$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/cd21302c-5005-3194-a965-a7b50db6120b.roa File: cd21302c-5005-3194-a965-a7b50db6120b.roa (raw, json) Hash identifier: o51RSAiJxwqwkHRCShXrS9rJZqb0fEtbDs8rs8YgBdw= Subject key identifier: 26:A9:5E:EC:6D:BA:4C:5B:7C:03:EF:FD:A2:FF:6B:DC:98:F2:43:A0 Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F432858494CC941436C459E1A3812C6C0 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/cd21302c-5005-3194-a965-a7b50db6120b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13213 IP address blocks: 162.255.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:43:6c:45:9e:1a:38:12:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=476610e0-10bf-4c6f-801a-ea69ef5b7320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:37:0b:30:18:5a:ea:0f:68:f6:2d:f2:22: d6:44:22:e6:5a:97:b1:8b:b1:42:8c:12:0c:16:b1: 85:1b:0c:87:54:2e:e8:9a:6c:7d:de:47:10:8b:eb: 62:1e:7b:76:87:2d:c8:1f:c7:be:18:93:f2:73:7e: 08:52:06:bf:12:c0:3e:c1:4f:48:9b:aa:0e:5e:3c: c5:af:97:a9:6a:61:f2:1a:e8:5e:53:07:0c:04:4b: 61:11:6a:11:df:0c:7b:2e:3a:7c:d9:79:aa:90:8e: 47:ce:cb:74:72:12:bf:78:d0:cf:50:6d:ea:29:f5: 99:48:fd:2f:f6:95:ae:97:00:18:a8:cc:3c:cf:39: 83:ea:c2:fa:32:8b:65:5c:41:cd:ce:3f:6a:58:33: 66:b9:c4:f4:2f:c5:10:39:73:2f:de:fc:97:66:c7: 1b:7c:a6:85:77:c6:30:4e:1d:4a:97:0e:5f:8b:34: 0b:3a:bb:78:64:b2:34:8e:eb:2d:91:cb:9d:c7:7c: 50:4c:86:76:b6:b9:4e:cf:38:fe:23:5b:82:4f:94: 0f:2f:ea:de:a3:d6:a6:40:6f:c4:ad:26:2e:32:44: f3:b2:76:eb:4d:da:46:7e:04:e7:0b:93:d8:05:0c: 71:62:13:8f:d6:92:34:01:c2:ef:35:c3:9d:b3:17: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A9:5E:EC:6D:BA:4C:5B:7C:03:EF:FD:A2:FF:6B:DC:98:F2:43:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/cd21302c-5005-3194-a965-a7b50db6120b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 162.255.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d7:bd:11:fe:95:00:ac:0f:3c:cf:de:70:b2:32:8a:06:f6: c2:1f:7b:b5:1e:8b:b4:a6:13:9e:17:00:ca:8f:d4:d3:2d:a5: f0:2e:16:39:e4:4d:6e:e8:e6:9d:a2:c7:46:61:24:87:44:db: 7b:a0:ea:0f:2d:7a:b0:d0:c2:7a:58:dc:63:0a:1a:7b:c7:3e: c4:57:23:db:2d:3f:5b:d8:e2:84:d1:b5:aa:ce:1b:9b:07:23: eb:3d:9b:e6:6b:1b:84:e8:80:66:20:06:da:d1:12:4d:04:59: b6:16:b1:54:b8:01:e5:20:d6:55:43:80:fe:62:fa:30:9d:ce: 6c:34:49:68:e3:ad:ef:c7:7a:7d:87:34:5d:bc:5c:47:a9:96: df:eb:03:45:61:10:56:29:84:8a:71:33:f7:89:79:18:1a:bd: e7:07:a8:92:f6:eb:43:70:dc:06:ad:ad:4b:1f:21:39:e1:41: 01:c7:89:03:bc:7c:72:bc:d0:f1:52:bd:e7:46:bd:af:ec:fa: 5c:8d:9c:e6:02:15:86:16:98:74:ba:e0:c2:8e:7c:0e:97:e2: c0:85:b9:a5:f5:c8:15:0e:4f:c6:ac:cc:b5:6f:bc:20:9b:5d: 8a:17:23:a4:63:aa:00:2a:fd:d7:a6:85:2d:d4:b9:c2:49:c6: 37:c1:db:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUFDbEWeGjgSxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDc2NjEwZTAtMTBiZi00YzZmLTgwMWEtZWE2OWVmNWI3MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjU3CzAYWuoPaPYt8iLWRCLmWpexi7FCjBIM FrGFGwyHVC7ommx93kcQi+tiHnt2hy3IH8e+GJPyc34IUga/EsA+wU9Im6oOXjzF r5epamHyGuheUwcMBEthEWoR3wx7Ljp82XmqkI5Hzst0chK/eNDPUG3qKfWZSP0v 9pWulwAYqMw8zzmD6sL6MotlXEHNzj9qWDNmucT0L8UQOXMv3vyXZscbfKaFd8Yw Th1Klw5fizQLOrt4ZLI0justkcudx3xQTIZ2trlOzzj+I1uCT5QPL+reo9amQG/E rSYuMkTzsnbrTdpGfgTnC5PYBQxxYhOP1pI0AcLvNcOdsxdX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCapXuxtukxbfAPv/aL/a9yY8kOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvY2QyMTMwMmMtNTAwNS0z MTk0LWE5NjUtYTdiNTBkYjYxMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrXvRH+lQCsDzzP3nCyMooG9sIfe7Uei7SmE54XAMqP1NMtpfAuFjnk TW7o5p2ix0ZhJIdE23ug6g8terDQwnpY3GMKGnvHPsRXI9stP1vY4oTRtarOG5sH I+s9m+ZrG4TogGYgBtrREk0EWbYWsVS4AeUg1lVDgP5i+jCdzmw0SWjjre/Hen2H NF28XEeplt/rA0VhEFYphIpxM/eJeRgavecHqJL260Nw3AatrUsfITnhQQHHiQO8 fHK80PFSvedGva/s+lyNnOYCFYYWmHS64MKOfA6X4sCFuaX1yBUOT8aszLVvvCCb XYoXI6RjqgAq/demhS3UucJJxjfB27Q= -----END CERTIFICATE-----Generated at Sun Apr 27 11:33:13 2025 by rpki-client