$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa File: 81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa (raw, json) Hash identifier: Uqj5lPFqLrIC9hdlxPCuJxbYjQ4yrv/rDM07oRgh2Wc= Subject key identifier: CE:75:7F:CD:F6:3D:63:04:3D:90:51:C7:1E:C4:24:AD:10:E7:70:B0 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F432858495ABEE469F0934B76189F1260 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 8018 IP address blocks: 162.251.169.0/24 maxlen: 24 162.251.170.0/24 maxlen: 24 162.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e4:69:f0:93:4b:76:18:9f:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=758f1880-740f-448c-9c6c-13072d47478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1c:97:e7:5b:61:86:8c:6f:47:f1:2a:54:f9: c3:1a:60:f9:48:9c:ec:55:87:ad:44:00:98:d3:c2: c8:10:46:01:6f:d9:f9:dd:59:87:0f:d8:c3:4e:b6: 4e:2a:fe:cd:7a:08:ff:d7:0c:4d:10:e7:ed:b1:38: 27:71:d9:54:10:a7:11:16:f1:aa:bd:28:8d:cb:7c: fa:31:fb:c8:84:f1:51:06:9e:43:1f:b6:4f:64:ab: b1:2c:92:cf:1b:f2:26:fa:49:41:e4:9b:9a:78:66: 87:26:42:5a:e6:f5:b8:40:eb:05:4c:af:5f:b6:55: ca:de:e1:7c:09:88:20:46:ab:33:af:5b:5a:b4:fe: 02:c6:56:65:a0:65:33:e7:18:03:be:6f:44:c5:a0: 49:a9:af:a5:c2:ba:1b:9b:a0:35:f1:2c:60:ff:54: 1e:bf:dd:be:4d:78:cc:42:08:b9:a5:e8:ec:7e:c2: 8f:8d:14:c7:a9:c9:03:91:28:ee:fe:be:4e:24:36: 9d:50:49:17:95:64:46:73:5d:f4:ec:a8:97:10:71: 57:7d:39:51:46:a8:66:2d:32:53:59:24:12:6d:cb: 1c:06:80:35:23:26:e8:2d:0c:6c:34:a8:e8:73:62: 5a:7c:9f:51:ad:1b:bf:be:19:14:4f:b2:58:1b:5c: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:75:7F:CD:F6:3D:63:04:3D:90:51:C7:1E:C4:24:AD:10:E7:70:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 162.251.169.0-162.251.171.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:08:f8:22:b4:f5:18:7d:90:86:c7:86:1c:33:b3:c7:99:1f: 1f:ce:c5:ed:54:be:5b:47:90:4c:f6:ba:49:52:96:d1:02:c2: a4:da:4c:4e:cc:61:91:86:63:16:0e:2c:58:11:db:88:84:c1: c1:85:dd:40:db:b3:fa:36:90:76:1f:d9:a1:94:37:d5:65:2c: 1b:8b:d7:03:ca:d9:37:c1:15:ea:52:6d:a9:ca:79:0c:76:49: b6:6d:ee:74:43:66:97:6b:b9:77:0e:48:d8:6f:3f:80:0d:30: ca:60:68:6a:b1:86:ef:23:44:dc:7a:b2:0e:83:2b:ea:02:80: 1d:42:e2:27:91:2e:22:b1:03:ea:75:a1:b0:73:b9:c9:05:c4: b9:63:77:a7:db:93:cf:18:ed:f8:31:43:2f:cd:77:67:1c:29: 13:3f:a9:dc:b0:17:85:16:bd:b2:76:9e:9c:96:d8:53:9d:09: 20:dc:e1:9b:e1:c1:6d:8c:5d:24:51:fb:d8:85:fe:01:7a:a5: 4a:51:d6:2d:3e:03:08:fa:1c:c7:d3:29:58:c9:a2:73:9c:1e: d6:1d:6f:55:cd:9f:3b:39:36:98:aa:09:e5:16:06:b1:9b:f8: 57:df:b0:35:1f:c1:e6:06:91:77:fc:e0:76:6e:8e:8c:93:ab: 72:e4:35:39 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElavuRp8JNLdhifEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NzU4ZjE4ODAtNzQwZi00NDhjLTljNmMtMTMwNzJkNDc0NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRyX51thhoxvR/EqVPnDGmD5SJzsVYetRACY 08LIEEYBb9n53VmHD9jDTrZOKv7Negj/1wxNEOftsTgncdlUEKcRFvGqvSiNy3z6 MfvIhPFRBp5DH7ZPZKuxLJLPG/Im+klB5JuaeGaHJkJa5vW4QOsFTK9ftlXK3uF8 CYggRqszr1tatP4CxlZloGUz5xgDvm9ExaBJqa+lwrobm6A18Sxg/1Qev92+TXjM Qgi5pejsfsKPjRTHqckDkSju/r5OJDadUEkXlWRGc1307KiXEHFXfTlRRqhmLTJT WSQSbcscBoA1IyboLQxsNKjoc2JafJ9RrRu/vhkUT7JYG1z7ywIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFM51f832PWMEPZBRxx7EJK0Q53CwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvODFhYTAxMmYtMjhhOS0z OTVkLThkYzgtOGZmOWEzMWRiOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACi+6kD BAKi+6gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAkAj4IrT1GH2QhseGHDOzx5kfH87F7VS+W0eQTPa6SVKW 0QLCpNpMTsxhkYZjFg4sWBHbiITBwYXdQNuz+jaQdh/ZoZQ31WUsG4vXA8rZN8EV 6lJtqcp5DHZJtm3udENml2u5dw5I2G8/gA0wymBoarGG7yNE3HqyDoMr6gKAHULi J5EuIrED6nWhsHO5yQXEuWN3p9uTzxjt+DFDL813ZxwpEz+p3LAXhRa9snaenJbY U50JINzhm+HBbYxdJFH72IX+AXqlSlHWLT4DCPocx9MpWMmic5we1h1vVc2fOzk2 mKoJ5RYGsZv4V9+wNR/B5gaRd/zgdm6OjJOrcuQ1OQ== -----END CERTIFICATE-----Generated at Fri May 9 18:15:24 2025 by rpki-client