$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa File: 25b57fbd-9358-3be7-a98f-a532b62c0739.roa (raw, json) Hash identifier: 0fzPFBPMV55nz/axmM/CEwPkZDVCUPLkx3LDCzdOe30= Subject key identifier: 69:A8:D6:AB:C5:C1:9A:0B:BF:C3:C3:A1:2A:B5:B4:05:6D:F0:1A:69 Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18 Certificate serial: 010D0C9F432858494CC937BA51D8B54B8F0B7456 Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11766 IP address blocks: 162.211.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:37:ba:51:d8:b5:4b:8f:0b:74:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=8e5f015d-554c-472a-a2f9-3aa0d71b8835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:da:f6:79:5e:3d:73:c8:c8:82:af:5c:26: f1:fe:06:68:e4:f0:e2:dc:43:7c:c7:7e:fa:9d:b6: 57:f9:83:a8:07:83:e6:8b:89:ff:a5:03:4a:db:06: 19:11:05:95:30:75:76:16:14:78:6e:70:78:47:0a: 22:63:f4:b7:6e:c6:a0:15:ed:18:ce:ed:35:4a:4a: 18:47:9f:64:c3:b5:90:ea:8f:42:c1:d2:72:66:81: ff:c4:52:95:85:0e:bb:a5:7c:5e:ac:62:7f:d7:87: 4c:41:fe:7f:16:2c:7b:ab:ab:3f:b7:cb:fa:42:6a: ab:c9:a8:10:da:68:3d:11:de:15:8f:54:ec:b9:6f: 66:4d:53:17:98:33:3f:2f:e5:d9:65:46:3b:d0:ff: 68:45:f8:10:b3:b1:f2:00:dd:dd:42:d5:3f:1a:fe: 61:83:1a:d7:a2:c0:10:72:96:46:17:61:bd:90:fe: ff:82:3a:4a:01:21:51:7d:6b:14:24:70:e5:3d:dd: 00:a5:3e:46:ba:a1:42:4a:d8:52:77:a2:c4:04:83: 7c:83:40:39:48:e6:d6:37:ca:55:b2:2a:c7:19:44: d9:51:e3:be:75:74:7a:95:02:4e:4f:22:b2:18:6b: 57:4e:95:44:6e:1b:48:f3:5f:c3:87:df:9a:46:b4: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:D6:AB:C5:C1:9A:0B:BF:C3:C3:A1:2A:B5:B4:05:6D:F0:1A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl X509v3 Authority Key Identifier: keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer sbgp-ipAddrBlock: critical IPv4: 162.211.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:72:75:8f:a9:53:f5:a7:69:49:1d:4e:a0:7e:78:65:1e:51: 56:b5:93:99:ad:91:4c:98:6f:d9:74:91:b0:83:82:29:14:09: d2:32:be:6b:86:ca:19:22:94:ab:bd:db:86:58:64:97:eb:da: 3c:f0:8e:09:07:f4:93:52:9e:5f:ac:d5:17:01:b4:79:7f:d9: 7c:90:d0:8e:de:3c:85:2e:c5:42:e7:8c:eb:76:3a:f3:74:73: d8:8a:8d:ba:68:85:b2:ad:e7:a5:53:48:46:00:33:05:17:01: 9b:fa:b6:d9:48:19:f6:fc:d2:c7:8b:8f:26:a9:e5:7e:78:84: 99:f9:19:54:b6:b0:3d:0f:33:29:c3:9d:7c:b1:16:24:bb:c0: 6b:a1:d2:00:62:2a:bf:48:b0:31:27:c9:c2:31:a4:6c:d1:06: 65:f9:5b:42:ad:89:7a:b6:7a:cf:27:8c:58:cf:72:f6:32:63: 3c:49:64:cc:35:44:e8:e1:70:7e:2b:b3:4f:77:3e:29:b9:e9: bc:c1:32:5c:ea:00:3e:df:d7:6e:0a:90:08:48:6f:84:74:02: 6c:49:5c:f1:5d:93:c1:71:1d:67:3d:1b:4b:6b:36:53:03:ae: 04:a7:22:a0:f3:a2:cd:75:e0:83:ea:dd:25:b0:b3:6b:fe:e9: 63:2d:6c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTe6Udi1S48LdFYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0Y2E4NDctOTAwZS00NGJhLTg0ZTQtNDYwYmYyZjVk ZjE4MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OGU1ZjAxNWQtNTU0Yy00NzJhLWEyZjktM2FhMGQ3MWI4ODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolDa9nlePXPIyIKvXCbx/gZo5PDi3EN8x376 nbZX+YOoB4Pmi4n/pQNK2wYZEQWVMHV2FhR4bnB4RwoiY/S3bsagFe0Yzu01SkoY R59kw7WQ6o9CwdJyZoH/xFKVhQ67pXxerGJ/14dMQf5/Fix7q6s/t8v6QmqryagQ 2mg9Ed4Vj1TsuW9mTVMXmDM/L+XZZUY70P9oRfgQs7HyAN3dQtU/Gv5hgxrXosAQ cpZGF2G9kP7/gjpKASFRfWsUJHDlPd0ApT5GuqFCSthSd6LEBIN8g0A5SObWN8pV sirHGUTZUeO+dXR6lQJOTyKyGGtXTpVEbhtI81/Dh9+aRrTSuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmo1qvFwZoLv8PDoSq1tAVt8BppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82YjRj YTg0Ny05MDBlLTQ0YmEtODRlNC00NjBiZjJmNWRmMTgvMjViNTdmYmQtOTM1OC0z YmU3LWE5OGYtYTUzMmI2MmMwNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmI0Y2E4NDctOTAwZS00NGJhLTg0 ZTQtNDYwYmYyZjVkZjE4LzZiNGNhODQ3LTkwMGUtNDRiYS04NGU0LTQ2MGJmMmY1 ZGYxOC5jcmwwHwYDVR0jBBgwFoAUxVimf8BhwurNMWkdOo1bPyZ04SEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82YjRjYTg0Ny05MDBlLTQ0YmEtODRlNC00NjBi ZjJmNWRmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1ydY+pU/WnaUkdTqB+eGUeUVa1k5mtkUyYb9l0kbCDgikUCdIyvmuG yhkilKu924ZYZJfr2jzwjgkH9JNSnl+s1RcBtHl/2XyQ0I7ePIUuxULnjOt2OvN0 c9iKjbpohbKt56VTSEYAMwUXAZv6ttlIGfb80seLjyap5X54hJn5GVS2sD0PMynD nXyxFiS7wGuh0gBiKr9IsDEnycIxpGzRBmX5W0KtiXq2es8njFjPcvYyYzxJZMw1 ROjhcH4rs093Pim56bzBMlzqAD7f124KkAhIb4R0AmxJXPFdk8FxHWc9G0trNlMD rgSnIqDzos114IPq3SWws2v+6WMtbBo= -----END CERTIFICATE-----Generated at Sat May 10 12:23:01 2025 by rpki-client