$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa File: 55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa (raw, json) Hash identifier: wmrAVPFWzN/10T3E7Uy9ruJug94zb9xT+Nz6x85YES4= Subject key identifier: E5:FE:AF:4F:4A:0A:7E:8F:37:62:BF:A8:00:01:2A:3D:0A:CE:F3:62 Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Certificate serial: 010D0C9F43285848F22C6316D4DE042EF1252780 Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 62537 IP address blocks: 162.222.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:63:16:d4:de:04:2e:f1:25:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=c5dcafdc-d79e-4947-942a-6f627b384244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:89:bf:14:68:3f:80:8e:7e:1c:91:00:9a: cd:52:48:e3:08:59:78:93:0a:92:64:c4:f9:0c:15: dc:e6:01:26:50:c2:b9:17:da:37:cd:2c:19:eb:e3: 75:71:bf:96:20:77:06:2f:4e:65:dd:31:74:89:2a: 00:c1:55:7b:c0:9c:f5:1b:11:74:d8:c0:f1:ef:18: b0:cf:be:5b:d7:09:cc:f9:3e:ea:6d:b4:36:1f:78: 11:7a:69:64:87:d8:1e:82:02:c6:09:60:87:43:10: a5:a2:78:d0:98:34:92:44:3b:70:52:b1:43:71:c5: c2:37:de:08:10:d7:13:5f:18:26:00:07:f5:3e:d1: cc:05:67:65:e4:07:18:56:b5:bd:a2:45:a9:89:0d: 64:b9:5a:94:62:58:21:a3:5a:88:c7:77:40:71:f5: 61:a0:41:b8:09:89:93:97:00:c3:4d:13:c3:90:18: b5:d5:49:17:1e:c9:2f:e8:e7:fe:9a:dd:3a:7c:0c: 52:a9:b9:cd:05:15:da:13:5b:45:cd:9c:52:c0:50: 85:d7:90:7e:ec:0a:98:a9:44:4d:ce:9a:e9:7b:a7: de:9c:48:fc:8a:42:be:ad:56:11:6e:d4:96:ee:11: cf:88:87:30:0a:02:cc:e4:0e:77:99:67:34:27:75: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FE:AF:4F:4A:0A:7E:8F:37:62:BF:A8:00:01:2A:3D:0A:CE:F3:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl X509v3 Authority Key Identifier: keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer sbgp-ipAddrBlock: critical IPv4: 162.222.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:30:2b:c7:27:0e:04:da:4c:7f:36:c3:1b:49:1b:d7:fc:97: 83:0e:0d:16:71:b6:62:af:d5:a0:6c:32:3e:b2:79:b3:fd:0d: 94:4b:b1:ca:89:16:5f:34:dc:5e:f7:f4:92:20:a7:8b:fc:44: 94:95:33:62:83:f9:ff:01:5b:58:bb:fb:86:22:1a:a8:a0:3b: 03:0d:ae:af:3e:a8:bc:2c:00:04:dd:7e:6b:af:77:1d:e7:1d: 75:61:46:cf:6b:7c:bf:eb:8a:21:a6:0a:7d:d4:1c:62:ff:85: 21:98:8a:b5:c3:ef:82:ec:b1:0e:fa:0b:54:cf:2f:c8:d8:39: 74:74:6a:9b:9b:72:fc:b8:84:0f:10:e3:0a:eb:2e:a3:33:4e: 36:de:f5:6b:8d:4d:57:4d:d1:6e:88:25:eb:ec:02:41:4f:61: 5b:9a:d5:68:70:98:f1:3f:78:9e:e4:18:fa:e3:4f:3f:12:bb: d5:72:c9:08:47:44:a9:95:6a:d8:cc:4a:8d:2e:84:f3:e5:57: c2:7d:a0:96:db:3d:e9:b5:18:73:c3:2e:11:24:fd:7c:c9:93: 04:db:cd:f1:92:56:08:ad:3d:07:57:04:2c:c3:90:b9:d8:ec: 45:28:84:07:ba:36:cc:bf:89:dc:cf:5c:18:65:c2:ca:16:c1: 99:71:4d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGMW1N4ELvElJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx NTZmMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YzVkY2FmZGMtZDc5ZS00OTQ3LTk0MmEtNmY2MjdiMzg0MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh2JvxRoP4COfhyRAJrNUkjjCFl4kwqSZMT5 DBXc5gEmUMK5F9o3zSwZ6+N1cb+WIHcGL05l3TF0iSoAwVV7wJz1GxF02MDx7xiw z75b1wnM+T7qbbQ2H3gRemlkh9geggLGCWCHQxClonjQmDSSRDtwUrFDccXCN94I ENcTXxgmAAf1PtHMBWdl5AcYVrW9okWpiQ1kuVqUYlgho1qIx3dAcfVhoEG4CYmT lwDDTRPDkBi11UkXHskv6Of+mt06fAxSqbnNBRXaE1tFzZxSwFCF15B+7AqYqURN zprpe6fenEj8ikK+rVYRbtSW7hHPiIcwCgLM5A53mWc0J3W8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX+r09KCn6PN2K/qAABKj0KzvNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvNTVmNmQ4YTMtMWQ0Zi0z OGExLTkyMDQtNTYwODM5NTFhYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2 ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUwK8cnDgTaTH82wxtJG9f8l4MODRZxtmKv1aBsMj6yebP9DZRLscqJ Fl803F739JIgp4v8RJSVM2KD+f8BW1i7+4YiGqigOwMNrq8+qLwsAATdfmuvdx3n HXVhRs9rfL/riiGmCn3UHGL/hSGYirXD74LssQ76C1TPL8jYOXR0apubcvy4hA8Q 4wrrLqMzTjbe9WuNTVdN0W6IJevsAkFPYVua1WhwmPE/eJ7kGPrjTz8Su9VyyQhH RKmVatjMSo0uhPPlV8J9oJbbPem1GHPDLhEk/XzJkwTbzfGSVgitPQdXBCzDkLnY 7EUohAe6Nsy/idzPXBhlwsoWwZlxTfg= -----END CERTIFICATE-----Generated at Sun Apr 27 09:20:03 2025 by rpki-client