$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa File: 5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa (raw, json) Hash identifier: xdZKTUnu2Uf7UlYPD6ZM5ZnilqYpasLUKstGiQbGUcY= Subject key identifier: FE:E9:27:4F:C6:96:6B:C9:8B:86:56:C4:08:37:DD:62:9B:FF:63:46 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584957F41598D89253DC75C04F00 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 62952 IP address blocks: 162.251.168.0/24 maxlen: 24 162.251.169.0/24 maxlen: 24 162.251.170.0/24 maxlen: 24 162.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:15:98:d8:92:53:dc:75:c0:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=27da77d5-22ca-4019-b8bc-541a7003a068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:35:22:f9:56:d8:9e:32:43:8d:d3:a0:4a: 86:8d:fa:87:d6:6e:65:2d:db:01:5d:b1:5c:73:9a: 31:4a:54:6a:39:e6:26:5d:70:1f:9d:31:27:d3:df: 73:e4:ce:1c:ce:f9:cd:7e:f0:6c:b5:01:2f:11:87: 15:0b:5a:d2:a2:0d:26:5b:49:36:a7:f7:3a:9d:53: 44:76:fa:ca:eb:fa:7c:69:a7:af:a6:d0:3c:6a:d3: dc:3b:1b:ed:6e:0a:d1:7b:7a:57:17:1c:ae:b5:23: 9c:4d:69:6d:37:6f:6d:b5:64:0a:94:64:89:78:2a: 9c:e4:7c:5a:76:dc:cb:0d:6e:bf:5b:0e:2a:a8:38: f3:d7:d3:7a:42:ea:49:0b:4f:06:e2:08:35:48:a5: 30:58:12:c2:c4:c1:bd:26:0c:85:ea:a5:4b:c7:25: 11:4f:87:3a:91:01:b6:5c:31:1c:af:5e:38:05:0c: cd:45:f8:59:42:86:4d:7d:dd:34:33:48:e0:7f:b7: 97:b1:63:75:2a:54:20:81:5c:9c:75:76:2c:2d:3f: 54:b6:a3:c5:21:31:8a:34:86:94:e6:25:4d:f3:d0: 2d:ed:0c:e6:91:14:7a:b2:b4:a1:c6:80:07:25:8f: 8a:a0:09:d0:b8:cf:2c:1b:cb:8e:b6:50:a2:51:51: f2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:27:4F:C6:96:6B:C9:8B:86:56:C4:08:37:DD:62:9B:FF:63:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 162.251.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b1:f2:5a:3b:05:51:ac:36:84:fd:c1:19:72:4e:d6:63:56: ab:c1:2e:c7:b6:37:a3:cc:95:c0:8a:dc:4a:8e:55:eb:ee:ae: 42:95:bc:da:83:7e:1b:b5:a4:23:26:4d:f1:48:b7:e7:d8:25: e6:a8:bf:55:3c:f8:0e:7d:50:86:be:33:d1:9a:dc:f7:bf:b8: 50:d2:c8:25:b6:6a:8a:cf:eb:be:ed:8f:2d:88:c4:6a:b9:5a: d4:1b:c9:76:9b:c4:af:c5:01:8c:d7:59:ac:77:60:cc:40:04: b4:22:05:46:54:54:3a:b3:c4:a4:98:cb:69:f6:5d:0d:af:30: 05:1d:8e:a8:b4:4b:d5:0b:3f:ee:3b:0c:8e:e1:ae:3d:d0:6e: 0e:e9:fb:a1:f0:4c:1c:c4:c6:c4:d9:46:d2:29:da:62:d1:70: 95:ea:c3:7e:11:b2:b4:19:14:68:42:3e:b9:32:37:c2:d1:94: c1:e6:94:e6:98:19:fe:7a:04:93:f4:70:99:2b:78:a9:24:29: b7:25:fa:1e:29:5d:31:b0:91:69:09:3e:b5:e0:4d:84:53:6a: 9f:2b:2d:9d:70:55:00:55:40:51:e6:46:02:12:b6:a5:e0:3d: f5:14:a8:69:92:9a:d9:e7:3b:f4:b6:45:f6:fc:50:2b:8c:6b: a2:e2:02:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BWY2JJT3HXATwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MjdkYTc3ZDUtMjJjYS00MDE5LWI4YmMtNTQxYTcwMDNhMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKA1IvlW2J4yQ43ToEqGjfqH1m5lLdsBXbFc c5oxSlRqOeYmXXAfnTEn099z5M4czvnNfvBstQEvEYcVC1rSog0mW0k2p/c6nVNE dvrK6/p8aaevptA8atPcOxvtbgrRe3pXFxyutSOcTWltN29ttWQKlGSJeCqc5Hxa dtzLDW6/Ww4qqDjz19N6QupJC08G4gg1SKUwWBLCxMG9JgyF6qVLxyURT4c6kQG2 XDEcr144BQzNRfhZQoZNfd00M0jgf7eXsWN1KlQggVycdXYsLT9UtqPFITGKNIaU 5iVN89At7QzmkRR6srShxoAHJY+KoAnQuM8sG8uOtlCiUVHyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7pJ0/GlmvJi4ZWxAg33WKb/2NGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNWFlMzQyYTAtZDA1Yi0z YWZlLWEzYmEtYzNkYmEzMjc1ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmx8lo7BVGsNoT9wRlyTtZjVqvBLse2N6PMlcCK3EqOVevurkKVvNqD fhu1pCMmTfFIt+fYJeaov1U8+A59UIa+M9Ga3Pe/uFDSyCW2aorP677tjy2IxGq5 WtQbyXabxK/FAYzXWax3YMxABLQiBUZUVDqzxKSYy2n2XQ2vMAUdjqi0S9ULP+47 DI7hrj3Qbg7p+6HwTBzExsTZRtIp2mLRcJXqw34RsrQZFGhCPrkyN8LRlMHmlOaY Gf56BJP0cJkreKkkKbcl+h4pXTGwkWkJPrXgTYRTap8rLZ1wVQBVQFHmRgIStqXg PfUUqGmSmtnnO/S2Rfb8UCuMa6LiAlQ= -----END CERTIFICATE-----Generated at Thu May 8 15:59:36 2025 by rpki-client