$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa File: 4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa (raw, json) Hash identifier: eHfXBIQykkvakLd4LCAeEAVxeLBEMKzKU1hYZ0nOiNo= Subject key identifier: 49:6B:02:91:CA:EB:11:BD:9A:7A:EE:04:40:BD:11:B7:A1:FD:AF:64 Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Certificate serial: 010D0C9F4328584A14657CD498600F4784EA4000 Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 21743 IP address blocks: 163.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7c:d4:98:60:0f:47:84:ea:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=685e87e1-f99d-48de-8b0b-bdbef3e33b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:02:3d:8f:65:60:23:44:86:ff:2f:18:4e: 3b:a1:63:d4:75:53:19:f7:f5:e3:36:f1:e5:43:32: b6:69:05:2e:83:a4:65:27:14:55:37:14:67:b5:9e: 50:da:21:70:8d:65:b1:a1:b9:c1:79:dc:fd:a8:f7: 70:fc:a9:e6:fa:f6:7a:3c:2e:40:bd:41:fc:97:27: d8:62:3c:2d:c0:20:84:25:41:81:12:89:e6:a9:fa: c4:32:47:6b:74:33:bc:dd:03:32:00:86:37:cc:8b: 0c:71:44:ed:73:87:fb:bc:e9:5b:ea:f1:0d:5e:a1: af:55:55:b0:cd:74:a9:9b:17:e7:53:84:d1:d0:90: b5:82:18:d6:7c:1d:70:14:11:6c:4d:0f:a7:59:0e: f0:b8:29:1b:01:ad:9f:c4:44:68:33:0e:f9:56:8a: 6b:62:e8:26:85:bb:4e:6b:ac:42:7e:0f:ed:33:28: 57:61:6c:55:c2:c6:f7:ac:3c:89:b6:8d:81:53:45: 35:78:82:da:9f:b8:c6:d9:a6:17:21:35:18:3c:ec: 94:a1:08:e0:5e:1d:66:c7:3c:91:c7:32:53:84:9b: 71:e7:85:bd:6e:c9:e8:8d:b4:11:c8:7c:2e:fb:5a: f6:2d:16:92:d7:1f:94:b8:fa:d8:0d:57:d3:ac:8b: e5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:02:91:CA:EB:11:BD:9A:7A:EE:04:40:BD:11:B7:A1:FD:AF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl X509v3 Authority Key Identifier: keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c9:b7:bc:63:47:50:07:41:83:7a:24:1b:38:60:e2:d2:24: d1:03:d8:7e:66:a2:a3:56:92:c3:12:27:db:a8:39:75:48:05: 69:7a:54:08:90:7f:ef:2e:6d:2c:62:5a:ea:1b:c8:2b:dc:0b: 9b:a8:6f:1c:b8:ce:7e:df:2d:12:63:4f:70:ca:c4:e5:ce:83: 8a:aa:27:a6:b0:e4:8b:d4:f3:cd:28:b8:cc:81:11:02:1f:ce: e6:be:41:00:e3:64:3e:35:70:60:f3:c7:6e:06:b7:a9:99:fc: 99:ba:59:f1:54:89:a5:30:c3:45:ef:f4:2e:05:5c:d2:7c:00: ce:08:9e:fd:62:3b:19:1c:d5:32:35:7e:16:04:21:a8:c7:14: 3d:2a:c4:e3:7a:b3:7d:a7:88:e9:0d:d3:ab:81:a2:d3:b9:b8: 28:38:6e:fe:8b:27:9f:f2:91:c5:71:e8:23:07:2f:0d:34:de: 3d:05:66:60:7b:27:c0:d3:75:40:8b:bf:59:03:ae:82:36:b0: 6e:68:1d:8f:89:4e:9c:ba:71:3c:1a:c4:43:ec:ad:cc:b6:a8: 58:ce:55:a9:09:0b:e1:aa:49:19:8f:66:08:db:4b:8b:8b:18: bc:56:1e:2d:34:0d:fb:f0:5a:87:d5:01:d7:9e:15:ac:cd:df: 76:f0:57:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXzUmGAPR4TqQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YzBmZTUtOGFjNi00MmEyLTljMGEtNTA1MzRhYWEw MWM1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Njg1ZTg3ZTEtZjk5ZC00OGRlLThiMGItYmRiZWYzZTMzYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqoCPY9lYCNEhv8vGE47oWPUdVMZ9/XjNvHl QzK2aQUug6RlJxRVNxRntZ5Q2iFwjWWxobnBedz9qPdw/Knm+vZ6PC5AvUH8lyfY YjwtwCCEJUGBEonmqfrEMkdrdDO83QMyAIY3zIsMcUTtc4f7vOlb6vENXqGvVVWw zXSpmxfnU4TR0JC1ghjWfB1wFBFsTQ+nWQ7wuCkbAa2fxERoMw75VoprYugmhbtO a6xCfg/tMyhXYWxVwsb3rDyJto2BU0U1eILan7jG2aYXITUYPOyUoQjgXh1mxzyR xzJThJtx54W9bsnojbQRyHwu+1r2LRaS1x+UuPrYDVfTrIvlkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElrApHK6xG9mnruBEC9Ebeh/a9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlj MGZlNS04YWM2LTQyYTItOWMwYS01MDUzNGFhYTAxYzUvNGQ0NTdjODUtMTlhZC0z NGJiLTllOTItNjAwZjdmMGQzNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5YzBmZTUtOGFjNi00MmEyLTlj MGEtNTA1MzRhYWEwMWM1L2JhOWMwZmU1LThhYzYtNDJhMi05YzBhLTUwNTM0YWFh MDFjNS5jcmwwHwYDVR0jBBgwFoAU+h7Anv0VMfFaXkG2fQcGq3byLAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYTljMGZlNS04YWM2LTQyYTItOWMwYS01MDUz NGFhYTAxYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3v1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTJt7xjR1AHQYN6JBs4YOLSJNED2H5moqNWksMSJ9uoOXVIBWl6VAiQ f+8ubSxiWuobyCvcC5uobxy4zn7fLRJjT3DKxOXOg4qqJ6aw5IvU880ouMyBEQIf zua+QQDjZD41cGDzx24Gt6mZ/Jm6WfFUiaUww0Xv9C4FXNJ8AM4Inv1iOxkc1TI1 fhYEIajHFD0qxON6s32niOkN06uBotO5uCg4bv6LJ5/ykcVx6CMHLw003j0FZmB7 J8DTdUCLv1kDroI2sG5oHY+JTpy6cTwaxEPsrcy2qFjOVakJC+GqSRmPZgjbS4uL GLxWHi00DfvwWofVAdeeFazN33bwV1s= -----END CERTIFICATE-----Generated at Mon Jun 16 14:51:06 2025 by rpki-client