$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa File: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (raw, json) Hash identifier: yWYxN8hf46o6HF2/mI0JzHT3somRDSVQiU3Gk9AZ2bo= Subject key identifier: 14:46:58:92:B3:8A:13:56:02:5B:69:8D:EF:F4:10:C5:62:4D:4F:19 Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F43285849955F1AC5AD3169B312BCFA80 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 162.216.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1a:c5:ad:31:69:b3:12:bc:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=cb14ac31-f4e1-4bc0-bd67-8c9c1ce23986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2d:30:4d:50:46:75:fd:18:cc:1f:53:9d:57: d2:d0:9c:6c:34:d1:aa:91:14:52:a7:f5:80:0e:4e: c7:51:ba:64:78:7e:20:7c:1d:cb:18:ee:6d:77:f8: c1:9b:b7:76:54:fd:ff:32:c8:11:02:2a:a3:b3:01: 76:ee:a5:89:39:57:d1:05:58:af:7c:2f:ea:b0:14: 05:84:de:61:42:48:fe:1d:78:ff:2a:f7:d5:dd:14: d7:fd:fb:70:09:70:a2:2a:36:75:75:ca:26:5b:79: 5f:a9:1f:8c:16:11:7e:5a:66:f8:12:8b:8c:f2:86: 8d:d1:ed:d5:53:37:8b:4c:4d:5b:fb:00:36:c5:83: d7:90:d6:69:6b:cd:10:e4:7d:82:36:b1:e6:1c:1a: 06:df:56:f1:50:34:79:94:80:a9:dd:bd:2c:dc:0f: bf:7c:9c:8b:83:11:e8:34:f2:f6:36:ff:25:ff:b6: 6d:3b:72:14:57:92:ed:fe:cb:68:09:91:94:dd:d2: cc:62:06:ce:c8:68:a5:84:f3:e8:2c:63:c8:8b:10: fa:1f:28:81:9b:e1:02:71:fb:93:fa:87:e6:22:2d: f5:68:49:94:b0:cc:1b:6d:fe:8d:ec:3d:ee:41:a7: 79:c5:82:43:ce:f0:12:e1:44:b4:8f:5d:57:23:f6: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:46:58:92:B3:8A:13:56:02:5B:69:8D:EF:F4:10:C5:62:4D:4F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:98:06:72:dd:8d:91:3f:e7:c0:4e:1f:aa:9e:48:18:6a:65: b4:d6:d0:a9:00:cc:ab:ca:7f:dc:b3:8d:07:cf:92:f5:31:94: 8e:3d:22:88:a4:35:16:52:91:c9:85:76:aa:be:e6:98:af:7e: 2d:3e:35:ec:cf:76:ab:d6:88:23:ee:af:1f:3a:6b:d9:11:1a: 49:9f:26:27:a8:24:e8:7e:6e:77:82:bd:24:74:05:84:ac:2c: 24:f1:4f:cc:67:c6:dd:60:4f:ad:99:5d:b8:11:6c:df:0a:90: 9c:50:da:f8:f0:cc:05:83:24:ea:ee:06:cf:0d:a0:d2:b3:04: 25:bf:97:61:f9:08:72:23:d7:24:dc:f4:ab:21:ad:1a:46:7d: f4:39:21:9b:f1:12:39:f0:59:60:a4:53:56:bc:93:45:61:6a: a6:10:b0:79:42:89:6e:2e:34:ad:14:56:55:3d:10:ee:f6:65: dd:09:2e:05:3b:5f:f8:32:04:64:42:88:04:51:1c:5d:af:6c: cc:43:00:98:78:ae:57:1f:80:2c:16:cf:23:14:b9:1c:3a:3a: 3e:cc:9f:a8:29:c5:f9:a8:52:7b:4b:88:79:02:29:a1:43:43: ee:45:7f:17:e7:7e:6f:70:76:83:d8:6e:75:4c:91:54:53:77: e0:08:64:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxrFrTFpsxK8+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2IxNGFjMzEtZjRlMS00YmMwLWJkNjctOGM5YzFjZTIzOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS0wTVBGdf0YzB9TnVfS0JxsNNGqkRRSp/WA Dk7HUbpkeH4gfB3LGO5td/jBm7d2VP3/MsgRAiqjswF27qWJOVfRBVivfC/qsBQF hN5hQkj+HXj/KvfV3RTX/ftwCXCiKjZ1dcomW3lfqR+MFhF+Wmb4EouM8oaN0e3V UzeLTE1b+wA2xYPXkNZpa80Q5H2CNrHmHBoG31bxUDR5lICp3b0s3A+/fJyLgxHo NPL2Nv8l/7ZtO3IUV5Lt/stoCZGU3dLMYgbOyGilhPPoLGPIixD6HyiBm+ECcfuT +ofmIi31aEmUsMwbbf6N7D3uQad5xYJDzvAS4US0j11XI/Y2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRGWJKzihNWAltpje/0EMViTU8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvZmY4OWQ5YjQtZDNhOS0z ZTI5LTk1YTktMDkxNmFjNjZkNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaYBnLdjZE/58BOH6qeSBhqZbTW0KkAzKvKf9yzjQfPkvUxlI49Ioik NRZSkcmFdqq+5pivfi0+NezPdqvWiCPurx86a9kRGkmfJieoJOh+bneCvSR0BYSs LCTxT8xnxt1gT62ZXbgRbN8KkJxQ2vjwzAWDJOruBs8NoNKzBCW/l2H5CHIj1yTc 9KshrRpGffQ5IZvxEjnwWWCkU1a8k0VhaqYQsHlCiW4uNK0UVlU9EO72Zd0JLgU7 X/gyBGRCiARRHF2vbMxDAJh4rlcfgCwWzyMUuRw6Oj7Mn6gpxfmoUntLiHkCKaFD Q+5Ffxfnfm9wdoPYbnVMkVRTd+AIZCY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:26 2025 by rpki-client