$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa File: 395c0dc9-2753-334d-8d45-7b06bbeef517.roa (raw, json) Hash identifier: s3tHsJUdhHYv+FEDiMmvbhwBODmV2Gsyx8Kg3KLZV3E= Subject key identifier: 24:99:37:62:CC:3C:24:49:4F:B3:4E:B0:4A:62:C1:B6:A5:F8:13:59 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285848EC9696FA9879213DCB66EF80 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 40948 IP address blocks: 162.247.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:96:fa:98:79:21:3d:cb:66:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=dde02930-6c07-4092-8047-7ee4c15872b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:83:2a:10:85:d6:03:ce:ab:8d:e4:1c:62:28: 89:c3:24:f9:94:f8:33:11:8e:dc:a4:45:f2:c9:d7: 96:a2:4b:ec:85:2b:7c:2b:48:70:89:d7:81:6b:71: 6f:35:4a:e5:fc:21:63:b3:e8:60:64:44:ac:16:cf: 62:6c:1d:27:40:0f:97:13:a3:1c:1c:ec:46:cb:ae: 60:99:ee:87:8c:b1:42:62:01:5c:db:73:94:68:37: 0e:c7:1e:e8:64:ad:54:c3:94:72:f1:21:c3:19:f3: 86:3c:2c:eb:94:e5:d8:28:bd:21:0d:3f:35:25:f8: 5d:9a:7c:ed:ec:b4:58:84:34:10:0b:44:2d:04:e5: 13:f2:79:60:f4:ad:1f:c8:f7:1a:b3:de:d0:ae:2e: b4:35:0d:97:b9:00:9f:82:a2:82:fe:66:10:ba:b4: d4:92:fd:50:bb:83:58:cd:01:1b:2e:70:74:c2:f8: a6:3d:6c:0e:d2:73:d9:ab:4d:7c:0f:bd:d5:ff:21: e2:24:e8:ad:f0:46:b9:6f:e8:38:fa:dd:65:d7:d3: 14:79:43:e6:37:54:27:35:91:04:50:9f:af:51:75: b5:ab:4a:76:fe:32:7d:26:a1:73:85:25:b8:1e:d3: ca:70:dd:0c:e7:9d:5d:8a:46:ea:02:3f:d1:09:ef: 34:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:37:62:CC:3C:24:49:4F:B3:4E:B0:4A:62:C1:B6:A5:F8:13:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.247.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bc:f0:dd:95:92:60:ec:0c:79:a2:ec:b8:f2:85:47:1b:6f: bb:b6:53:e7:d5:c0:c3:01:27:ca:47:87:e2:32:21:bf:0b:e5: ef:68:b0:fb:f0:2e:87:7c:2e:bf:48:a1:df:74:93:67:9e:2b: eb:89:a5:e2:f1:9b:44:8f:45:3b:9b:8e:9f:e9:53:b8:78:46: 95:07:86:e9:9e:f8:87:8a:db:00:05:d1:5a:8e:75:36:35:a9: 21:f5:24:8d:d3:26:f1:87:82:b0:11:f6:38:d1:f4:2f:dc:8e: d3:0e:a1:f3:4b:4e:98:e2:a4:be:35:e0:86:02:a7:3d:cf:3a: 4f:81:64:7f:43:57:a3:af:1a:be:39:45:3b:38:a7:6f:8b:75: cb:a5:b4:46:76:6b:52:9a:99:ec:08:0e:9e:a5:d4:f0:06:33: e6:7c:3f:14:6f:07:cf:5c:aa:9c:03:fb:3e:f7:b4:1c:11:6a: f5:fd:f7:d5:3d:df:34:eb:98:81:aa:8e:81:74:f6:32:1d:d3: c7:19:c1:45:bf:b5:7b:bd:89:97:1a:b6:68:6b:39:9b:29:e3: 80:3d:5c:83:a0:25:da:a8:37:b3:ac:c1:f9:29:4a:cd:a9:de: f5:67:26:f2:50:2f:a4:17:a0:89:b6:4e:2f:44:27:9a:e2:28: 15:48:ad:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpb6mHkhPctm74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGRlMDI5MzAtNmMwNy00MDkyLTgwNDctN2VlNGMxNTg3MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIMqEIXWA86rjeQcYiiJwyT5lPgzEY7cpEXy ydeWokvshSt8K0hwideBa3FvNUrl/CFjs+hgZESsFs9ibB0nQA+XE6McHOxGy65g me6HjLFCYgFc23OUaDcOxx7oZK1Uw5Ry8SHDGfOGPCzrlOXYKL0hDT81Jfhdmnzt 7LRYhDQQC0QtBOUT8nlg9K0fyPcas97Qri60NQ2XuQCfgqKC/mYQurTUkv1Qu4NY zQEbLnB0wvimPWwO0nPZq018D73V/yHiJOit8Ea5b+g4+t1l19MUeUPmN1QnNZEE UJ+vUXW1q0p2/jJ9JqFzhSW4HtPKcN0M551dikbqAj/RCe80QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSZN2LMPCRJT7NOsEpiwbal+BNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvMzk1YzBkYzktMjc1My0z MzRkLThkNDUtN2IwNmJiZWVmNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoveEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa88N2VkmDsDHmi7LjyhUcbb7u2U+fVwMMBJ8pHh+IyIb8L5e9osPvw Lod8Lr9Iod90k2eeK+uJpeLxm0SPRTubjp/pU7h4RpUHhume+IeK2wAF0VqOdTY1 qSH1JI3TJvGHgrAR9jjR9C/cjtMOofNLTpjipL414IYCpz3POk+BZH9DV6OvGr45 RTs4p2+LdcultEZ2a1KamewIDp6l1PAGM+Z8PxRvB89cqpwD+z73tBwRavX999U9 3zTrmIGqjoF09jId08cZwUW/tXu9iZcatmhrOZsp44A9XIOgJdqoN7OswfkpSs2p 3vVnJvJQL6QXoIm2Ti9EJ5riKBVIrW0= -----END CERTIFICATE-----Generated at Tue Apr 29 20:30:55 2025 by rpki-client