$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa File: 4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa (raw, json) Hash identifier: rsXjds7yT+xmG57fmNoyuxM7LfpmvfXQWjEUzdxDMSc= Subject key identifier: 83:4F:CF:5F:09:CE:63:1F:D7:89:36:56:CB:7D:21:75:2C:A1:D4:76 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285849CBCF9A282DB8028C986C4780 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 40948 IP address blocks: 162.210.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9a:28:2d:b8:02:8c:98:6c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=d28a083c-ec03-4f20-8547-aa7b33f8d0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:df:ec:60:bd:c4:18:62:fb:bd:80:eb:b1: fe:1e:cd:96:da:c8:cc:9d:1e:35:01:18:d3:4c:7c: 7d:33:43:b9:af:e7:19:4e:a7:07:09:67:ac:ca:5e: 8c:cc:f2:13:87:1c:cb:9f:f7:ee:07:7b:79:22:86: bb:f1:64:03:6f:33:84:72:0a:fa:72:6f:36:0f:89: ee:16:a7:09:27:c0:77:97:22:59:d1:22:e9:15:28: 05:c9:c3:bf:5b:1f:2d:5e:3c:60:b9:85:d4:10:bc: e4:ce:7b:73:94:2f:e9:c7:97:03:80:75:78:e7:44: 0b:59:0e:cc:2e:23:9b:f4:2a:04:0e:b0:bb:62:5b: 56:db:c0:d9:a0:98:a1:58:8f:46:ec:74:ad:7b:cb: 41:19:94:c6:ec:be:11:9b:99:9e:96:06:ce:39:da: e2:14:ea:c3:84:7a:ef:7a:35:c2:50:36:81:78:08: 8a:c3:3c:a3:9a:ce:a4:a1:6a:93:46:f0:84:7e:12: a4:2c:b8:69:20:bf:2b:f1:13:cd:41:bd:15:49:3c: 60:f4:56:19:d2:90:99:05:bc:fb:5f:fe:61:28:70: 2e:f0:99:58:0c:25:29:dd:85:c2:5c:ed:04:88:0b: 75:f4:52:7e:e8:f0:9c:78:a1:c1:fd:27:64:ba:c5: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4F:CF:5F:09:CE:63:1F:D7:89:36:56:CB:7D:21:75:2C:A1:D4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.210.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3c:5a:a1:3b:89:a1:c4:b2:19:fa:b9:4f:b0:c5:7a:c8:ed: 5e:47:e6:3e:b1:4d:45:e1:fe:57:6c:b2:38:0b:9c:60:88:0c: 4a:52:bb:87:c6:7b:17:c8:92:5c:74:f6:51:98:ce:a8:3a:ad: 75:dc:cb:50:24:32:fc:85:f4:d3:24:91:d2:2a:8f:a8:89:66: 91:03:b9:48:a7:65:c7:f1:db:cc:b3:54:d1:5e:a1:5e:85:a7: fe:2d:32:d2:f4:02:7d:f2:e3:ba:cb:f4:11:1b:db:58:0e:44: 11:d7:37:7d:34:4c:49:ff:24:9e:cf:27:23:d9:0a:59:53:0a: 59:2e:96:c7:9a:6c:d6:cf:01:a3:a1:60:0c:b9:0f:02:93:8d: c6:7d:7d:37:57:00:b9:87:ce:c3:9c:f8:5e:10:16:66:14:93: c9:42:fb:67:40:bf:91:09:a7:a2:40:40:aa:45:53:46:2f:da: b2:43:08:4b:0f:07:75:87:e8:f6:e5:c5:00:8a:6f:50:bb:ee: 24:03:ca:11:1b:b8:dd:37:d7:1d:f0:01:5f:37:0b:0d:8e:23: 36:cd:d8:fe:c1:4f:c4:46:ee:d0:79:89:ac:72:03:04:8f:73: 45:85:cc:bc:6e:c3:30:0f:c3:bd:cf:2e:28:bb:50:8a:56:0e: 22:97:81:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5ooLbgCjJhsR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDI4YTA4M2MtZWMwMy00ZjIwLTg1NDctYWE3YjMzZjhkMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGvf7GC9xBhi+72A67H+Hs2W2sjMnR41ARjT THx9M0O5r+cZTqcHCWesyl6MzPIThxzLn/fuB3t5Ioa78WQDbzOEcgr6cm82D4nu FqcJJ8B3lyJZ0SLpFSgFycO/Wx8tXjxguYXUELzkzntzlC/px5cDgHV450QLWQ7M LiOb9CoEDrC7YltW28DZoJihWI9G7HSte8tBGZTG7L4Rm5melgbOOdriFOrDhHrv ejXCUDaBeAiKwzyjms6koWqTRvCEfhKkLLhpIL8r8RPNQb0VSTxg9FYZ0pCZBbz7 X/5hKHAu8JlYDCUp3YXCXO0EiAt19FJ+6PCceKHB/SdkusU9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINPz18JzmMf14k2Vst9IXUsodR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNGVhMDQxODktNGFlMy0z ZWYyLTlhODQtYzIyNGVjOWExYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg8WqE7iaHEshn6uU+wxXrI7V5H5j6xTUXh/ldssjgLnGCIDEpSu4fG exfIklx09lGYzqg6rXXcy1AkMvyF9NMkkdIqj6iJZpEDuUinZcfx28yzVNFeoV6F p/4tMtL0An3y47rL9BEb21gORBHXN300TEn/JJ7PJyPZCllTClkulseabNbPAaOh YAy5DwKTjcZ9fTdXALmHzsOc+F4QFmYUk8lC+2dAv5EJp6JAQKpFU0Yv2rJDCEsP B3WH6PblxQCKb1C77iQDyhEbuN031x3wAV83Cw2OIzbN2P7BT8RG7tB5iaxyAwSP c0WFzLxuwzAPw73PLii7UIpWDiKXgRk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:04:10 2025 by rpki-client