$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/c4b2a467-a7e8-3f40-9289-18e6acdc3206.roa File: c4b2a467-a7e8-3f40-9289-18e6acdc3206.roa (raw, json) Hash identifier: BrnvLi/QYzbZdJfgwEXdi8YGRH+daJSmTi5tXgqDfBI= Subject key identifier: 4D:48:56:96:29:79:C9:DA:58:67:7A:74:20:DC:DF:F7:FE:AF:3F:41 Certificate issuer: /CN=5410af3b-1667-4dd4-9260-1835889ae3a3 Certificate serial: 010D0C9F43285849C904E120C40C4ECC250FD600 Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/c4b2a467-a7e8-3f40-9289-18e6acdc3206.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 162.247.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e1:20:c4:0c:4e:cc:25:0f:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=892a9aa8-444d-4553-bf37-1c163865a0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:9f:4c:d4:d1:d3:0e:66:1a:35:23:4a:3c: 0b:bd:9a:4f:a2:71:5f:12:cd:33:b6:b3:27:97:63: ca:89:6a:ac:59:63:3a:33:18:5a:f7:0b:e2:41:68: 99:0b:ac:55:52:cf:48:1c:c1:ff:79:37:68:59:f8: 6f:12:a9:08:29:08:d6:a6:c5:2a:47:70:89:1d:c9: a7:a5:06:14:81:80:73:e6:cc:74:6f:a3:28:d3:c9: ec:27:10:a5:e3:a9:99:50:3e:1f:ca:9a:c5:df:6d: bb:a1:f6:ba:8d:ac:8b:cb:60:85:6c:87:55:6d:c7: 00:a0:16:ce:88:d3:b4:83:01:07:89:4f:a8:ca:37: f9:a3:dd:79:15:48:de:7b:8e:b5:54:ef:6f:c3:34: 3e:4b:19:6f:fd:8c:63:3f:59:11:0a:f1:d4:5e:b0: b3:3a:71:45:e8:e4:24:c8:f4:29:aa:54:36:2e:ab: 91:82:70:84:dd:55:cb:ad:63:ac:4e:5b:fb:00:bb: d3:ad:84:7e:c9:1d:c1:66:23:51:c2:d6:d1:33:1e: 05:3b:b3:b2:56:ca:64:e3:71:da:ee:a1:3e:ed:78: 7c:44:f7:69:99:a0:b6:0b:0f:ca:df:12:41:47:d1: d5:bb:f0:03:14:c5:4f:2c:b5:79:01:ba:35:87:b0: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:48:56:96:29:79:C9:DA:58:67:7A:74:20:DC:DF:F7:FE:AF:3F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/c4b2a467-a7e8-3f40-9289-18e6acdc3206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl X509v3 Authority Key Identifier: keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer sbgp-ipAddrBlock: critical IPv4: 162.247.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ab:dc:af:42:d9:8e:17:86:ce:e0:c0:c8:df:c1:16:68:df: 27:5f:5b:3d:c5:53:61:f1:44:56:8a:18:26:36:08:2b:13:fb: 40:b5:96:ac:48:d7:49:84:07:3d:2f:52:1b:dc:bf:1d:32:53: 44:89:4b:e2:91:85:57:cf:5f:37:31:dd:0a:ab:95:fc:67:e8: b9:f1:3a:dc:ee:65:96:c6:ef:a4:fc:a7:c2:27:5e:d6:7b:d3: 0b:f0:bd:c6:c4:a6:11:be:2e:4d:4f:aa:e1:b9:09:89:7b:98: b7:d6:c9:12:ca:b4:65:0a:b9:0a:99:db:82:77:2c:f8:e2:3f: 90:5b:26:2d:57:37:74:93:83:f9:dc:25:f0:7a:50:eb:ea:a0: 0d:88:cd:95:c2:ec:9b:d5:0a:a2:f1:92:04:53:d4:9b:3e:29: 3b:24:82:41:e4:02:cf:21:25:cc:9f:29:d0:6a:15:83:d3:e8: 11:75:ce:98:df:cc:88:1d:92:bc:ed:1b:3e:a2:09:f8:51:fb: 55:ad:3d:bc:33:d3:d7:b2:59:3b:80:e5:da:73:db:37:fa:56: 47:f4:19:1c:cd:4b:bd:52:a5:49:4b:ea:dd:fc:08:90:ff:24: c7:28:eb:c5:af:12:aa:36:3a:99:10:24:85:33:71:da:1b:80: 4e:88:38:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOEgxAxOzCUP1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQxMGFmM2ItMTY2Ny00ZGQ0LTkyNjAtMTgzNTg4OWFl M2EzMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk ODkyYTlhYTgtNDQ0ZC00NTUzLWJmMzctMWMxNjM4NjVhMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKqfTNTR0w5mGjUjSjwLvZpPonFfEs0ztrMn l2PKiWqsWWM6Mxha9wviQWiZC6xVUs9IHMH/eTdoWfhvEqkIKQjWpsUqR3CJHcmn pQYUgYBz5sx0b6Mo08nsJxCl46mZUD4fyprF3227ofa6jayLy2CFbIdVbccAoBbO iNO0gwEHiU+oyjf5o915FUjee461VO9vwzQ+Sxlv/YxjP1kRCvHUXrCzOnFF6OQk yPQpqlQ2LquRgnCE3VXLrWOsTlv7ALvTrYR+yR3BZiNRwtbRMx4FO7OyVspk43Ha 7qE+7Xh8RPdpmaC2Cw/K3xJBR9HVu/ADFMVPLLV5Abo1h7CvUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1IVpYpecnaWGd6dCDc3/f+rz9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEw YWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1ODg5YWUzYTMvYzRiMmE0NjctYTdlOC0z ZjQwLTkyODktMThlNmFjZGMzMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTQxMGFmM2ItMTY2Ny00ZGQ0LTky NjAtMTgzNTg4OWFlM2EzLzU0MTBhZjNiLTE2NjctNGRkNC05MjYwLTE4MzU4ODlh ZTNhMy5jcmwwHwYDVR0jBBgwFoAUuH92s/HalR9pb+ww8Pv6JRZIwWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEwYWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1 ODg5YWUzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovelMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACr3K9C2Y4Xhs7gwMjfwRZo3ydfWz3FU2HxRFaKGCY2CCsT+0C1lqxI 10mEBz0vUhvcvx0yU0SJS+KRhVfPXzcx3Qqrlfxn6LnxOtzuZZbG76T8p8InXtZ7 0wvwvcbEphG+Lk1PquG5CYl7mLfWyRLKtGUKuQqZ24J3LPjiP5BbJi1XN3STg/nc JfB6UOvqoA2IzZXC7JvVCqLxkgRT1Js+KTskgkHkAs8hJcyfKdBqFYPT6BF1zpjf zIgdkrztGz6iCfhR+1WtPbwz09eyWTuA5dpz2zf6Vkf0GRzNS71SpUlL6t38CJD/ JMco68WvEqo2OpkQJIUzcdobgE6IODc= -----END CERTIFICATE-----Generated at Sat May 10 19:29:38 2025 by rpki-client