$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa File: d4db6e43-4486-319a-a77e-97a0a6fec458.roa (raw, json) Hash identifier: Z/RGJDg8YO/s3RFAWXecG34Cx4s5OI3P88JPOkg3ehs= Subject key identifier: C3:B5:2F:06:BF:2A:F9:AE:37:39:BF:41:BF:04:9B:C1:EC:84:85:A3 Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Certificate serial: 010D0C9F43285849D85FA0071DE0556B2174DB00 Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 22438 IP address blocks: 162.246.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a0:07:1d:e0:55:6b:21:74:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=df8628dc-7c2e-42b2-9b2f-2c0291a5bab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:d2:54:71:db:f4:22:f6:1e:ea:c4:70:14: ca:51:09:d0:1c:42:73:c6:21:ce:81:c4:61:87:24: 21:fd:6d:cf:75:db:1b:0a:a4:c6:21:eb:4c:a9:1f: 10:5d:65:de:e3:69:49:89:90:8f:45:6e:cd:c1:ef: 75:35:0d:e5:45:41:6c:f1:b3:87:6f:f1:1b:00:14: 48:41:21:9a:a6:6d:a0:18:ca:8a:98:97:0e:3c:1e: f0:1f:92:3c:04:f6:b2:94:06:1d:b9:bf:b9:17:e9: e9:dd:c7:f2:1a:57:cc:31:b4:c5:73:e4:63:66:74: 2f:85:c4:da:1f:d3:ee:e5:13:a8:ed:e3:07:a1:fa: 03:0d:54:24:a2:39:61:22:19:9a:43:62:be:df:37: b3:5a:92:3d:6d:32:42:11:cf:cf:24:44:98:07:5d: dc:58:44:4a:7d:18:ec:81:36:97:4d:e2:a6:a0:c5: 71:d0:31:98:9e:03:30:83:32:74:b7:b9:82:b3:d4: 4f:5f:80:03:20:c7:64:4a:37:85:6b:0c:35:d2:66: 94:e4:b2:3f:72:73:e1:94:a3:3b:f2:b6:36:9d:ee: bc:67:32:ce:23:0f:ad:d9:52:21:3f:a5:b6:52:dd: 58:16:ca:70:36:eb:3c:6d:2d:3a:90:28:3c:9b:15: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B5:2F:06:BF:2A:F9:AE:37:39:BF:41:BF:04:9B:C1:EC:84:85:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl X509v3 Authority Key Identifier: keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer sbgp-ipAddrBlock: critical IPv4: 162.246.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b2:a7:8d:3c:6f:ed:7c:79:3a:48:81:61:72:20:e6:de:a3: ce:83:e4:08:58:52:76:63:37:fa:0b:08:c5:f7:35:37:f0:46: 74:46:d1:12:9e:c1:3a:e1:b9:40:2a:2a:79:bb:a2:09:21:9c: 61:3b:6a:8d:88:6b:a1:fe:0b:61:3a:f1:f2:98:d5:88:d2:90: 1d:15:91:ac:0b:e0:b2:a7:79:96:0c:c3:fe:1d:5d:a4:69:dc: 0e:f8:13:8f:61:f2:61:34:35:42:34:26:e0:a6:c3:22:1b:e0: e4:4c:55:f5:26:eb:00:db:df:a8:33:ab:65:15:64:4a:a7:68: 52:c5:be:8b:07:17:18:4d:d6:62:68:b2:60:5e:23:71:88:da: 3e:d7:f2:1e:1a:a6:da:88:f2:32:77:22:0c:19:07:ff:fd:f1: f9:ec:d5:78:29:da:34:b9:8b:a8:aa:a8:71:03:10:aa:57:15: c3:79:62:76:fd:25:64:b4:2a:35:39:1a:76:7a:56:09:2c:59: cb:08:0d:d5:fa:43:82:da:e5:0f:e0:d6:32:01:a8:b8:25:70: c8:d4:d7:19:04:04:18:7b:98:71:43:8d:a0:88:28:3e:a1:94: e6:f4:15:f2:f7:06:bc:ab:79:da:bd:f7:f1:c5:eb:ff:ed:20: f1:1e:19:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6AHHeBVayF02wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1 NDdjMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZGY4NjI4ZGMtN2MyZS00MmIyLTliMmYtMmMwMjkxYTViYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeLSVHHb9CL2HurEcBTKUQnQHEJzxiHOgcRh hyQh/W3PddsbCqTGIetMqR8QXWXe42lJiZCPRW7Nwe91NQ3lRUFs8bOHb/EbABRI QSGapm2gGMqKmJcOPB7wH5I8BPaylAYdub+5F+np3cfyGlfMMbTFc+RjZnQvhcTa H9Pu5ROo7eMHofoDDVQkojlhIhmaQ2K+3zezWpI9bTJCEc/PJESYB13cWERKfRjs gTaXTeKmoMVx0DGYngMwgzJ0t7mCs9RPX4ADIMdkSjeFaww10maU5LI/cnPhlKM7 8rY2ne68ZzLOIw+t2VIhP6W2Ut1YFspwNus8bS06kCg8mxX3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO1Lwa/KvmuNzm/Qb8Em8HshIWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5 MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvZDRkYjZlNDMtNDQ4Ni0z MTlhLWE3N2UtOTdhMGE2ZmVjNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4 YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIayp408b+18eTpIgWFyIObeo86D5AhYUnZjN/oLCMX3NTfwRnRG0RKe wTrhuUAqKnm7ogkhnGE7ao2Ia6H+C2E68fKY1YjSkB0VkawL4LKneZYMw/4dXaRp 3A74E49h8mE0NUI0JuCmwyIb4ORMVfUm6wDb36gzq2UVZEqnaFLFvosHFxhN1mJo smBeI3GI2j7X8h4aptqI8jJ3IgwZB//98fns1Xgp2jS5i6iqqHEDEKpXFcN5Ynb9 JWS0KjU5GnZ6VgksWcsIDdX6Q4La5Q/g1jIBqLglcMjU1xkEBBh7mHFDjaCIKD6h lOb0FfL3Bryredq99/HF6//tIPEeGWQ= -----END CERTIFICATE-----Generated at Thu May 15 01:26:52 2025 by rpki-client