$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a46ffe2-8ecc-3175-83c2-5e0470407575.roa File: 5a46ffe2-8ecc-3175-83c2-5e0470407575.roa (raw, json) Hash identifier: J1o0THkySK2atB4VkE1UlY3dh9b+yoPgr/ykvO6d0fo= Subject key identifier: 82:99:E1:A1:E3:08:86:92:23:16:97:42:CA:91:11:E5:42:C2:2E:84 Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F432858499DBF2BADEDB13A283BD82B80 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a46ffe2-8ecc-3175-83c2-5e0470407575.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 36231 IP address blocks: 163.123.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2b:ad:ed:b1:3a:28:3b:d8:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=f4127c49-4d18-430b-8c2c-68c3ed6a9373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:28:b5:52:64:fc:67:9a:d2:1c:02:89:ad: 4c:db:5b:ce:31:ab:78:fb:49:0c:8c:4e:41:3e:12: fe:2d:b9:6e:91:88:8d:06:08:f9:d5:bb:cc:01:ed: 46:3a:db:f6:38:88:17:e6:a8:af:9e:73:1d:e9:cb: 89:73:19:d0:6a:90:58:77:33:ca:cd:f8:12:7c:a8: 62:26:ad:0e:bf:d7:b8:79:46:a0:ed:6b:6c:e4:46: 71:2b:75:1c:26:c1:e1:a0:38:dd:17:d8:d9:70:34: c1:5f:d5:ad:1f:d8:d8:17:83:1a:38:5f:35:43:00: 9a:c3:d5:76:81:ee:fb:6e:f2:d0:ee:fa:a9:72:94: be:9b:a6:f8:e4:5e:0a:88:df:af:c4:5b:f9:b5:87: 3e:15:3e:c5:1e:a2:fd:b1:5a:24:de:f3:a8:95:6c: 3e:2b:8c:10:c1:8b:d7:96:65:18:66:8a:5e:4a:2c: cc:93:41:eb:b3:f6:2f:04:06:76:1a:7d:4d:95:b8: c2:e0:cf:ef:8c:3a:16:f2:d7:00:6e:46:0f:74:23: 3c:bd:a3:1b:56:e9:81:50:d1:23:c6:06:b8:9e:f2: 40:d8:19:69:e5:a3:1b:ea:19:4e:b8:3c:44:43:87: 65:b6:42:85:9a:04:57:76:cc:12:2b:d7:33:c7:70: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:E1:A1:E3:08:86:92:23:16:97:42:CA:91:11:E5:42:C2:2E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a46ffe2-8ecc-3175-83c2-5e0470407575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv4: 163.123.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e0:31:f8:22:fe:b4:a7:c4:54:16:0f:c1:ec:16:b7:af:0b: 8d:b2:59:8a:02:6e:2f:3b:d0:28:cf:66:ca:41:28:f8:8b:29: 3e:99:a8:6f:44:88:e3:c0:70:5a:eb:cc:f8:c3:ae:af:4f:f1: 20:f7:80:c5:78:2c:9d:3f:c6:b9:6a:9a:80:60:b4:43:e6:ae: 12:f8:c4:bc:c0:6e:ef:ad:e1:be:fa:9e:a7:c9:c2:0d:fa:d6: 53:8a:2f:b1:4b:08:59:f6:64:d1:92:85:70:ae:0b:3e:4b:04: 30:e2:ab:64:92:a0:f5:1b:e1:19:e9:94:57:38:3b:72:60:e6: a8:f2:6b:39:b3:17:30:41:94:94:95:c6:ba:61:c3:4a:23:50: 08:e9:70:55:6c:1f:fe:1d:e4:3d:85:11:45:93:42:0e:2c:7c: f9:1f:c3:01:89:2c:65:f2:ba:1d:5a:09:76:1e:bc:84:4c:17: 72:58:2b:44:7b:2a:ff:5b:19:25:01:df:ee:8e:09:a8:71:9a: aa:6b:02:8a:30:1b:c8:d6:85:2f:7d:45:f5:7e:e4:3c:06:6c: c5:6d:a8:0a:d4:1a:55:91:7d:1d:60:41:29:db:81:40:15:f0: f3:d6:34:7e:6a:21:59:5e:73:ec:92:3f:1c:9b:5e:26:e2:2c: c0:d0:83:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyut7bE6KDvYK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjQxMjdjNDktNGQxOC00MzBiLThjMmMtNjhjM2VkNmE5MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RcotVJk/Gea0hwCia1M21vOMat4+0kMjE5B PhL+LblukYiNBgj51bvMAe1GOtv2OIgX5qivnnMd6cuJcxnQapBYdzPKzfgSfKhi Jq0Ov9e4eUag7Wts5EZxK3UcJsHhoDjdF9jZcDTBX9WtH9jYF4MaOF81QwCaw9V2 ge77bvLQ7vqpcpS+m6b45F4KiN+vxFv5tYc+FT7FHqL9sVok3vOolWw+K4wQwYvX lmUYZopeSizMk0Hrs/YvBAZ2Gn1NlbjC4M/vjDoW8tcAbkYPdCM8vaMbVumBUNEj xga4nvJA2Blp5aMb6hlOuDxEQ4dltkKFmgRXdswSK9czx3C1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKZ4aHjCIaSIxaXQsqREeVCwi6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvNWE0NmZmZTItOGVjYy0z MTc1LTgzYzItNWUwNDcwNDA3NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPgMfgi/rSnxFQWD8HsFrevC42yWYoCbi870CjPZspBKPiLKT6ZqG9E iOPAcFrrzPjDrq9P8SD3gMV4LJ0/xrlqmoBgtEPmrhL4xLzAbu+t4b76nqfJwg36 1lOKL7FLCFn2ZNGShXCuCz5LBDDiq2SSoPUb4RnplFc4O3Jg5qjyazmzFzBBlJSV xrphw0ojUAjpcFVsH/4d5D2FEUWTQg4sfPkfwwGJLGXyuh1aCXYevIRMF3JYK0R7 Kv9bGSUB3+6OCahxmqprAoowG8jWhS99RfV+5DwGbMVtqArUGlWRfR1gQSnbgUAV 8PPWNH5qIVlec+ySPxybXibiLMDQg0k= -----END CERTIFICATE-----Generated at Sun May 11 02:11:25 2025 by rpki-client