$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa File: 8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa (raw, json) Hash identifier: k5KhJhHClni991P78wl93ISaOaOg7/+xh0eyDYK0e4M= Subject key identifier: B1:56:A0:F0:83:DF:CF:54:2E:75:E8:D1:7A:09:9C:92:98:2F:79:DA Certificate issuer: /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Certificate serial: 010D0C9F432858498E648B2ABFAF7A6354FC0580 Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 834 IP address blocks: 162.245.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8b:2a:bf:af:7a:63:54:fc:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=5f3395d2-fa58-4047-9c08-235a948edbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:ff:89:d0:cd:d3:7c:45:b6:ec:d8:0e:50: bb:0a:ab:a4:8c:9f:05:1a:e9:cf:eb:28:1f:2f:1f: 8e:5a:0a:16:41:e4:e0:a2:70:e1:f8:17:fc:59:86: 4b:12:fe:27:51:34:2d:4d:d2:ac:e3:3d:12:f8:f6: d8:42:91:d1:84:26:82:a8:c7:36:c1:b6:3f:e1:54: dc:95:98:b6:2e:6a:2c:b9:35:83:b8:2a:dc:8f:9f: b5:ac:a8:33:1e:7e:bd:5b:1e:11:b1:0b:8e:3c:7d: ff:40:72:42:57:0d:b4:ff:49:d2:5b:ba:97:ae:20: 05:dc:ca:e6:30:af:8b:18:51:b5:61:a5:41:d1:f2: da:d4:4c:cf:1d:a7:fc:b5:12:70:60:cf:35:97:97: 98:f1:21:17:fc:b5:09:7d:53:22:fc:a0:96:9a:8c: 99:3e:bb:40:41:d2:47:a2:a1:08:a9:1f:74:7c:00: 05:a8:9d:c8:1a:ca:78:52:f6:74:af:b8:4f:8a:e4: 06:a3:ce:3b:3e:cd:0d:63:cf:1c:45:91:c0:3d:93: f1:99:2c:33:18:dc:bf:77:d9:c9:c7:2a:ef:e6:56: e7:bf:1f:3c:f5:1d:a0:1f:14:e6:cc:b7:0c:d5:57: dc:90:2d:72:e5:c9:9a:87:c3:0e:27:56:f0:e0:4f: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:56:A0:F0:83:DF:CF:54:2E:75:E8:D1:7A:09:9C:92:98:2F:79:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/8cfee125-6b6f-33a1-b7b3-0a35c69352c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl X509v3 Authority Key Identifier: keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer sbgp-ipAddrBlock: critical IPv4: 162.245.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:46:e0:ae:e5:12:05:1d:0c:b8:e8:87:df:cb:de:a4:27:3f: 01:19:3f:d9:e5:33:e9:1e:49:fc:75:27:f9:93:0a:ac:72:6c: e8:24:af:a1:0f:a4:6f:24:f1:e3:7b:2d:ce:2c:8a:a9:7e:c5: b1:06:dc:1c:b5:c3:7f:33:fa:dd:0b:0e:a0:2a:61:b4:2f:49: 31:a7:58:70:80:48:48:15:91:67:11:cd:45:8d:2e:da:e7:b3: 4d:a3:36:69:19:e4:48:0c:5b:8f:f4:b7:19:5e:fe:4c:38:02: 42:84:7b:6d:8e:3c:f2:22:6e:dc:65:c9:bc:57:8c:bf:19:3d: d8:18:ac:cb:a7:94:5b:6d:64:c4:59:56:03:12:eb:b3:29:3b: ae:8b:ca:6c:93:fe:67:a4:52:2c:29:be:54:80:02:29:ca:38: 19:e6:40:f9:88:8f:4a:2f:ab:cd:c6:38:3b:05:b7:fa:e1:c1: a9:34:b2:93:a1:d1:c3:27:2a:8b:a3:27:c1:52:3d:a8:c2:e7: 2c:48:c7:ed:62:2b:04:ef:1a:e6:a9:b4:e3:2b:3b:b5:10:92: 2e:ea:a9:91:f5:41:f7:41:ed:4e:a3:22:df:6b:81:f9:3a:d3: 2c:3b:dd:24:05:61:15:48:71:26:d7:f5:73:dd:43:e8:5c:67: 9c:5d:04:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIsqv696Y1T8BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3ZTMyMzctYjExNy00NTZiLWI3MzYtMmIzYzIzMDBi Y2ZlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NWYzMzk1ZDItZmE1OC00MDQ3LTljMDgtMjM1YTk0OGVkYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFj/idDN03xFtuzYDlC7CqukjJ8FGunP6ygf Lx+OWgoWQeTgonDh+Bf8WYZLEv4nUTQtTdKs4z0S+PbYQpHRhCaCqMc2wbY/4VTc lZi2LmosuTWDuCrcj5+1rKgzHn69Wx4RsQuOPH3/QHJCVw20/0nSW7qXriAF3Mrm MK+LGFG1YaVB0fLa1EzPHaf8tRJwYM81l5eY8SEX/LUJfVMi/KCWmoyZPrtAQdJH oqEIqR90fAAFqJ3IGsp4UvZ0r7hPiuQGo847Ps0NY88cRZHAPZPxmSwzGNy/d9nJ xyrv5lbnvx889R2gHxTmzLcM1VfckC1y5cmah8MOJ1bw4E8VMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFWoPCD389ULnXo0XoJnJKYL3naMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdl MzIzNy1iMTE3LTQ1NmItYjczNi0yYjNjMjMwMGJjZmUvOGNmZWUxMjUtNmI2Zi0z M2ExLWI3YjMtMGEzNWM2OTM1MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3ZTMyMzctYjExNy00NTZiLWI3 MzYtMmIzYzIzMDBiY2ZlLzFkN2UzMjM3LWIxMTctNDU2Yi1iNzM2LTJiM2MyMzAw YmNmZS5jcmwwHwYDVR0jBBgwFoAUFbuRDXZjPw9pAEsQoGEs2yZxcxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdlMzIzNy1iMTE3LTQ1NmItYjczNi0yYjNj MjMwMGJjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJG4K7lEgUdDLjoh9/L3qQnPwEZP9nlM+keSfx1J/mTCqxybOgkr6EP pG8k8eN7Lc4siql+xbEG3By1w38z+t0LDqAqYbQvSTGnWHCASEgVkWcRzUWNLtrn s02jNmkZ5EgMW4/0txle/kw4AkKEe22OPPIibtxlybxXjL8ZPdgYrMunlFttZMRZ VgMS67MpO66LymyT/mekUiwpvlSAAinKOBnmQPmIj0ovq83GODsFt/rhwak0spOh 0cMnKoujJ8FSPajC5yxIx+1iKwTvGuaptOMrO7UQki7qqZH1QfdB7U6jIt9rgfk6 0yw73SQFYRVIcSbX9XPdQ+hcZ5xdBKQ= -----END CERTIFICATE-----Generated at Sun May 11 06:17:34 2025 by rpki-client