$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/899d01bf-729a-3d98-bb6d-bfe66e020c97.roa File: 899d01bf-729a-3d98-bb6d-bfe66e020c97.roa (raw, json) Hash identifier: bHoabcyujtod3TuoXaKQjjydD0kzaol0nWsL9DAZ7Rc= Subject key identifier: 3A:D0:BB:D2:45:BA:E4:D3:3F:46:EF:FE:54:E9:BA:CD:31:E0:B4:B3 Certificate issuer: /CN=e102a5ad-786a-444b-bd0b-6bd116f20466 Certificate serial: 010D0C9F43285849C0A4DA17B8F050407D5B8440 Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/899d01bf-729a-3d98-bb6d-bfe66e020c97.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 393290 IP address blocks: 162.223.108.0/22 maxlen: 24 2604:9d40::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:da:17:b8:f0:50:40:7d:5b:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=b9743cbc-9cd8-4193-acf1-9b6019e779dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:3b:36:52:ec:81:e7:43:47:89:fc:5d:e0: dc:2f:d1:e9:8a:50:f9:1f:d3:82:4b:05:bb:73:fa: 12:97:36:14:4d:a9:2b:c3:9a:27:c9:b5:94:3e:e8: 55:1c:0b:70:6a:67:7f:77:eb:78:72:0d:2e:c6:ad: 52:01:c1:94:6e:55:f1:3c:12:ed:08:d3:49:8e:56: 12:fa:f8:fe:25:fa:91:dc:6f:10:62:bc:a4:99:02: 8e:22:da:61:3d:bf:b4:09:20:e9:c5:a6:69:82:44: 91:cf:7e:22:b4:90:9c:ee:7e:55:c6:cb:a1:f0:bf: 4c:f5:7a:08:9d:84:da:98:ba:ce:34:bc:81:ab:90: 85:58:c3:c0:68:76:4e:a2:43:0f:01:82:9a:c9:ed: c1:6a:fd:f2:54:86:34:1f:b8:c7:1b:49:67:45:be: 8f:90:66:78:15:ae:60:1f:96:c4:0b:be:ae:8e:f5: f9:0b:84:fe:e9:10:ff:c1:0d:62:62:a5:df:0e:d1: 50:c4:b2:a9:72:03:11:f5:32:86:49:97:1d:7d:dc: ba:a5:97:7b:da:b6:41:3a:73:0c:11:21:80:38:d7: 4a:da:6d:87:f9:9d:1a:48:ce:bf:42:6d:e9:ff:98: 2d:61:53:84:85:f2:9e:0b:58:b5:bf:f0:03:d3:cc: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:BB:D2:45:BA:E4:D3:3F:46:EF:FE:54:E9:BA:CD:31:E0:B4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/899d01bf-729a-3d98-bb6d-bfe66e020c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl X509v3 Authority Key Identifier: keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer sbgp-ipAddrBlock: critical IPv4: 162.223.108.0/22 IPv6: 2604:9d40::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:99:f4:40:c1:e0:99:65:34:e0:bf:2c:3c:56:55:f8:ab:10: 1a:9e:11:d1:46:24:06:8f:82:19:23:f8:4d:49:d1:ea:41:22: d0:82:a8:c4:3b:a5:60:8c:fb:e2:ca:1c:40:f6:bd:6f:04:75: db:f4:4f:91:79:ea:db:61:b4:ea:51:48:8e:2f:0d:e1:b2:62: 08:5f:b9:48:96:69:82:5f:fe:12:c4:d5:84:a2:52:83:70:9c: 16:54:e7:88:c0:e9:4b:ac:52:cc:32:53:57:8b:9f:47:81:55: 1f:8a:4a:7e:22:65:c3:27:f5:b9:df:2a:72:4f:73:7e:df:8e: 70:5a:ca:8e:91:ba:c7:aa:81:4c:57:ca:df:2c:e1:b6:f7:f5: 01:f6:be:9f:65:f0:d1:c1:9b:49:64:6a:15:e2:4a:d8:20:3a: bf:d1:b9:fd:1d:fa:e0:1e:3c:9d:8c:52:f7:21:9a:84:30:d9: aa:62:6a:10:77:77:34:5b:4e:d6:2f:05:87:cc:aa:72:96:c3: a5:de:91:87:a5:e8:fb:ab:be:4e:d7:37:24:bc:96:bb:67:5a: 73:36:c0:12:3d:b3:9e:d6:4b:34:0c:47:7e:60:0c:aa:2b:bc: d1:54:8d:d7:c8:82:e6:94:6b:2c:c1:df:83:52:4a:19:99:23: fe:62:d9:9b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnApNoXuPBQQH1bhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEwMmE1YWQtNzg2YS00NDRiLWJkMGItNmJkMTE2ZjIw NDY2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk Yjk3NDNjYmMtOWNkOC00MTkzLWFjZjEtOWI2MDE5ZTc3OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMc7NlLsgedDR4n8XeDcL9HpilD5H9OCSwW7 c/oSlzYUTakrw5onybWUPuhVHAtwamd/d+t4cg0uxq1SAcGUblXxPBLtCNNJjlYS +vj+JfqR3G8QYrykmQKOItphPb+0CSDpxaZpgkSRz34itJCc7n5Vxsuh8L9M9XoI nYTamLrONLyBq5CFWMPAaHZOokMPAYKaye3Bav3yVIY0H7jHG0lnRb6PkGZ4Fa5g H5bEC76ujvX5C4T+6RD/wQ1iYqXfDtFQxLKpcgMR9TKGSZcdfdy6pZd72rZBOnMM ESGAONdK2m2H+Z0aSM6/Qm3p/5gtYVOEhfKeC1i1v/AD08y+GQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDrQu9JFuuTTP0bv/lTpus0x4LSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTAy YTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZmMjA0NjYvODk5ZDAxYmYtNzI5YS0z ZDk4LWJiNmQtYmZlNjZlMDIwYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTEwMmE1YWQtNzg2YS00NDRiLWJk MGItNmJkMTE2ZjIwNDY2L2UxMDJhNWFkLTc4NmEtNDQ0Yi1iZDBiLTZiZDExNmYy MDQ2Ni5jcmwwHwYDVR0jBBgwFoAUmOuumIaU+Z26tSR7THaZ3Uuit+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQx MTZmMjA0NjYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCot9sMA4E AgACMAgDBgEmBJ1AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2mfRAweCZZTTgvyw8VlX4qxAanhHRRiQG j4IZI/hNSdHqQSLQgqjEO6VgjPviyhxA9r1vBHXb9E+ReerbYbTqUUiOLw3hsmII X7lIlmmCX/4SxNWEolKDcJwWVOeIwOlLrFLMMlNXi59HgVUfikp+ImXDJ/W53ypy T3N+345wWsqOkbrHqoFMV8rfLOG29/UB9r6fZfDRwZtJZGoV4krYIDq/0bn9Hfrg HjydjFL3IZqEMNmqYmoQd3c0W07WLwWHzKpylsOl3pGHpej7q75O1zckvJa7Z1pz NsASPbOe1ks0DEd+YAyqK7zRVI3XyILmlGsswd+DUkoZmSP+Ytmb -----END CERTIFICATE-----Generated at Wed May 14 19:58:45 2025 by rpki-client