$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/337b5c2f-3db3-35c6-8bc0-1403fe323f12.roa File: 337b5c2f-3db3-35c6-8bc0-1403fe323f12.roa (raw, json) Hash identifier: U4U+pvonZKUOkWE/VAAajrsS7l6Tj7npP3lgSw5QNWc= Subject key identifier: FA:C4:3D:51:90:70:03:CA:42:AD:82:8F:E9:83:55:4D:91:93:17:8B Certificate issuer: /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Certificate serial: 010D0C9F432858499CC0180431C8AD848F3D01C0 Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/337b5c2f-3db3-35c6-8bc0-1403fe323f12.roa Signing time: Tue 22 Apr 2025 16:26:58 +0000 ROA not before: Tue 22 Apr 2025 16:26:58 +0000 ROA not after: Mon 21 Jul 2025 16:26:58 +0000 asID: 14537 IP address blocks: 162.250.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:c0:18:04:31:c8:ad:84:8f:3d:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Validity Not Before: Apr 22 16:26:58 2025 GMT Not After : Jul 21 16:26:58 2025 GMT Subject: CN=6b8dbd3a-5c7c-46da-af40-d3b7597f0c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:96:c9:13:af:82:99:0a:0d:1b:21:79:40: 80:41:78:0d:09:4b:70:f2:1f:79:9d:ed:d6:11:b3: 16:05:29:65:05:f1:dd:73:5a:25:e6:54:a3:af:e4: 34:a6:44:f9:d3:d1:28:eb:bd:af:9e:35:00:13:db: 8f:d5:04:2a:aa:10:81:77:13:79:97:4b:e5:16:b9: 8d:7a:32:84:27:44:9c:16:4d:04:a7:df:b4:e5:58: d8:6c:4c:30:dc:a4:d5:e4:45:44:53:3c:88:07:fa: 54:a0:86:12:73:9a:53:ab:10:96:8d:5d:4b:73:fc: 2d:26:94:a9:2b:a6:da:65:e8:7c:d3:ec:3f:8d:31: 64:a0:30:0a:24:05:78:8a:b0:de:b0:33:69:b4:45: 39:ea:01:07:40:15:17:ca:1b:2c:82:a1:8c:63:e4: a6:90:92:78:0b:d1:38:c8:19:e2:c2:e6:8f:15:ef: f2:14:f1:80:87:7c:7f:e9:56:98:94:28:be:98:a7: 17:9a:72:7e:9f:9b:6e:e0:63:59:a8:78:44:05:af: c0:ae:c5:79:8b:a7:52:3c:ff:f9:cc:2f:b5:4f:3f: cb:a4:e1:6e:41:57:8d:bb:14:87:e8:76:a2:ef:c4: ad:a3:02:c6:49:12:09:79:13:1c:e6:f1:1c:81:e8: 6b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C4:3D:51:90:70:03:CA:42:AD:82:8F:E9:83:55:4D:91:93:17:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/337b5c2f-3db3-35c6-8bc0-1403fe323f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl X509v3 Authority Key Identifier: keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer sbgp-ipAddrBlock: critical IPv4: 162.250.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:39:d8:08:b3:e5:41:b7:ec:41:e1:4d:10:ef:9a:f0:65:e4: df:9e:21:85:ca:59:35:11:b1:b9:0b:a5:5d:07:f4:c8:0a:51: f2:f6:82:ef:68:5c:0c:37:ee:8a:52:bc:a2:95:75:9c:31:08: d8:66:9e:b7:ec:83:01:51:70:b1:d4:9e:f6:cc:83:ab:b1:9c: 3e:43:36:ea:e6:84:1f:79:54:69:ff:9d:fc:32:91:de:5b:b0: 01:63:d8:bd:50:c3:9d:7d:5b:dc:d5:43:c0:6c:cc:d9:b9:84: 29:a3:80:ff:ef:0a:77:08:87:c6:a3:92:c1:d1:4b:43:a1:2e: 08:b0:20:6c:79:89:f2:ca:f5:a5:c5:36:8a:be:f3:ba:22:cf: 81:4c:fd:bd:a9:94:1d:05:43:15:f0:2f:c3:e6:bc:af:87:85: 60:bc:b1:4d:c8:95:a7:3f:50:0c:e7:09:48:b4:c6:d1:a0:87: 8e:8c:ab:d7:03:c9:de:95:80:a3:41:99:56:61:ef:b5:90:15: 30:13:d6:c6:57:1c:1a:4c:55:1a:9b:a8:c7:15:35:65:d7:79: 9b:bf:43:19:60:33:5a:e4:9c:bc:77:79:dd:2b:59:92:10:60: 0b:e8:8a:d1:b1:ac:77:ad:f3:9b:d5:11:90:23:ab:cf:99:93: 47:57:ba:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcwBgEMcithI89AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJhNmE2NDMtYjVkMC00ZjA5LThlNjAtZTgyYmExZWI3 ODQ4MB4XDTI1MDQyMjE2MjY1OFoXDTI1MDcyMTE2MjY1OFowLzEtMCsGA1UEAxMk NmI4ZGJkM2EtNWM3Yy00NmRhLWFmNDAtZDNiNzU5N2YwYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UWWyROvgpkKDRsheUCAQXgNCUtw8h95ne3W EbMWBSllBfHdc1ol5lSjr+Q0pkT509Eo672vnjUAE9uP1QQqqhCBdxN5l0vlFrmN ejKEJ0ScFk0Ep9+05VjYbEww3KTV5EVEUzyIB/pUoIYSc5pTqxCWjV1Lc/wtJpSp K6baZeh80+w/jTFkoDAKJAV4irDesDNptEU56gEHQBUXyhssgqGMY+SmkJJ4C9E4 yBniwuaPFe/yFPGAh3x/6VaYlCi+mKcXmnJ+n5tu4GNZqHhEBa/ArsV5i6dSPP/5 zC+1Tz/LpOFuQVeNuxSH6Hai78StowLGSRIJeRMc5vEcgehrYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrEPVGQcAPKQq2Cj+mDVU2RkxeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmE2 YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFlYjc4NDgvMzM3YjVjMmYtM2RiMy0z NWM2LThiYzAtMTQwM2ZlMzIzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJhNmE2NDMtYjVkMC00ZjA5LThl NjAtZTgyYmExZWI3ODQ4L2RiYTZhNjQzLWI1ZDAtNGYwOS04ZTYwLWU4MmJhMWVi Nzg0OC5jcmwwHwYDVR0jBBgwFoAUNX+gJNiHITtZZOj7Qig1gK5dUycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJi YTFlYjc4NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovo6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI52Aiz5UG37EHhTRDvmvBl5N+eIYXKWTURsbkLpV0H9MgKUfL2gu9o XAw37opSvKKVdZwxCNhmnrfsgwFRcLHUnvbMg6uxnD5DNurmhB95VGn/nfwykd5b sAFj2L1Qw519W9zVQ8BszNm5hCmjgP/vCncIh8ajksHRS0OhLgiwIGx5ifLK9aXF Noq+87oiz4FM/b2plB0FQxXwL8PmvK+HhWC8sU3Ilac/UAznCUi0xtGgh46Mq9cD yd6VgKNBmVZh77WQFTAT1sZXHBpMVRqbqMcVNWXXeZu/QxlgM1rknLx3ed0rWZIQ YAvoitGxrHet85vVEZAjq8+Zk0dXunQ= -----END CERTIFICATE-----Generated at Mon Apr 28 09:29:16 2025 by rpki-client