$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa File: 3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa (raw, json) Hash identifier: qARhjW1CUOhGMheQtavWQw67md3c4En8omTlJSqECIs= Subject key identifier: AA:CF:32:5E:D8:D3:8F:AC:48:DA:85:2B:8E:77:43:5E:E5:83:71:CD Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F43285849C6D7ADD8CA25AA9820D1A100 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa Signing time: Wed 07 May 2025 18:18:27 +0000 ROA not before: Wed 07 May 2025 18:18:27 +0000 ROA not after: Tue 05 Aug 2025 18:18:27 +0000 asID: 36549 IP address blocks: 162.249.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:d7:ad:d8:ca:25:aa:98:20:d1:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: May 7 18:18:27 2025 GMT Not After : Aug 5 18:18:27 2025 GMT Subject: CN=2481af69-b983-4214-b33d-54c58c205921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:ad:c4:25:c9:9c:a3:fc:21:d0:49:3b:2d: 42:43:7d:97:de:25:3e:77:53:da:2b:58:e1:f1:a5: 62:36:98:fe:b3:8b:ba:c8:f6:ef:b8:1b:a4:01:01: 5d:31:a6:b9:c7:d4:98:2f:12:84:34:00:c0:7a:e2: b3:fc:75:5d:08:8f:9c:5e:8b:be:33:2d:eb:c4:48: 64:12:b8:2a:e4:f5:58:b4:8a:8e:64:1c:05:ad:18: f6:79:60:1a:00:ce:e3:00:3c:82:ea:fb:24:57:3a: ab:70:91:8b:af:df:1b:4b:0e:d2:bf:11:ba:c1:79: 2d:a1:40:84:98:e1:13:03:2a:b7:cf:24:ea:4a:4f: 8a:83:2c:3f:48:5c:fc:3a:23:e1:94:0a:e6:5c:e5: bd:63:c6:ab:43:9d:02:06:1c:6f:52:32:99:90:fd: 7e:01:6d:d7:cf:34:c6:c5:7b:21:16:99:98:04:5a: 97:f8:4b:a4:e3:20:d9:90:44:b7:77:6c:11:5a:3e: 75:af:16:97:67:28:37:87:a0:69:ab:77:a3:b9:a7: de:ec:31:25:ed:36:c8:da:a6:4c:90:73:8f:2a:51: f2:4a:38:97:b2:1c:2a:83:73:b9:7b:f9:a4:46:4f: df:c0:2e:5d:80:90:5f:a1:2c:7b:ed:e8:88:8f:22: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:32:5E:D8:D3:8F:AC:48:DA:85:2B:8E:77:43:5E:E5:83:71:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv4: 162.249.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:7c:a0:d3:f9:1e:e8:25:2b:e0:d3:86:ed:f5:5c:e1:1a:46: 6e:94:03:a3:ab:1b:d7:08:8e:c6:b3:49:20:af:0c:df:b3:72: 5d:7e:8c:ff:c7:ca:92:fb:07:67:3d:14:1c:fc:15:fb:3b:46: e6:3e:a5:1b:1f:2c:98:83:63:fb:08:38:4d:34:bf:c8:26:87: 1c:19:5b:b0:36:e4:8d:8b:ec:05:a3:68:9c:ac:6c:23:c0:57: b3:01:01:de:cb:63:2b:aa:5c:04:26:70:ba:a6:af:4b:78:79: 8c:03:a9:a1:d1:96:50:50:30:29:ac:eb:60:db:68:36:1f:e2: e5:70:2b:ec:66:ae:4f:fe:be:ca:91:e0:f1:e8:64:9b:4a:4f: 5a:70:9e:1b:b0:62:4f:02:e6:1c:8b:70:4a:be:5c:e2:48:3a: 0b:23:bf:8d:2e:f4:b8:bd:ca:09:5f:ac:9e:9a:3b:2c:b0:98: fd:52:81:ca:d4:bb:f3:09:20:08:74:15:a8:ea:29:d5:31:84: ea:7c:bd:5e:d4:4d:de:d2:18:a8:65:3d:fd:39:6e:c7:76:28: 50:e2:be:1e:33:fa:72:00:e5:81:5e:45:5d:1b:7a:15:c9:b3: f1:d7:fc:59:0a:3c:50:27:63:c2:d9:70:29:fd:6c:0f:a4:61: 38:df:ff:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnG163YyiWqmCDRoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDUwNzE4MTgyN1oXDTI1MDgwNTE4MTgyN1owLzEtMCsGA1UEAxMk MjQ4MWFmNjktYjk4My00MjE0LWIzM2QtNTRjNThjMjA1OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXWtxCXJnKP8IdBJOy1CQ32X3iU+d1PaK1jh 8aViNpj+s4u6yPbvuBukAQFdMaa5x9SYLxKENADAeuKz/HVdCI+cXou+My3rxEhk Ergq5PVYtIqOZBwFrRj2eWAaAM7jADyC6vskVzqrcJGLr98bSw7SvxG6wXktoUCE mOETAyq3zyTqSk+Kgyw/SFz8OiPhlArmXOW9Y8arQ50CBhxvUjKZkP1+AW3XzzTG xXshFpmYBFqX+Euk4yDZkES3d2wRWj51rxaXZyg3h6Bpq3ejuafe7DEl7TbI2qZM kHOPKlHySjiXshwqg3O5e/mkRk/fwC5dgJBfoSx77eiIjyJ33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrPMl7Y04+sSNqFK453Q17lg3HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvM2E0ODg4MzItNDJkNC0z YmM0LWE2MWYtYjdiZDhlMGFiM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM58oNP5HuglK+DThu31XOEaRm6UA6OrG9cIjsazSSCvDN+zcl1+jP/H ypL7B2c9FBz8Ffs7RuY+pRsfLJiDY/sIOE00v8gmhxwZW7A25I2L7AWjaJysbCPA V7MBAd7LYyuqXAQmcLqmr0t4eYwDqaHRllBQMCms62DbaDYf4uVwK+xmrk/+vsqR 4PHoZJtKT1pwnhuwYk8C5hyLcEq+XOJIOgsjv40u9Li9yglfrJ6aOyywmP1SgcrU u/MJIAh0FajqKdUxhOp8vV7UTd7SGKhlPf05bsd2KFDivh4z+nIA5YFeRV0behXJ s/HX/FkKPFAnY8LZcCn9bA+kYTjf/8Y= -----END CERTIFICATE-----Generated at Sat May 10 11:38:16 2025 by rpki-client