$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/0c95fa2f-7c6a-3193-9aa9-7f399caae1a0.roa File: 0c95fa2f-7c6a-3193-9aa9-7f399caae1a0.roa (raw, json) Hash identifier: JuPaqkLTqaUhz0Q0VYV0A5dFRGj+YLESJTlQfxnbM4c= Subject key identifier: F6:5B:D3:47:A6:15:1F:78:76:41:9C:0F:6D:76:40:17:D4:C6:E4:09 Certificate issuer: /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0 Certificate serial: 010D0C9F43285849A61F3CC3C5D0740E70680F00 Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/0c95fa2f-7c6a-3193-9aa9-7f399caae1a0.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 162.217.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3c:c3:c5:d0:74:0e:70:68:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c259e26a-252d-4c6d-b854-7c313a276339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:ed:2c:6c:94:a1:24:57:ef:f7:b2:0f:f2: 8d:e1:cf:2f:6c:42:4a:8e:f6:2b:ea:4b:4d:69:ef: d9:32:ca:5a:3d:a3:d2:c6:18:d9:5a:4d:61:3c:5d: 3d:00:8a:8b:0c:99:2e:73:f6:ac:44:b2:92:8f:fd: 1a:53:ba:06:1c:7b:1b:78:41:84:87:fb:39:54:09: df:44:3e:8b:ce:13:21:cc:31:22:b6:75:ec:11:0c: 31:73:d7:93:d7:fd:e8:1b:5a:47:f2:98:d3:c0:61: 0f:a8:05:29:34:49:ec:db:a4:0c:c5:63:86:58:85: 56:7f:0e:eb:69:53:45:67:94:18:77:2b:2e:f4:94: 6a:04:5b:ea:4c:e7:b3:84:31:bb:b1:70:62:e9:65: 9e:17:56:15:7c:bb:66:e8:fb:46:a4:ab:58:e6:2e: 28:37:67:dc:8b:4f:f9:bf:08:44:70:96:28:68:98: 40:87:a5:1b:d4:2e:2f:43:85:af:d8:ce:73:75:9f: 73:14:da:5a:c8:b2:8c:16:6f:a1:c1:e1:ea:8d:a0: 49:e2:85:a1:8a:93:95:6b:5d:4a:33:e8:ef:3c:d6: d0:9a:01:9e:85:88:18:66:84:68:f1:94:1f:62:6b: 43:4a:8c:06:e9:c8:df:62:23:0f:50:98:b9:33:48: 7c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:D3:47:A6:15:1F:78:76:41:9C:0F:6D:76:40:17:D4:C6:E4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/0c95fa2f-7c6a-3193-9aa9-7f399caae1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl X509v3 Authority Key Identifier: keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:41:04:07:82:22:27:88:c1:9c:d7:63:5a:d0:a7:d8:d5:e7: 76:05:2d:c0:d7:78:37:b0:ca:9d:70:af:08:e5:6c:17:9d:ee: d9:9e:0b:83:52:0a:55:dd:c5:ed:92:ae:0e:90:5d:36:85:1c: d8:78:bf:70:f9:cc:fb:d2:00:a3:ff:78:4b:67:4e:77:4a:b9: 72:40:d4:5e:7d:6d:14:97:7b:1c:19:05:e9:d9:5f:ac:b1:e8: bf:3a:cb:75:5b:39:42:5e:bf:3c:bb:45:ad:98:f1:db:e7:23: 1e:da:de:27:04:d3:5f:50:3d:e9:46:11:af:03:71:95:00:b8: 53:44:ed:a6:d6:55:3e:cb:9b:c4:4e:7f:48:31:2c:87:27:87: a8:6a:b6:63:6c:d2:64:ab:a6:36:eb:80:f6:2c:ea:d3:16:49: b4:a8:86:d1:93:8a:a9:34:b3:53:f9:d6:65:ba:ca:ed:44:ea: 8d:56:06:f4:b9:c7:ef:51:dc:82:4a:a2:dc:f0:7a:89:52:dc: 02:28:4d:16:ae:f9:af:d4:9e:9e:e6:71:0d:eb:1e:a7:8f:0e: 8a:23:5b:4b:61:db:d1:85:f9:f7:d6:a7:03:20:33:a3:e9:ca: 1e:8d:96:13:6d:e1:05:c0:83:82:84:21:f3:5b:aa:3f:51:ca: 7a:d8:2f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzzDxdB0DnBoDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkMzE5YmUtMjg3Ni00MDNlLWJhODYtMjRkMjdhYWE4 ZmMwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YzI1OWUyNmEtMjUyZC00YzZkLWI4NTQtN2MzMTNhMjc2MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfTtLGyUoSRX7/eyD/KN4c8vbEJKjvYr6ktN ae/ZMspaPaPSxhjZWk1hPF09AIqLDJkuc/asRLKSj/0aU7oGHHsbeEGEh/s5VAnf RD6LzhMhzDEitnXsEQwxc9eT1/3oG1pH8pjTwGEPqAUpNEns26QMxWOGWIVWfw7r aVNFZ5QYdysu9JRqBFvqTOezhDG7sXBi6WWeF1YVfLtm6PtGpKtY5i4oN2fci0/5 vwhEcJYoaJhAh6Ub1C4vQ4Wv2M5zdZ9zFNpayLKMFm+hweHqjaBJ4oWhipOVa11K M+jvPNbQmgGehYgYZoRo8ZQfYmtDSowG6cjfYiMPUJi5M0h8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZb00emFR94dkGcD212QBfUxuQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZGQz MTliZS0yODc2LTQwM2UtYmE4Ni0yNGQyN2FhYThmYzAvMGM5NWZhMmYtN2M2YS0z MTkzLTlhYTktN2YzOTljYWFlMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2RkMzE5YmUtMjg3Ni00MDNlLWJh ODYtMjRkMjdhYWE4ZmMwLzdkZDMxOWJlLTI4NzYtNDAzZS1iYTg2LTI0ZDI3YWFh OGZjMC5jcmwwHwYDVR0jBBgwFoAUFqpMiZHY8up04nAcQ2H02dlqIMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83ZGQzMTliZS0yODc2LTQwM2UtYmE4Ni0yNGQy N2FhYThmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNBBAeCIieIwZzXY1rQp9jV53YFLcDXeDewyp1wrwjlbBed7tmeC4NS ClXdxe2Srg6QXTaFHNh4v3D5zPvSAKP/eEtnTndKuXJA1F59bRSXexwZBenZX6yx 6L86y3VbOUJevzy7Ra2Y8dvnIx7a3icE019QPelGEa8DcZUAuFNE7abWVT7Lm8RO f0gxLIcnh6hqtmNs0mSrpjbrgPYs6tMWSbSohtGTiqk0s1P51mW6yu1E6o1WBvS5 x+9R3IJKotzweolS3AIoTRau+a/Unp7mcQ3rHqePDoojW0th29GF+ffWpwMgM6Pp yh6NlhNt4QXAg4KEIfNbqj9RynrYL1s= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:49 2025 by rpki-client