$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa File: b9851550-48fa-3e67-a75b-c441d378e2ab.roa (raw, json) Hash identifier: eT77RotQUyUbP65BJoq2KgZnBmUeEjVrgN4fPMtRYsg= Subject key identifier: AE:4C:9A:2A:0B:91:10:54:20:8E:88:CB:2C:3D:DF:7B:EA:0C:E4:05 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849C20A1508ADC14AF1CE974020 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 22742 IP address blocks: 163.253.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:15:08:ad:c1:4a:f1:ce:97:40:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=be7ddd69-e100-4e1c-b577-1ffe3c75b8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:2e:e7:bd:fe:58:5b:3b:61:43:ae:ce:0d: a6:ae:93:6d:fb:3c:cd:af:27:aa:2a:f9:d5:17:2b: 52:e7:e9:02:42:b5:01:ae:c3:18:24:e0:79:f1:41: 5f:7b:09:a2:88:68:9e:5e:0f:2b:16:f5:d5:2e:6f: 3e:cc:e9:b1:3a:f6:41:f1:de:cf:de:1d:51:06:c2: 15:ad:cc:ab:b2:76:64:44:a9:1d:31:2d:2f:5b:f3: 4c:e6:ba:9e:50:90:1c:38:dd:43:ac:74:12:94:a1: 35:9f:7a:5b:6f:93:6f:55:ae:11:ed:87:da:b0:8c: a6:0b:6e:99:48:e7:f3:2d:6d:5f:67:06:8a:70:95: e9:89:a6:48:af:dd:bc:c0:0a:18:2a:d3:32:a6:b4: 45:4e:74:62:33:6b:4e:d4:bd:db:d5:d1:94:73:18: fb:71:a4:d9:8f:07:c5:6b:a0:57:ca:f1:1a:05:1b: 49:5c:89:3f:a8:d0:31:c3:ca:19:35:ab:e3:ea:8d: b2:17:e7:81:16:88:69:6c:92:d3:db:a6:b1:0f:3f: 5c:32:1d:d3:8c:dd:a0:af:9a:ce:f6:30:33:f9:92: 10:d2:67:24:63:da:1d:fd:09:f2:3a:85:dd:32:24: 50:00:58:3d:5e:c6:35:65:1e:df:84:60:5e:04:bd: a2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:9A:2A:0B:91:10:54:20:8E:88:CB:2C:3D:DF:7B:EA:0C:E4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:15:21:86:02:11:e5:c3:91:45:1c:68:86:34:72:2c:cc:98: bc:1e:ee:d7:84:5f:50:f3:8a:2a:4c:96:58:a2:96:f9:21:18: 0f:69:94:e0:ca:33:80:63:e1:38:7c:25:af:19:58:0e:77:93: c9:5a:e3:27:e4:a8:1d:b6:5c:f1:98:54:01:84:fc:28:72:16: 16:91:02:34:ed:6f:24:f1:ec:30:9f:f2:be:93:62:76:25:06: 93:a3:c1:fd:53:a4:a9:5b:41:39:4c:55:07:cb:d4:d3:be:fb: 3b:a2:fe:86:98:be:21:c6:a2:cd:d8:c3:54:e5:0e:f4:f8:42: 1f:7c:c0:66:d8:b1:ff:f0:57:af:cb:d6:55:c5:81:05:87:eb: 86:9f:cc:ce:de:a4:fc:81:dd:80:68:59:e4:12:0c:50:f5:b7: 02:fe:ba:b8:b9:e2:87:a2:9c:9d:8a:79:a9:fc:7e:9c:d0:a7: 7a:dd:6b:2b:7c:52:66:43:28:d3:8a:81:e9:b3:68:3d:f3:ef: 45:7a:09:cd:c9:cb:2a:3e:da:53:18:99:1e:91:6e:04:37:26: b9:0c:f0:7f:ed:d9:f8:0f:50:63:18:89:e9:1f:eb:8d:43:d4: e8:72:39:76:6c:d7:8c:40:e5:24:ef:06:67:66:5a:4c:4b:6a: 91:c2:0b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChUIrcFK8c6XQCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YmU3ZGRkNjktZTEwMC00ZTFjLWI1NzctMWZmZTNjNzViOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLou573+WFs7YUOuzg2mrpNt+zzNryeqKvnV FytS5+kCQrUBrsMYJOB58UFfewmiiGieXg8rFvXVLm8+zOmxOvZB8d7P3h1RBsIV rcyrsnZkRKkdMS0vW/NM5rqeUJAcON1DrHQSlKE1n3pbb5NvVa4R7YfasIymC26Z SOfzLW1fZwaKcJXpiaZIr928wAoYKtMyprRFTnRiM2tO1L3b1dGUcxj7caTZjwfF a6BXyvEaBRtJXIk/qNAxw8oZNavj6o2yF+eBFohpbJLT26axDz9cMh3TjN2gr5rO 9jAz+ZIQ0mckY9od/QnyOoXdMiRQAFg9XsY1ZR7fhGBeBL2iDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5MmioLkRBUII6Iyyw933vqDOQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYjk4NTE1NTAtNDhmYS0z ZTY3LWE3NWItYzQ0MWQzNzhlMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQVIYYCEeXDkUUcaIY0cizMmLwe7teEX1DziipMlliilvkhGA9plODK M4Bj4Th8Ja8ZWA53k8la4yfkqB22XPGYVAGE/ChyFhaRAjTtbyTx7DCf8r6TYnYl BpOjwf1TpKlbQTlMVQfL1NO++zui/oaYviHGos3Yw1TlDvT4Qh98wGbYsf/wV6/L 1lXFgQWH64afzM7epPyB3YBoWeQSDFD1twL+uri54oeinJ2Kean8fpzQp3rdayt8 UmZDKNOKgemzaD3z70V6Cc3Jyyo+2lMYmR6RbgQ3JrkM8H/t2fgPUGMYiekf641D 1OhyOXZs14xA5STvBmdmWkxLapHCC9c= -----END CERTIFICATE-----Generated at Fri May 9 13:19:52 2025 by rpki-client