07 NfboXNy2OEivk9PS6gWKYYc06bvx4BttmCNu22by8UUSCwaTHhPybLjEqzEeRokm YvyAkVEcjY2LTjbv3Re9Hp6gdhQHVHOfqh7E/lH966sxTe8KXFNh8RgyGIOhTZ5F LoAt29nQEXNLd7pzMzVyaIBnMvG4qXEBzl7YX1kygU1X3ERaXX/2PV7YSXYR3hkl jqydwQI1nemNnsPLrVH3Vem/PtvOHsAIiuEoYIWYQprt04NgyaXiq77vSJ0EaXeW klyFjARHzxoPg2LHx8YhC81SYQwgFVDkdBtVtpPP2w4Rj3x/bQXJd8brFws= -----END CERTIFICATE-----Generated at Mon Apr 28 07:10:30 2025 by rpki-client