$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa File: 5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa (raw, json) Hash identifier: hNGzP033BoLz2mVi1sYZLcyA0DyRAFvj9Ga1czTNWkk= Subject key identifier: E5:54:C3:ED:15:04:C2:8A:D2:16:9B:B3:C9:E4:79:7C:15:F8:5B:0C Certificate issuer: /CN=1908c59f-d1ec-4450-8633-d94e6b9f1648 Certificate serial: 010D0C9F43285849780F1126ED12FF3729DD0080 Authority key identifier: E6:DD:C4:CD:C3:06:89:3D:4D:5B:EF:6D:AB:21:AE:4C:59:2F:ED:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 13764 IP address blocks: 162.245.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:11:26:ed:12:ff:37:29:dd:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1908c59f-d1ec-4450-8633-d94e6b9f1648 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=349cf8a7-f4bf-4689-a20b-86d7bcd6928c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:de:1f:59:da:e8:b6:be:14:23:89:ea:20:46: d1:67:31:21:f3:24:d3:99:8f:49:fb:fa:3a:a4:c2: a3:00:f7:7f:b2:21:93:9f:fb:d6:27:60:df:c8:b7: 82:30:f4:d1:c8:dd:7a:82:a7:e0:c6:58:f4:cf:0b: b0:6a:e0:3c:f8:a2:3d:b9:53:85:01:99:f6:0b:d9: 18:28:8e:c3:88:0e:6d:db:72:71:d5:39:6b:ca:c2: 15:95:53:19:db:ee:15:f9:18:f0:b3:c2:a6:7b:2e: d3:c9:8f:e8:8b:a1:d3:c2:d2:4d:c1:f6:86:8e:63: 5d:7e:fe:1c:30:42:e8:5e:02:9f:de:ab:f4:50:6f: a0:72:bc:9f:ff:ee:8d:08:39:7d:05:5b:bc:10:d5: cb:92:e6:ae:5d:fe:84:b7:eb:51:68:c6:2d:d0:79: af:63:e0:5d:6c:d1:c5:3f:4f:47:ab:7f:db:e3:0c: 0a:de:7b:37:bb:55:42:65:ae:fb:15:35:25:21:08: c6:35:e7:e1:52:18:f4:d3:f0:32:b1:b3:8e:71:8c: ea:f9:0f:5a:ae:c5:98:6c:17:06:97:86:34:c9:e2: 07:7b:0c:ce:06:53:7c:bd:23:be:f9:f1:aa:a7:b5: 6f:c1:7c:17:39:63:a7:b9:42:69:6a:2c:cd:9a:cb: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:C3:ED:15:04:C2:8A:D2:16:9B:B3:C9:E4:79:7C:15:F8:5B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/5d01e5dc-9b1f-3e4d-8735-aa36b3b9e61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648/1908c59f-d1ec-4450-8633-d94e6b9f1648.crl X509v3 Authority Key Identifier: keyid:E6:DD:C4:CD:C3:06:89:3D:4D:5B:EF:6D:AB:21:AE:4C:59:2F:ED:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1908c59f-d1ec-4450-8633-d94e6b9f1648.cer sbgp-ipAddrBlock: critical IPv4: 162.245.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:06:81:60:bf:48:4c:44:e0:9b:d7:71:4d:45:00:43:b8:7d: 77:e7:94:bf:25:a6:0a:4f:cf:f2:d4:f1:76:d9:4e:f1:8f:3d: 1e:48:40:37:da:91:b0:f3:be:5f:00:08:3e:41:4c:c0:22:fe: 09:5e:cf:7c:52:ae:a0:c0:bd:ff:41:74:a9:33:a3:c7:6e:ba: a8:7b:c8:92:80:f4:f6:19:5e:de:1c:aa:a1:e6:57:e7:8f:6a: e7:b9:78:72:e0:73:d7:66:94:06:67:ac:72:c4:c1:d9:70:34: 06:92:14:36:c9:79:c1:f4:a9:47:9a:79:14:4f:d5:b1:a6:89: f9:eb:0f:f6:87:c0:81:c5:f5:e6:a6:c0:46:6a:fe:5d:a7:b7: c2:94:a5:73:62:bf:a9:e6:47:06:3e:35:0d:51:45:f0:c9:99: dc:d0:87:ec:f6:35:09:08:01:a7:d7:81:22:84:69:3f:2f:8d: 21:54:45:e2:cc:8e:19:6e:83:45:90:72:d1:18:e3:72:ad:8f: d8:29:ae:69:a7:5e:e5:c6:69:32:3e:8d:a4:63:53:d5:e4:d7: 95:63:0c:8d:2e:79:ae:b6:95:64:01:55:02:4d:ea:ef:9c:14: 72:11:79:99:f2:33:70:da:08:2a:15:ae:7e:eb:70:95:71:cb: 38:b7:bb:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DxEm7RL/NyndAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwOGM1OWYtZDFlYy00NDUwLTg2MzMtZDk0ZTZiOWYx NjQ4MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MzQ5Y2Y4YTctZjRiZi00Njg5LWEyMGItODZkN2JjZDY5MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N4fWdrotr4UI4nqIEbRZzEh8yTTmY9J+/o6 pMKjAPd/siGTn/vWJ2DfyLeCMPTRyN16gqfgxlj0zwuwauA8+KI9uVOFAZn2C9kY KI7DiA5t23Jx1TlrysIVlVMZ2+4V+Rjws8Kmey7TyY/oi6HTwtJNwfaGjmNdfv4c MELoXgKf3qv0UG+gcryf/+6NCDl9BVu8ENXLkuauXf6Et+tRaMYt0HmvY+BdbNHF P09Hq3/b4wwK3ns3u1VCZa77FTUlIQjGNefhUhj00/AysbOOcYzq+Q9arsWYbBcG l4Y0yeIHewzOBlN8vSO++fGqp7VvwXwXOWOnuUJpaizNmsukHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVUw+0VBMKK0habs8nkeXwV+FsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTA4 YzU5Zi1kMWVjLTQ0NTAtODYzMy1kOTRlNmI5ZjE2NDgvNWQwMWU1ZGMtOWIxZi0z ZTRkLTg3MzUtYWEzNmIzYjllNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTkwOGM1OWYtZDFlYy00NDUwLTg2 MzMtZDk0ZTZiOWYxNjQ4LzE5MDhjNTlmLWQxZWMtNDQ1MC04NjMzLWQ5NGU2Yjlm MTY0OC5jcmwwHwYDVR0jBBgwFoAU5t3EzcMGiT1NW+9tqyGuTFkv7dswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTA4YzU5Zi1kMWVjLTQ0NTAtODYzMy1kOTRl NmI5ZjE2NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwGgWC/SExE4JvXcU1FAEO4fXfnlL8lpgpPz/LU8XbZTvGPPR5IQDfa kbDzvl8ACD5BTMAi/glez3xSrqDAvf9BdKkzo8duuqh7yJKA9PYZXt4cqqHmV+eP aue5eHLgc9dmlAZnrHLEwdlwNAaSFDbJecH0qUeaeRRP1bGmifnrD/aHwIHF9eam wEZq/l2nt8KUpXNiv6nmRwY+NQ1RRfDJmdzQh+z2NQkIAafXgSKEaT8vjSFUReLM jhlug0WQctEY43Ktj9gprmmnXuXGaTI+jaRjU9Xk15VjDI0uea62lWQBVQJN6u+c FHIReZnyM3DaCCoVrn7rcJVxyzi3u4Q= -----END CERTIFICATE-----Generated at Mon Apr 28 15:10:20 2025 by rpki-client