$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/3da03965-f67d-3f9e-ba07-b78793310588.roa File: 3da03965-f67d-3f9e-ba07-b78793310588.roa (raw, json) Hash identifier: 9kNwlIRPTx3iaXnJwPKlCcH6jBBd27i8o53b8SQY/WQ= Subject key identifier: BF:2A:84:F9:1B:B4:76:65:0F:AB:36:E0:A8:0D:DC:FF:AC:80:91:40 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F432858499F24917E4A4F5DDFBF10A440 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/3da03965-f67d-3f9e-ba07-b78793310588.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 63072 IP address blocks: 162.253.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:91:7e:4a:4f:5d:df:bf:10:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=fb32265d-e3ae-402f-9ff9-5a279c93e3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:b6:bc:1b:54:1a:e5:9e:8d:02:a5:09:0e: 8d:95:ad:ed:0a:a1:20:27:54:22:2e:16:18:7a:f6: e2:da:60:80:c5:e7:12:7e:ff:f4:ff:b9:7f:6b:3f: 4a:f1:61:82:91:ff:c5:bd:08:b0:ae:35:71:1a:9b: 40:51:47:ca:39:a7:4b:1e:a3:f7:69:b8:31:80:fa: 03:82:47:e3:4e:1b:57:99:9b:af:3f:d0:2a:51:e9: e9:5f:33:6b:78:a9:d7:b0:2a:00:63:c7:98:35:84: 58:cd:0e:6b:64:a7:95:22:88:4a:59:17:b8:77:08: a8:49:36:37:64:29:58:78:b0:bd:fb:de:0b:ef:47: d7:99:aa:35:57:b1:1c:46:4c:a0:2b:50:2e:8e:61: 17:41:0e:f1:3a:98:cc:3e:4d:ce:d9:28:d3:c6:49: 08:be:bf:eb:2c:18:20:8f:17:e7:10:d9:4d:36:cf: 8b:f5:e0:4f:2e:b6:ac:84:42:d0:d3:75:19:df:63: 7b:06:99:f2:23:2a:4f:27:87:02:d9:fb:2a:46:7e: 82:fd:2d:a3:bb:ee:55:ef:55:3a:88:41:fb:ee:41: 62:9f:61:11:8b:60:17:b8:f4:fb:7f:5a:37:94:69: ad:46:c3:c1:4e:d4:54:86:dd:3e:1b:65:de:23:92: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2A:84:F9:1B:B4:76:65:0F:AB:36:E0:A8:0D:DC:FF:AC:80:91:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/3da03965-f67d-3f9e-ba07-b78793310588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 162.253.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:93:69:15:45:15:50:ed:4d:b7:4c:1e:12:ae:62:7d:6d:cf: 33:19:7a:30:d5:7b:3c:92:bb:b8:b4:66:fd:02:f0:25:0a:b9: 1b:89:d3:8e:37:51:d0:20:30:bb:67:52:f6:ba:ca:f9:ad:ff: d4:57:9f:c0:22:6c:e2:35:24:ce:fc:c0:57:04:15:a3:58:ff: 9c:27:22:fe:24:24:1a:49:3a:75:8d:e6:28:41:98:d7:53:f9: f4:f9:6b:f2:bc:52:1c:ea:71:48:7c:a4:d6:90:44:2a:f7:dc: 0a:87:cd:87:3e:b8:1b:b8:63:73:3f:be:8e:a0:5b:68:12:a1: dd:9f:d5:c6:ae:f3:a8:55:e1:e4:24:9d:7d:f6:fc:f3:d4:81: 28:f5:8a:f8:7d:3a:ee:b9:c4:b8:17:79:b3:75:17:3d:f2:c8: f8:6c:96:d9:ac:03:67:16:02:fb:aa:68:d8:95:df:f6:06:3e: 90:98:b1:a3:22:7a:3a:c4:6a:87:db:d7:14:6e:e1:3c:1a:68: 87:79:3e:2b:0d:c3:b6:96:b1:a1:3d:9f:3b:b8:3c:39:59:c0: f5:75:85:1d:d2:f2:b0:fb:28:76:9e:2c:b4:ac:a0:7e:0b:33: 85:cd:4c:ea:c7:29:8c:82:b7:94:6a:7a:55:48:3d:b8:fc:8e: ad:6c:18:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJF+Sk9d378QpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmIzMjI2NWQtZTNhZS00MDJmLTlmZjktNWEyNzljOTNlM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBa2vBtUGuWejQKlCQ6Nla3tCqEgJ1QiLhYY evbi2mCAxecSfv/0/7l/az9K8WGCkf/FvQiwrjVxGptAUUfKOadLHqP3abgxgPoD gkfjThtXmZuvP9AqUenpXzNreKnXsCoAY8eYNYRYzQ5rZKeVIohKWRe4dwioSTY3 ZClYeLC9+94L70fXmao1V7EcRkygK1AujmEXQQ7xOpjMPk3O2SjTxkkIvr/rLBgg jxfnENlNNs+L9eBPLrashELQ03UZ32N7BpnyIypPJ4cC2fsqRn6C/S2ju+5V71U6 iEH77kFin2ERi2AXuPT7f1o3lGmtRsPBTtRUht0+G2XeI5JlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8qhPkbtHZlD6s24KgN3P+sgJFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvM2RhMDM5NjUtZjY3ZC0z ZjllLWJhMDctYjc4NzkzMzEwNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuTaRVFFVDtTbdMHhKuYn1tzzMZejDVezySu7i0Zv0C8CUKuRuJ0443 UdAgMLtnUva6yvmt/9RXn8AibOI1JM78wFcEFaNY/5wnIv4kJBpJOnWN5ihBmNdT +fT5a/K8UhzqcUh8pNaQRCr33AqHzYc+uBu4Y3M/vo6gW2gSod2f1cau86hV4eQk nX32/PPUgSj1ivh9Ou65xLgXebN1Fz3yyPhsltmsA2cWAvuqaNiV3/YGPpCYsaMi ejrEaofb1xRu4TwaaId5PisNw7aWsaE9nzu4PDlZwPV1hR3S8rD7KHaeLLSsoH4L M4XNTOrHKYyCt5RqelVIPbj8jq1sGPA= -----END CERTIFICATE-----Generated at Sun Jun 15 23:00:27 2025 by rpki-client