$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa File: 845c934e-982e-391f-9cb4-1e7d4935e5ac.roa (raw, json) Hash identifier: f9LHT2ju/tD/ktwbrLgQBeopsHnsj3Bvrs8RFsgA2fk= Subject key identifier: 60:C1:21:6C:98:69:C8:82:17:9C:25:EB:B0:8B:65:2B:22:92:C7:A2 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64224BA09BA4E866521F00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 162.208.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:4b:a0:9b:a4:e8:66:52:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=0af5d1b5-0627-4b53-b602-4f4fef2bf5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:6b:01:f1:e7:34:8c:f0:e9:7a:cf:bc:f6: 3c:56:0b:34:f9:9b:c6:7b:0d:28:cd:d1:cf:6c:92: 52:6d:1d:05:56:63:43:aa:0f:78:0b:2c:ba:8f:04: 97:31:37:ff:ae:9f:1e:0a:df:e7:f9:c5:f4:1e:0e: b4:f0:b1:70:f5:ee:7a:d1:7d:d6:5c:88:cd:92:fd: f2:1b:8d:98:ef:df:9d:72:a3:23:21:18:b1:dc:17: f5:db:70:4f:db:5f:bd:21:4c:59:26:46:44:75:bf: 8a:66:ac:87:bc:11:07:b4:d1:96:f4:ae:5c:f2:38: 25:81:e6:4e:98:bd:11:9f:2e:c6:0f:e5:bf:f0:f0: 1c:99:0f:55:69:68:b8:7b:c0:4e:66:27:8e:16:5a: 5d:ce:ce:a7:01:37:27:56:fc:b8:59:3c:a7:aa:4d: d2:8c:53:aa:0f:fc:f9:0a:27:34:53:f3:34:8a:c9: cf:75:a1:dd:4c:25:85:47:38:4e:8c:10:34:d4:90: 54:ac:3c:ef:2d:1c:08:96:79:86:74:25:65:e6:bf: 28:b9:fc:25:cc:45:82:a4:0c:ab:01:26:5b:ca:3f: 93:39:6d:bf:5b:35:70:68:b9:8d:4b:dc:ec:c6:e9: e5:0a:3e:e3:d8:a4:01:0b:09:0a:81:8c:aa:71:2a: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C1:21:6C:98:69:C8:82:17:9C:25:EB:B0:8B:65:2B:22:92:C7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/845c934e-982e-391f-9cb4-1e7d4935e5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.208.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:97:6c:6e:25:0e:c7:9a:ae:9f:46:5f:2d:db:ab:66:33:91: 38:fe:c9:a3:e4:2b:e0:ed:c1:f9:31:da:4c:df:51:f2:e6:19: 07:c5:86:9a:52:c7:e9:ed:48:e4:e4:57:0e:48:82:4d:14:4e: ff:97:ad:03:c1:5b:e3:66:b0:90:f3:0a:c6:1a:68:9d:9a:6e: fc:59:34:19:a2:38:67:14:af:d8:cb:92:c0:f6:70:a6:17:73: 84:2c:7e:3b:af:0f:81:11:f4:f9:db:ca:b3:c0:5c:69:36:82: 72:d7:ef:25:c2:df:21:8c:63:43:b3:af:ad:21:a5:80:c9:fc: 76:30:97:dd:d9:7e:d1:35:aa:2c:da:97:51:7e:3a:7f:cc:4e: 6d:57:36:26:7b:9a:4e:1c:1f:28:2a:bc:41:20:bb:22:e2:5c: fc:00:b8:d7:54:ba:5c:2b:db:4e:48:f1:91:5b:9a:18:6e:de: ef:b8:ae:d1:2a:e0:1e:70:46:6e:aa:8e:00:89:c3:64:eb:55: 63:03:ff:a0:ef:08:fc:84:76:0b:6f:ae:0f:cb:07:e1:ae:3a: 24:21:b5:7b:a4:31:0a:90:41:96:1b:76:c2:3e:2c:66:57:f7: c3:ba:12:16:6d:bb:98:4b:bb:8d:45:ad:6f:a2:0c:70:03:c7: 7f:7e:6c:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCJLoJuk6GZSHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MGFmNWQxYjUtMDYyNy00YjUzLWI2MDItNGY0ZmVmMmJmNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO5rAfHnNIzw6XrPvPY8Vgs0+ZvGew0ozdHP bJJSbR0FVmNDqg94Cyy6jwSXMTf/rp8eCt/n+cX0Hg608LFw9e560X3WXIjNkv3y G42Y79+dcqMjIRix3Bf123BP21+9IUxZJkZEdb+KZqyHvBEHtNGW9K5c8jglgeZO mL0Rny7GD+W/8PAcmQ9VaWi4e8BOZieOFlpdzs6nATcnVvy4WTynqk3SjFOqD/z5 Cic0U/M0isnPdaHdTCWFRzhOjBA01JBUrDzvLRwIlnmGdCVl5r8oufwlzEWCpAyr ASZbyj+TOW2/WzVwaLmNS9zsxunlCj7j2KQBCwkKgYyqcSrCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDBIWyYaciCF5wl67CLZSsikseiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODQ1YzkzNGUtOTgyZS0z OTFmLTljYjQtMWU3ZDQ5MzVlNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKXbG4lDsearp9GXy3bq2YzkTj+yaPkK+Dtwfkx2kzfUfLmGQfFhppS x+ntSOTkVw5Igk0UTv+XrQPBW+NmsJDzCsYaaJ2abvxZNBmiOGcUr9jLksD2cKYX c4QsfjuvD4ER9PnbyrPAXGk2gnLX7yXC3yGMY0Ozr60hpYDJ/HYwl93ZftE1qiza l1F+On/MTm1XNiZ7mk4cHygqvEEguyLiXPwAuNdUulwr205I8ZFbmhhu3u+4rtEq 4B5wRm6qjgCJw2TrVWMD/6DvCPyEdgtvrg/LB+GuOiQhtXukMQqQQZYbdsI+LGZX 98O6EhZtu5hLu41FrW+iDHADx39+bB8= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:03 2025 by rpki-client