$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa File: d65b5879-bd91-30f3-adc6-c3604bba9a74.roa (raw, json) Hash identifier: vdSY4hPXphgeGaz8XyzIuPPgJHSnn3boEG+/03S2srI= Subject key identifier: 52:E4:D5:85:34:39:E0:81:F2:99:B3:6E:8C:B0:18:8D:33:53:CB:BD Certificate issuer: /CN=4e69a311-ed99-4d08-bc96-aec2d6a1bfc0 Certificate serial: 010D0C9F43285849E22537CD640B1A9033D50C80 Authority key identifier: 41:D6:BA:85:75:7B:5A:34:F1:35:BE:2C:F3:B9:C4:AB:8C:AB:71:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 32238 IP address blocks: 162.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:37:cd:64:0b:1a:90:33:d5:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e69a311-ed99-4d08-bc96-aec2d6a1bfc0 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=40b33b57-889f-44ca-843a-7182d086fc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:68:8d:8f:dd:f0:44:d0:98:57:d3:68:44: 4c:2c:28:61:38:5e:ea:e6:da:b1:69:95:af:e7:91: 40:ae:66:e5:68:eb:3a:bc:c1:c7:4b:38:05:ee:c3: 42:76:c6:81:c5:d6:eb:b3:5a:71:23:03:e7:37:39: 3f:70:0b:3f:46:0e:fe:3e:fa:24:20:d2:e2:a4:38: 0c:c8:39:ea:fc:bd:72:a8:c9:c6:5e:40:ca:b1:6e: ea:74:91:b8:d5:b6:15:bd:55:c6:74:11:73:dd:f8: 48:97:55:bf:7c:9d:cf:4d:b5:7d:cf:0f:9b:63:e9: 1d:f4:f9:3b:a0:d6:f4:8d:64:cd:cc:e0:60:4c:55: b1:24:02:8e:32:dc:59:fe:87:03:cf:c8:56:a6:dc: 30:4e:1d:d2:05:a2:bc:aa:4c:15:5f:37:d2:c2:ef: a0:06:0c:f4:90:4a:f8:55:50:09:6b:a2:dc:af:db: 56:5a:d9:59:3b:b4:97:3c:20:9f:c6:71:da:c3:1b: b6:41:47:e9:d2:49:6b:91:27:72:de:c6:db:5e:53: d0:07:1b:71:24:b5:d3:9d:0a:e7:e4:af:c6:a5:48: 62:69:3d:fc:12:45:60:3f:78:c1:23:c8:6c:3c:e5: 6a:50:89:43:a8:43:2e:dc:16:81:d4:88:b0:7b:2d: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:D5:85:34:39:E0:81:F2:99:B3:6E:8C:B0:18:8D:33:53:CB:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/d65b5879-bd91-30f3-adc6-c3604bba9a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.crl X509v3 Authority Key Identifier: keyid:41:D6:BA:85:75:7B:5A:34:F1:35:BE:2C:F3:B9:C4:AB:8C:AB:71:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e69a311-ed99-4d08-bc96-aec2d6a1bfc0.cer sbgp-ipAddrBlock: critical IPv4: 162.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:54:98:9e:a8:71:36:89:a4:2b:8b:8d:69:62:41:6a:29:e9: 00:7d:64:2d:c6:54:f6:54:64:df:e7:26:67:94:ec:94:94:fb: 41:ed:ad:14:87:67:62:ac:07:b9:58:64:9a:db:be:7d:c9:35: 91:94:a3:c3:f1:0f:ee:d7:30:20:63:78:c2:65:7c:95:06:d5: d7:4c:29:86:04:a5:1e:60:27:67:d9:6e:3c:50:19:34:fb:57: be:c0:05:58:33:dc:31:3d:43:66:fb:03:36:16:1b:7d:21:6d: a4:99:27:57:2c:ff:37:f1:4c:d0:b8:79:b5:7f:ea:e8:cb:6d: c7:31:2d:0c:16:10:59:c6:85:ea:31:59:37:01:18:43:56:a9: fb:4b:dd:f0:4c:08:86:f3:85:ef:c7:45:91:a3:85:a1:46:97: c9:c5:3c:1d:ba:59:2f:fc:b7:8b:e7:d3:9c:57:f7:7f:23:d1: 05:c3:cf:e8:d6:6a:fa:8a:71:92:1d:7b:1c:ff:77:06:e8:80: 1b:4d:34:14:b5:ce:5c:17:53:a1:72:99:6d:6f:b6:ab:09:17: 51:68:8e:0c:c7:65:64:8f:d7:50:91:7f:fd:3e:43:de:e2:6d: f4:32:78:39:98:dd:82:af:23:52:ed:98:83:5e:66:14:b0:f0: d6:a2:5f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTfNZAsakDPVDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2OWEzMTEtZWQ5OS00ZDA4LWJjOTYtYWVjMmQ2YTFi ZmMwMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NDBiMzNiNTctODg5Zi00NGNhLTg0M2EtNzE4MmQwODZmYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHFojY/d8ETQmFfTaERMLChhOF7q5tqxaZWv 55FArmblaOs6vMHHSzgF7sNCdsaBxdbrs1pxIwPnNzk/cAs/Rg7+PvokINLipDgM yDnq/L1yqMnGXkDKsW7qdJG41bYVvVXGdBFz3fhIl1W/fJ3PTbV9zw+bY+kd9Pk7 oNb0jWTNzOBgTFWxJAKOMtxZ/ocDz8hWptwwTh3SBaK8qkwVXzfSwu+gBgz0kEr4 VVAJa6Lcr9tWWtlZO7SXPCCfxnHawxu2QUfp0klrkSdy3sbbXlPQBxtxJLXTnQrn 5K/GpUhiaT38EkVgP3jBI8hsPOVqUIlDqEMu3BaB1Iiwey16iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLk1YU0OeCB8pmzboywGI0zU8u9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZTY5 YTMxMS1lZDk5LTRkMDgtYmM5Ni1hZWMyZDZhMWJmYzAvZDY1YjU4NzktYmQ5MS0z MGYzLWFkYzYtYzM2MDRiYmE5YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGU2OWEzMTEtZWQ5OS00ZDA4LWJj OTYtYWVjMmQ2YTFiZmMwLzRlNjlhMzExLWVkOTktNGQwOC1iYzk2LWFlYzJkNmEx YmZjMC5jcmwwHwYDVR0jBBgwFoAUQda6hXV7WjTxNb4s87nEq4yrceUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZTY5YTMxMS1lZDk5LTRkMDgtYmM5Ni1hZWMy ZDZhMWJmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAongUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNUmJ6ocTaJpCuLjWliQWop6QB9ZC3GVPZUZN/nJmeU7JSU+0HtrRSH Z2KsB7lYZJrbvn3JNZGUo8PxD+7XMCBjeMJlfJUG1ddMKYYEpR5gJ2fZbjxQGTT7 V77ABVgz3DE9Q2b7AzYWG30hbaSZJ1cs/zfxTNC4ebV/6ujLbccxLQwWEFnGheox WTcBGENWqftL3fBMCIbzhe/HRZGjhaFGl8nFPB26WS/8t4vn05xX938j0QXDz+jW avqKcZIdexz/dwbogBtNNBS1zlwXU6FymW1vtqsJF1FojgzHZWSP11CRf/0+Q97i bfQyeDmY3YKvI1LtmINeZhSw8NaiX/k= -----END CERTIFICATE-----Generated at Mon Jun 30 00:34:03 2025 by rpki-client