$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa File: cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa (raw, json) Hash identifier: 2ssOOV+oNNuzuGHo7xgzxtYqK0wvyMwRxgNVJwH8AcM= Subject key identifier: 75:B0:2D:E0:72:CE:50:3D:A8:09:96:96:A6:72:2B:B0:73:62:D7:B6 Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F43285849A3547DC87F531097E6822780 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 26666 IP address blocks: 162.220.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:7d:c8:7f:53:10:97:e6:82:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=71e5edb2-c4c9-4332-a59d-f7a2f7079446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:a1:ae:da:c5:db:86:f5:af:f2:ad:c1:67: 9e:f1:8b:c6:34:ee:aa:43:2a:8c:00:12:62:00:96: 08:5a:66:cd:8c:4d:7f:33:51:fd:fc:b2:ca:da:59: f8:22:2a:27:31:6a:b1:f2:2c:e3:3f:03:76:00:b1: d1:0c:b4:97:89:51:75:5d:df:63:01:ac:9a:47:60: 80:d6:4d:28:96:a9:6e:62:a1:d3:b6:b4:7a:cc:67: 33:6c:1a:ab:d5:ac:85:d3:95:2c:63:4a:2b:f7:32: 4e:b4:4d:ce:d7:00:20:b7:ed:4a:a6:3d:76:35:a8: 9b:3e:80:0d:66:df:74:04:d7:03:3e:60:2b:00:54: 12:04:ab:66:09:79:a4:b6:5b:7b:e5:26:26:02:64: be:12:d9:ca:21:0c:39:72:e0:6d:26:d8:c4:fc:02: 16:ae:ae:00:4e:6d:cc:41:fc:c6:dc:03:60:26:2e: 22:e0:ff:2b:85:d0:42:50:40:49:0f:47:64:42:a5: 7f:6d:92:8e:cf:24:cf:1b:73:09:0b:5c:0a:45:8c: de:47:53:51:e1:8a:d3:16:71:bf:6e:41:c4:22:88: e7:99:2e:4a:54:25:c4:aa:94:02:e2:75:75:6b:f2: fd:47:3d:7e:6d:7a:30:4a:e8:3c:3d:82:fa:5f:2c: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B0:2D:E0:72:CE:50:3D:A8:09:96:96:A6:72:2B:B0:73:62:D7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 162.220.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:59:13:bb:dd:9b:ff:4e:6e:7e:7d:22:65:40:da:b6:3a:48: a3:b6:79:f0:f7:da:17:fc:0e:ec:36:a0:7b:e9:8b:a3:a9:4d: 1e:ac:bc:5a:20:92:97:5a:e8:92:5e:60:a0:62:ea:de:80:21: 14:97:dc:19:66:d2:af:d0:ad:5a:73:0e:0a:3b:bb:7a:79:8a: 52:b1:a8:92:e6:7b:22:8a:f2:f3:d3:6d:20:b6:a5:85:40:53: 35:87:a3:19:2d:95:5c:d9:42:ae:57:21:e2:67:6e:13:d2:48: 14:d2:4e:fc:f3:60:d4:24:fd:b6:47:65:55:27:fe:25:c5:8b: 5b:c7:cc:2d:75:a7:7c:3a:56:e7:77:07:11:b3:a3:9f:21:62: b7:2a:e5:da:dc:7f:70:19:95:b3:80:dc:ff:bd:3d:62:01:46: 9d:23:c2:42:34:40:39:f6:29:07:63:a4:e3:d5:56:d0:a2:61: 3f:5c:b2:fd:03:d3:aa:a5:c7:ac:23:b8:df:e0:61:f6:d6:bb: 0d:35:14:9f:e1:8d:3f:cf:5d:82:c7:5a:15:a5:8b:bd:39:a8: 98:45:14:2d:c1:fe:e5:d6:6e:c0:54:57:6d:52:44:78:81:da: b1:f5:c5:6f:72:fa:ff:81:ae:c7:ef:57:bf:89:0a:4a:c3:c4: e6:ce:98:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVH3If1MQl+aCJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk NzFlNWVkYjItYzRjOS00MzMyLWE1OWQtZjdhMmY3MDc5NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutmhrtrF24b1r/KtwWee8YvGNO6qQyqMABJi AJYIWmbNjE1/M1H9/LLK2ln4IionMWqx8izjPwN2ALHRDLSXiVF1Xd9jAayaR2CA 1k0olqluYqHTtrR6zGczbBqr1ayF05UsY0or9zJOtE3O1wAgt+1Kpj12NaibPoAN Zt90BNcDPmArAFQSBKtmCXmktlt75SYmAmS+EtnKIQw5cuBtJtjE/AIWrq4ATm3M QfzG3ANgJi4i4P8rhdBCUEBJD0dkQqV/bZKOzyTPG3MJC1wKRYzeR1NR4YrTFnG/ bkHEIojnmS5KVCXEqpQC4nV1a/L9Rz1+bXowSug8PYL6XywFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWwLeByzlA9qAmWlqZyK7BzYte2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvY2ZjYjRkOTEtZmNlOC0z OWJjLWFkODYtOWI4MGJlMjliODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFZE7vdm/9Obn59ImVA2rY6SKO2efD32hf8Duw2oHvpi6OpTR6svFog kpda6JJeYKBi6t6AIRSX3Blm0q/QrVpzDgo7u3p5ilKxqJLmeyKK8vPTbSC2pYVA UzWHoxktlVzZQq5XIeJnbhPSSBTSTvzzYNQk/bZHZVUn/iXFi1vHzC11p3w6Vud3 BxGzo58hYrcq5drcf3AZlbOA3P+9PWIBRp0jwkI0QDn2KQdjpOPVVtCiYT9csv0D 06qlx6wjuN/gYfbWuw01FJ/hjT/PXYLHWhWli705qJhFFC3B/uXWbsBUV21SRHiB 2rH1xW9y+v+BrsfvV7+JCkrDxObOmJY= -----END CERTIFICATE-----Generated at Tue May 6 03:15:16 2025 by rpki-client