$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa File: 585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa (raw, json) Hash identifier: Ny6EdMejX7r0/NRnGqUcsJinVfhPfBK1r2d8g3ZCBHA= Subject key identifier: E8:80:12:DD:9D:5A:50:00:30:33:2E:0B:6A:4B:0F:E9:76:DB:9D:06 Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Certificate serial: 010D0C9F43285849D85F9FEBF897E33D93B1EF60 Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 22438 IP address blocks: 162.211.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:9f:eb:f8:97:e3:3d:93:b1:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=58eb76f7-a869-46df-ab76-2577043507a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:79:35:fc:63:cb:2c:63:4d:d5:a0:7b:71:10: 0e:6f:fc:1c:f1:0e:86:56:f9:4b:78:54:46:1c:02: 6d:6f:ef:be:51:70:57:4d:af:e9:b2:f2:ad:eb:83: ae:d2:5f:56:61:39:0b:5f:f3:4b:0b:80:dc:0c:ec: f2:18:c4:e8:44:aa:48:b8:01:95:57:f8:03:d3:b8: d8:38:44:ca:b6:72:3e:ff:c1:ae:16:1c:a7:0d:ce: c4:ca:5c:d9:bf:15:8e:7e:cf:53:73:5f:92:2b:28: 79:7c:3a:19:5c:42:ec:25:7d:ff:2e:74:74:62:d3: d8:a2:e4:4a:41:f5:9b:4c:09:60:dc:25:39:d6:80: 84:b7:99:55:f6:90:39:34:28:20:36:0e:52:2b:11: 32:a9:19:8a:55:f1:85:7a:ed:33:d3:5a:bb:f9:47: a6:f0:20:0e:3b:23:34:4d:83:59:15:08:79:ca:41: c0:7a:68:d8:b1:d7:db:9d:b4:45:9e:d2:0a:eb:ee: e2:20:16:e8:7e:c7:65:0f:c7:73:10:33:66:90:c7: ce:92:fc:8b:01:c4:75:28:a4:a1:2b:e6:f8:45:eb: 9b:10:da:1e:1a:21:16:e1:e8:e2:83:4d:5b:07:27: c6:82:19:7f:2d:f8:a4:72:6c:88:9c:6c:b0:60:cb: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:12:DD:9D:5A:50:00:30:33:2E:0B:6A:4B:0F:E9:76:DB:9D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl X509v3 Authority Key Identifier: keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer sbgp-ipAddrBlock: critical IPv4: 162.211.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a7:2d:51:a5:33:90:c4:45:c8:71:f3:ad:32:4c:7d:c1:e5: c3:4b:17:54:29:8c:2b:77:c9:87:29:71:74:6f:82:71:12:ae: 01:c7:e9:0a:69:90:45:ce:47:d3:bb:07:92:d1:88:1a:14:be: bf:61:8f:ea:13:e5:96:de:35:e0:c6:f4:97:8f:56:49:41:c7: 21:f1:23:b3:54:d8:c5:40:fe:33:00:dc:54:35:e1:4d:cb:21: 34:eb:4f:42:64:7d:1f:00:46:4e:92:95:ad:d5:82:46:2b:7e: 4b:3c:cd:27:8c:a4:94:fc:a2:91:1f:37:2f:31:3c:6f:c9:cc: 3f:c1:74:91:71:38:27:80:44:5b:af:46:fc:31:e8:23:14:e1: a5:f5:a5:47:2a:de:5a:f6:fe:eb:e1:a1:27:66:f4:a1:07:4e: a3:a5:26:02:26:01:28:25:0f:b5:63:1e:68:36:9e:e3:0f:a0: 07:64:4a:e2:ac:7c:c7:f0:cb:95:be:ae:af:6d:10:d2:08:86: af:57:53:44:4d:b6:b0:12:47:7e:84:f0:75:37:89:ca:e1:af: 57:a2:c9:96:5b:b3:fd:26:b6:7c:f4:55:e1:0f:7d:99:ac:b4: 3d:af:cf:56:33:f2:b8:ac:1b:9e:57:f0:bf:a5:d3:4d:64:ba: 8c:62:5d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5/r+JfjPZOx72AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1 NDdjMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NThlYjc2ZjctYTg2OS00NmRmLWFiNzYtMjU3NzA0MzUwN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHk1/GPLLGNN1aB7cRAOb/wc8Q6GVvlLeFRG HAJtb+++UXBXTa/psvKt64Ou0l9WYTkLX/NLC4DcDOzyGMToRKpIuAGVV/gD07jY OETKtnI+/8GuFhynDc7EylzZvxWOfs9Tc1+SKyh5fDoZXELsJX3/LnR0YtPYouRK QfWbTAlg3CU51oCEt5lV9pA5NCggNg5SKxEyqRmKVfGFeu0z01q7+Uem8CAOOyM0 TYNZFQh5ykHAemjYsdfbnbRFntIK6+7iIBbofsdlD8dzEDNmkMfOkvyLAcR1KKSh K+b4ReubENoeGiEW4ejig01bByfGghl/LfikcmyInGywYMuDwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiAEt2dWlAAMDMuC2pLD+l2250GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5 MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvNTg1ZjBmYzEtYmQ0ZC0z MmFkLTgzMzktYzJhMTZiM2YwOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4 YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKnLVGlM5DERchx860yTH3B5cNLF1QpjCt3yYcpcXRvgnESrgHH6Qpp kEXOR9O7B5LRiBoUvr9hj+oT5ZbeNeDG9JePVklBxyHxI7NU2MVA/jMA3FQ14U3L ITTrT0JkfR8ARk6Sla3VgkYrfks8zSeMpJT8opEfNy8xPG/JzD/BdJFxOCeARFuv Rvwx6CMU4aX1pUcq3lr2/uvhoSdm9KEHTqOlJgImASglD7VjHmg2nuMPoAdkSuKs fMfwy5W+rq9tENIIhq9XU0RNtrASR36E8HU3icrhr1eiyZZbs/0mtnz0VeEPfZms tD2vz1Yz8risG55X8L+l001kuoxiXes= -----END CERTIFICATE-----Generated at Thu May 15 08:10:57 2025 by rpki-client