$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa File: 0ccd293b-4237-33a7-aafe-24d59d62dd47.roa (raw, json) Hash identifier: yQYisSQHaG+DxE5aKdUh6etIfP3fbf+ZO6Kqka6z9i8= Subject key identifier: 67:FC:47:07:4A:5A:73:A2:99:80:F0:27:F8:43:3D:CB:B1:BA:85:C1 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584986046C0E92FC7626E2EB4980 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 162.138.64.0/24 maxlen: 24 162.138.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:6c:0e:92:fc:76:26:e2:eb:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=d8827f32-ca1f-4732-97aa-8a6d40e81aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:a5:6b:1f:81:d3:28:a7:94:87:87:93:25: e6:5d:cd:fe:e7:3b:93:3a:8f:58:72:43:72:95:d2: 0e:a2:56:67:b1:ee:5b:de:0a:bf:93:cc:9a:fa:21: ae:51:07:8b:7b:79:3e:45:99:db:db:57:83:79:6c: 1a:b0:c9:7a:e2:52:2a:37:88:c0:92:81:ee:b7:e5: 34:81:4d:d7:d5:be:89:ad:a6:2e:88:26:a7:68:fd: a1:80:f2:28:5f:20:3f:1c:94:23:b6:a4:1b:64:3f: 14:9c:fe:8f:47:11:01:d4:0d:1f:ed:cf:99:b5:ec: 85:a4:19:54:05:22:26:b6:f1:d1:a7:b1:0f:71:39: 70:55:a9:87:2e:e9:94:88:91:3e:6c:69:29:0e:99: 8b:ea:03:fd:c1:cc:28:2f:b8:8d:b4:2b:b7:7c:0f: a4:a6:35:de:81:de:64:4b:46:c1:a9:91:5a:8b:66: 99:65:46:a2:9d:2f:2a:68:db:49:18:31:7e:63:f6: 70:6b:2b:cc:40:8b:8d:58:80:fa:7f:71:91:8f:ce: 40:15:ba:e4:24:17:72:28:f2:50:55:da:56:e6:10: e8:95:c1:2b:bd:6c:38:a9:3e:56:7c:e8:8d:04:19: 87:25:79:f2:fc:82:5d:0e:9b:8c:a6:f1:9a:31:e9: 1e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:47:07:4A:5A:73:A2:99:80:F0:27:F8:43:3D:CB:B1:BA:85:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.64.0/24 162.138.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:50:2d:d7:a6:8f:d5:35:7a:d0:5a:35:a4:07:a5:25:c3:91: 25:48:89:38:8f:ec:9c:f9:cb:ef:b7:d2:7a:0b:06:fe:fe:32: a0:a1:e6:ea:63:b5:28:f7:21:95:89:4a:b0:20:86:75:79:a3: 57:5a:64:cb:28:70:86:79:98:13:16:2a:71:4a:1b:98:08:cd: 53:83:4c:11:02:a6:10:b2:f6:6a:fa:54:00:41:c9:0e:5a:e2: cd:13:22:b6:de:1f:2c:d3:24:2c:8b:50:35:12:d0:a0:37:fb: 12:13:7d:33:1c:a1:ca:67:5b:8d:3c:6b:17:9c:14:45:5e:86: fe:5f:1e:0f:db:52:f4:31:16:52:7d:cb:c1:79:77:4f:f2:d5: e0:c8:a2:17:3b:ed:44:b9:55:87:a3:44:d0:a8:e9:83:22:72: d2:21:f0:46:55:2f:45:f8:03:e8:93:56:da:e6:29:5c:4c:f0: f9:25:fb:6a:78:1f:46:40:12:dd:4c:1a:58:f6:12:98:eb:92: cb:30:11:8a:f7:b1:b4:e3:a3:a5:15:c2:d3:39:74:5c:43:63: 6a:e7:65:5b:42:14:f4:7f:e7:ae:84:04:4c:55:94:25:55:13: 90:d0:49:c0:51:36:64:fd:16:f7:28:01:f0:9c:64:8f:e9:db: 19:c8:ba:38 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmGBGwOkvx2JuLrSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk ZDg4MjdmMzItY2ExZi00NzMyLTk3YWEtOGE2ZDQwZTgxYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIWlax+B0yinlIeHkyXmXc3+5zuTOo9YckNy ldIOolZnse5b3gq/k8ya+iGuUQeLe3k+RZnb21eDeWwasMl64lIqN4jAkoHut+U0 gU3X1b6JraYuiCanaP2hgPIoXyA/HJQjtqQbZD8UnP6PRxEB1A0f7c+ZteyFpBlU BSImtvHRp7EPcTlwVamHLumUiJE+bGkpDpmL6gP9wcwoL7iNtCu3fA+kpjXegd5k S0bBqZFai2aZZUainS8qaNtJGDF+Y/ZwayvMQIuNWID6f3GRj85AFbrkJBdyKPJQ VdpW5hDolcErvWw4qT5WfOiNBBmHJXny/IJdDpuMpvGaMekeIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGf8RwdKWnOimYDwJ/hDPcuxuoXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvMGNjZDI5M2ItNDIzNy0z M2E3LWFhZmUtMjRkNTlkNjJkZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoopAAwQA oopEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC9QLdemj9U1etBaNaQHpSXDkSVIiTiP7Jz5y++30noLBv7+ MqCh5upjtSj3IZWJSrAghnV5o1daZMsocIZ5mBMWKnFKG5gIzVODTBECphCy9mr6 VABByQ5a4s0TIrbeHyzTJCyLUDUS0KA3+xITfTMcocpnW408axecFEVehv5fHg/b UvQxFlJ9y8F5d0/y1eDIohc77US5VYejRNCo6YMictIh8EZVL0X4A+iTVtrmKVxM 8Pkl+2p4H0ZAEt1MGlj2EpjrksswEYr3sbTjo6UVwtM5dFxDY2rnZVtCFPR/566E BExVlCVVE5DQScBRNmT9FvcoAfCcZI/p2xnIujg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:17 2025 by rpki-client