$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa File: 5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa (raw, json) Hash identifier: t5/j12vqradldMA1mhS0sdl63Vz68ldGIcMroDqYV0E= Subject key identifier: 13:37:01:A3:BB:13:7D:9E:D3:94:87:5A:6E:81:9C:AC:CE:FB:D7:71 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849AA4F67A81970AB0F0DB55F00 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16433 IP address blocks: 162.251.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:67:a8:19:70:ab:0f:0d:b5:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=acd1f81f-aac1-4e94-a31b-0fbec2f99c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d6:cd:fd:4e:e8:93:2b:fa:82:57:c9:d8:b8: 48:56:5e:9e:2f:5e:a1:4c:05:51:37:94:c4:85:61: 89:2b:18:88:7b:40:62:1d:74:8e:2e:80:05:83:6e: 76:bc:42:56:c4:54:f5:d5:db:7e:1b:55:34:f4:58: 3a:5d:7f:f1:eb:92:64:b2:aa:b7:2d:a3:df:88:f1: 03:1c:85:56:ac:41:09:62:db:83:b5:8f:f4:1e:b4: 22:4b:b2:65:0c:ea:9d:e7:86:09:bd:73:9c:ea:05: 9a:f9:10:47:c1:40:c9:e2:0c:d9:d4:8a:27:48:6a: 57:95:50:4b:c0:df:a9:a5:4f:5a:53:c8:64:b2:b5: c2:01:0d:10:81:6f:a1:26:96:ca:c2:1e:78:f6:3d: f1:70:1f:c9:db:84:f3:c6:b4:8a:7f:09:eb:53:41: 61:d6:f6:cd:74:99:6a:43:9b:69:ed:ea:aa:ae:84: df:d9:5d:50:03:16:61:0b:58:dc:9a:29:cb:67:3a: a7:50:05:ff:ab:64:06:f5:8c:a6:66:1c:bb:c8:a2: 4b:63:69:66:16:5a:a1:97:31:79:21:fd:0c:5f:0c: 87:f0:65:59:7b:91:7a:62:0a:28:60:ae:67:d5:03: df:3a:e5:91:7b:b9:86:cd:a3:d2:c1:5c:e1:1a:c0: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:37:01:A3:BB:13:7D:9E:D3:94:87:5A:6E:81:9C:AC:CE:FB:D7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.251.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a4:c6:f6:4e:f8:e0:5d:91:f3:fe:35:98:18:af:bf:bc:44: 59:97:c5:c5:62:b7:a5:97:f3:d6:37:0a:5a:06:b6:d8:c5:6f: 15:e2:b7:1e:d5:54:fd:26:c1:c8:c7:ce:b9:a9:92:a2:a4:70: 34:b8:ef:fc:1f:ce:df:04:dc:ef:2d:61:fb:b6:a1:aa:db:49: 8b:2e:c7:27:30:68:82:ed:f5:14:32:36:95:fb:c3:0c:5f:66: cb:33:a9:97:93:d1:55:7d:d8:09:f5:93:a2:77:b4:9b:48:2c: 16:74:2f:0d:fd:cc:4e:37:17:5f:f5:30:e5:95:27:1f:80:d4: b7:dc:b1:6e:f5:43:77:bf:b4:d4:1f:6e:41:b0:4a:97:04:9e: 1c:67:db:93:d1:50:0f:36:e0:5b:f5:c7:bd:3e:8d:48:3a:13: 53:72:fc:6f:f3:90:4d:97:e7:8a:2a:04:57:86:15:b3:79:50: cb:ca:13:e1:c2:88:e9:9b:66:8e:2c:a8:48:ce:e1:8b:93:8f: cd:38:ca:0b:4a:5f:0e:ae:92:76:68:82:9b:14:58:b9:19:59: ad:bd:ab:9b:7f:d8:64:d2:66:8b:dc:b0:83:a8:09:d2:8d:71: f5:b3:e7:3c:18:61:9c:71:23:f6:7f:f2:6e:4b:cf:5f:99:93: 2e:a4:80:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2eoGXCrDw21XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YWNkMWY4MWYtYWFjMS00ZTk0LWEzMWItMGZiZWMyZjk5YzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49bN/U7okyv6glfJ2LhIVl6eL16hTAVRN5TE hWGJKxiIe0BiHXSOLoAFg252vEJWxFT11dt+G1U09Fg6XX/x65Jksqq3LaPfiPED HIVWrEEJYtuDtY/0HrQiS7JlDOqd54YJvXOc6gWa+RBHwUDJ4gzZ1IonSGpXlVBL wN+ppU9aU8hksrXCAQ0QgW+hJpbKwh549j3xcB/J24TzxrSKfwnrU0Fh1vbNdJlq Q5tp7eqqroTf2V1QAxZhC1jcminLZzqnUAX/q2QG9YymZhy7yKJLY2lmFlqhlzF5 If0MXwyH8GVZe5F6YgooYK5n1QPfOuWRe7mGzaPSwVzhGsAOCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM3AaO7E32e05SHWm6BnKzO+9dxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNTUwNWFjZDMtZmUwNy0z NGNlLWJjMmYtNmFjM2M2MGU5YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGkxvZO+OBdkfP+NZgYr7+8RFmXxcVit6WX89Y3CloGttjFbxXitx7V VP0mwcjHzrmpkqKkcDS47/wfzt8E3O8tYfu2oarbSYsuxycwaILt9RQyNpX7wwxf ZsszqZeT0VV92An1k6J3tJtILBZ0Lw39zE43F1/1MOWVJx+A1LfcsW71Q3e/tNQf bkGwSpcEnhxn25PRUA824Fv1x70+jUg6E1Ny/G/zkE2X54oqBFeGFbN5UMvKE+HC iOmbZo4sqEjO4YuTj804ygtKXw6uknZogpsUWLkZWa29q5t/2GTSZovcsIOoCdKN cfWz5zwYYZxxI/Z/8m5Lz1+Zky6kgJA= -----END CERTIFICATE-----Generated at Mon Apr 28 23:30:05 2025 by rpki-client