$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa File: 471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa (raw, json) Hash identifier: LveOywD8C6h3Y8n7BL9VEIG7q4j3sbgh0RdMhuAquuI= Subject key identifier: 70:C3:16:45:A3:3B:E7:A3:D5:89:A8:3C:38:48:3C:B8:7E:70:F0:D2 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285849CE9A468AB8A9B72D9E9E7400 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7782 IP address blocks: 162.218.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:46:8a:b8:a9:b7:2d:9e:9e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8008282e-fb9c-46b4-ae90-856a3ff06b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:6e:5c:d6:9f:23:cb:f5:d6:bd:fc:0a:0b: 1f:a1:a8:bd:59:29:ea:2a:fa:6a:d3:48:2f:d7:26: 13:3c:95:e2:a1:31:7f:82:d5:77:4a:41:2b:2f:fd: d7:5c:a4:ba:4d:40:45:45:36:d9:78:f4:fa:f3:4d: bc:b8:47:77:18:69:49:05:8d:36:b5:43:49:e0:40: b8:09:42:f6:cb:92:60:42:d4:c7:6b:c4:8c:d7:43: b2:92:92:1d:d9:a8:da:f0:19:b9:e2:07:52:fb:aa: 31:30:7b:d0:43:7e:91:f0:94:7d:af:d2:7a:06:65: 6f:61:98:88:ac:4a:df:01:1a:fc:f0:1b:a0:5d:15: 18:28:51:7d:aa:10:13:d9:93:25:2a:a3:71:c1:31: e1:63:2a:d9:0d:51:0f:d4:6c:3a:dd:dd:0b:1d:15: 5f:ec:27:f4:6f:27:4d:b8:d7:c1:c2:e9:1d:1a:db: ce:e2:bd:98:81:e6:28:8c:25:b2:c3:1a:e4:c3:e4: 2f:f1:16:b5:4f:e0:c8:60:52:eb:09:1f:01:e8:d9: 5b:c6:e4:49:fa:46:9b:91:09:a7:51:68:c8:e5:4b: ba:8d:8e:9d:69:a0:c7:39:77:50:87:f1:c5:72:69: 44:15:f9:fe:27:27:07:81:53:38:4e:2d:a7:f3:94: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:16:45:A3:3B:E7:A3:D5:89:A8:3C:38:48:3C:B8:7E:70:F0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.218.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:88:b2:b2:a9:e9:ce:a8:2a:68:b1:b1:f1:e7:50:1c:26:d4: a9:43:39:cd:1d:93:4f:c6:9b:e7:b2:b4:4c:6f:df:71:26:8d: 0b:07:00:4e:22:78:30:ae:aa:81:81:e4:28:87:a8:65:48:23: b5:c2:da:22:a1:ad:93:69:cc:1a:55:ce:c2:d4:0f:10:1d:61: 3d:23:a9:be:45:56:24:88:de:a8:5e:d1:8b:7e:ce:8c:37:f0: 89:af:7b:42:2c:04:57:8f:d3:d6:69:a2:68:53:63:d9:a0:89: a6:09:38:60:67:4d:aa:31:da:1c:88:91:72:a1:b3:9b:99:ec: 63:84:90:38:99:0c:27:60:58:ef:d9:23:22:03:3b:b2:93:93: 25:95:98:06:d7:d1:60:3c:cc:fd:af:29:84:d5:b0:aa:dc:ec: 16:98:8c:fd:6f:43:af:8d:3e:de:13:20:d5:22:43:a7:3c:a0: 6b:c7:a0:ab:4c:a2:53:33:b9:ac:82:fc:c5:3e:7d:11:89:1f: dc:e3:f7:47:bb:bc:c8:dd:18:97:32:a2:3f:f5:57:ad:64:a0: 8f:b5:12:30:2f:29:45:12:e7:b8:7e:3f:81:fb:2c:72:6e:34: 6a:e9:de:56:4d:55:b6:52:08:07:ed:59:34:0d:e5:86:10:52: 9e:24:85:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkaKuKm3LZ6edAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODAwODI4MmUtZmI5Yy00NmI0LWFlOTAtODU2YTNmZjA2YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ZuXNafI8v11r38Cgsfoai9WSnqKvpq00gv 1yYTPJXioTF/gtV3SkErL/3XXKS6TUBFRTbZePT68028uEd3GGlJBY02tUNJ4EC4 CUL2y5JgQtTHa8SM10OykpId2aja8Bm54gdS+6oxMHvQQ36R8JR9r9J6BmVvYZiI rErfARr88BugXRUYKFF9qhAT2ZMlKqNxwTHhYyrZDVEP1Gw63d0LHRVf7Cf0bydN uNfBwukdGtvO4r2YgeYojCWywxrkw+Qv8Ra1T+DIYFLrCR8B6NlbxuRJ+kabkQmn UWjI5Uu6jY6daaDHOXdQh/HFcmlEFfn+JycHgVM4Ti2n85SBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDDFkWjO+ej1YmoPDhIPLh+cPDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNDcxNTM0YTQtOGU1NC0z ZDU2LWE4ZDgtY2ZjZTNmZmVkNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASIsrKp6c6oKmixsfHnUBwm1KlDOc0dk0/Gm+eytExv33EmjQsHAE4i eDCuqoGB5CiHqGVII7XC2iKhrZNpzBpVzsLUDxAdYT0jqb5FViSI3qhe0Yt+zow3 8Imve0IsBFeP09ZpomhTY9mgiaYJOGBnTaox2hyIkXKhs5uZ7GOEkDiZDCdgWO/Z IyIDO7KTkyWVmAbX0WA8zP2vKYTVsKrc7BaYjP1vQ6+NPt4TINUiQ6c8oGvHoKtM olMzuayC/MU+fRGJH9zj90e7vMjdGJcyoj/1V61koI+1EjAvKUUS57h+P4H7LHJu NGrp3lZNVbZSCAftWTQN5YYQUp4khZY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:11 2025 by rpki-client