$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa File: 0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa (raw, json) Hash identifier: cDJUeunQOhden6r6tycY97EX/TXVcb/H7PVfFjDMh5k= Subject key identifier: 4A:4A:26:DD:9D:D5:A0:E2:28:65:FF:30:46:86:AC:4C:80:C3:A6:48 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F432858495D896515EADAC2324384FB80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 26548 IP address blocks: 162.249.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:65:15:ea:da:c2:32:43:84:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=7552d3f3-522c-4fc4-a40c-a68790296151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:a2:17:e1:2c:e5:ab:29:ca:81:f5:e2:c1: 61:63:16:94:15:8e:66:a1:a4:56:b7:23:99:41:98: 04:8f:8f:81:c7:e5:e8:b4:07:4b:ca:2a:ab:26:a1: fe:8d:d5:df:57:16:37:1a:df:d3:f8:bd:dc:18:3f: eb:be:a3:74:78:c9:65:ef:ef:61:b1:a3:5e:6a:d7: 7d:8c:a8:55:5b:bf:17:85:de:b8:ae:6b:51:2a:04: b5:86:91:6e:cf:3d:cd:25:df:d3:da:fb:43:9d:ea: 69:90:f4:33:5e:dd:01:49:99:f5:5a:3a:27:3a:4c: ed:15:37:c9:fa:d6:51:ac:3b:47:66:56:21:55:04: 23:c9:18:38:c5:b3:8f:64:a3:d6:8e:b4:37:42:7f: f4:a3:ab:7f:cd:c4:bf:8f:c0:5f:4a:09:71:35:45: d7:af:93:19:50:de:ed:8d:ba:63:ae:c4:8f:96:ac: dc:ae:ab:15:e6:9d:48:c2:ed:83:65:0a:c7:5c:ad: 10:5c:7e:e4:bd:a5:d9:53:f8:f8:ea:cc:2f:11:51: 42:0b:fa:0a:89:af:93:97:78:01:f7:23:02:15:41: 1b:0c:a5:89:ab:d1:86:e0:31:6c:88:d3:50:2b:1d: 02:bd:d3:5c:07:1b:27:17:9e:ee:f7:39:2c:f0:07: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4A:26:DD:9D:D5:A0:E2:28:65:FF:30:46:86:AC:4C:80:C3:A6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 162.249.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2d:0d:df:60:bf:1a:02:6b:8f:f2:f3:b0:e1:68:54:0a:80: 77:12:ac:38:80:a0:1a:37:96:1c:64:df:eb:fa:c4:a5:f4:ff: cf:f4:7c:8b:b7:75:1c:c5:73:c7:67:b1:04:0d:2c:37:99:3a: 26:03:3a:c3:75:0b:ff:e5:36:89:c6:a4:22:bc:ed:cf:2d:8c: 6c:27:7e:48:a5:f7:fc:0d:b2:81:61:ef:71:28:d4:87:b1:5b: d3:9f:2f:57:ad:8b:55:77:64:e7:a0:cd:eb:98:ad:75:ac:3a: ff:d6:3e:63:c4:cf:54:f8:4e:ea:d5:7d:44:65:94:dd:74:44: e2:3e:31:99:1b:cd:7f:3c:49:55:3f:08:02:34:a9:24:b0:65: 25:0e:5b:6d:5c:20:a9:2c:b0:98:5a:93:96:63:df:a0:fd:61: 66:d8:a4:6b:7c:c9:16:7a:16:95:9f:cf:9d:26:1c:c1:ab:de: 82:21:f4:b8:55:97:4a:90:97:f7:00:0a:4e:e3:2e:bf:f5:87: 86:96:d1:6b:a1:45:b3:fc:25:a8:82:87:67:5b:69:8f:3e:82: 29:19:9c:42:8c:8d:9e:8b:b5:53:ff:4b:58:c9:4d:40:f3:dd: 0d:39:86:5b:e2:a8:6a:1a:12:84:5f:7b:7e:ee:7d:f3:b9:cd: 0b:9e:16:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWUV6trCMkOE+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzU1MmQzZjMtNTIyYy00ZmM0LWE0MGMtYTY4NzkwMjk2MTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDKiF+Es5aspyoH14sFhYxaUFY5moaRWtyOZ QZgEj4+Bx+XotAdLyiqrJqH+jdXfVxY3Gt/T+L3cGD/rvqN0eMll7+9hsaNeatd9 jKhVW78Xhd64rmtRKgS1hpFuzz3NJd/T2vtDneppkPQzXt0BSZn1WjonOkztFTfJ +tZRrDtHZlYhVQQjyRg4xbOPZKPWjrQ3Qn/0o6t/zcS/j8BfSglxNUXXr5MZUN7t jbpjrsSPlqzcrqsV5p1Iwu2DZQrHXK0QXH7kvaXZU/j46swvEVFCC/oKia+Tl3gB 9yMCFUEbDKWJq9GG4DFsiNNQKx0CvdNcBxsnF57u9zks8AfoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpKJt2d1aDiKGX/MEaGrEyAw6ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvMDM0NWJlNWEtMjBjMi0z NWMwLTlhYjgtYThjMjJjZTkyMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADktDd9gvxoCa4/y87DhaFQKgHcSrDiAoBo3lhxk3+v6xKX0/8/0fIu3 dRzFc8dnsQQNLDeZOiYDOsN1C//lNonGpCK87c8tjGwnfkil9/wNsoFh73Eo1Iex W9OfL1eti1V3ZOegzeuYrXWsOv/WPmPEz1T4TurVfURllN10ROI+MZkbzX88SVU/ CAI0qSSwZSUOW21cIKkssJhak5Zj36D9YWbYpGt8yRZ6FpWfz50mHMGr3oIh9LhV l0qQl/cACk7jLr/1h4aW0WuhRbP8JaiCh2dbaY8+gikZnEKMjZ6LtVP/S1jJTUDz 3Q05hlviqGoaEoRfe37uffO5zQueFnA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:11 2025 by rpki-client