$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa File: 791354d3-b69a-3f80-9895-25a56bac7468.roa (raw, json) Hash identifier: BW08fwp9bHVB+U59GzqzibmTvD4DFguiuVNQV4tGMJc= Subject key identifier: 7E:8E:DB:9A:B0:5D:58:D9:F6:8C:3E:F6:9B:EF:F6:EC:B6:B6:D8:CB Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858494E2EB2584773F88A0850A1A0 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 399091 IP address blocks: 162.218.8.0/22 maxlen: 22 198.22.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b2:58:47:73:f8:8a:08:50:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=4df982da-3c49-4159-b5f5-78aa7be4959f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:88:ac:7f:cd:0a:ce:7e:b5:44:b4:80:63: 4f:95:43:1f:f0:d1:f5:83:a7:25:e4:8c:87:02:0f: 09:4c:3f:b8:16:7b:b2:28:04:e8:50:d2:11:50:a6: 4b:26:c1:ee:e9:7e:62:59:3b:29:e2:d0:d3:3f:d9: 0d:51:17:51:51:ef:6b:a2:3c:4b:bd:38:da:52:8f: 9c:ba:da:b5:b5:a1:38:f3:35:29:70:17:b5:fa:06: 13:1e:49:14:9f:ca:e6:b8:3c:21:99:ef:84:4f:f4: 64:9d:69:f0:1f:df:04:0e:6a:d1:0c:36:44:e3:d4: 44:d1:0e:b3:09:66:ef:66:d6:b8:90:36:cb:d3:fd: 7e:b7:43:0e:2f:5d:2e:36:07:5b:ae:4f:ca:d2:29: 38:35:b0:da:9d:2f:14:c8:47:e5:d3:9c:a9:21:b3: 30:b8:16:cb:27:e9:df:9b:6a:8f:63:00:f6:c1:5b: 5e:24:d1:a9:55:84:29:2e:53:5f:2f:8e:e7:3f:f1: a5:9c:c0:26:cc:bd:66:eb:2a:77:3d:2d:4b:32:9f: f2:8d:4a:45:3c:50:62:4d:a0:c4:12:ea:52:d5:72: 59:c4:22:d1:38:5f:19:c5:12:11:37:a2:63:96:9d: c5:f8:23:3c:e1:32:12:fb:ca:03:cc:db:7b:06:a8: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8E:DB:9A:B0:5D:58:D9:F6:8C:3E:F6:9B:EF:F6:EC:B6:B6:D8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 162.218.8.0/22 198.22.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b6:48:5b:7b:ba:f1:a7:54:49:15:d6:b8:ac:71:94:20:8e: ad:b4:af:6e:e0:ae:0a:45:d0:09:0d:a6:eb:63:48:c4:8a:46: c3:29:6a:ba:39:fb:7b:26:f2:3c:d2:c4:2e:05:2e:24:dd:cf: 85:0d:ce:29:ff:f3:65:98:7c:c8:a7:bd:e3:25:4b:1b:d0:18: c1:95:6b:d1:b2:a0:1a:02:d1:92:66:9f:e3:6c:1b:95:6b:f0: 97:d0:a7:94:8a:53:cd:65:85:58:24:27:00:79:b5:54:bb:9b: f3:48:de:58:4d:fa:71:51:10:f5:9e:cf:21:1b:a0:9d:eb:c1: 6e:58:86:23:18:90:37:82:46:79:a3:d4:13:57:98:dc:7f:0a: 85:c7:49:87:7e:79:fe:d9:cc:75:75:c4:50:e6:d3:c7:08:21: 62:8c:8a:aa:8e:ae:3f:53:ea:ba:e1:46:b3:db:0d:ae:6a:55: 61:0e:b0:53:ba:cd:bd:45:82:1a:99:c4:3d:a3:11:52:dd:bd: ec:1b:4d:56:3d:c0:42:2e:4c:5e:ab:f5:65:eb:9f:1e:28:e5: 9a:e5:5d:76:dd:b5:dc:b8:26:c8:32:e8:7c:04:e2:ec:aa:43: d3:aa:ab:3f:47:84:e9:0f:9c:e0:63:1a:ff:5e:aa:14:41:72: bb:05:9f:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElOLrJYR3P4ighQoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NGRmOTgyZGEtM2M0OS00MTU5LWI1ZjUtNzhhYTdiZTQ5NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCOIrH/NCs5+tUS0gGNPlUMf8NH1g6cl5IyH Ag8JTD+4FnuyKAToUNIRUKZLJsHu6X5iWTsp4tDTP9kNURdRUe9rojxLvTjaUo+c utq1taE48zUpcBe1+gYTHkkUn8rmuDwhme+ET/RknWnwH98EDmrRDDZE49RE0Q6z CWbvZta4kDbL0/1+t0MOL10uNgdbrk/K0ik4NbDanS8UyEfl05ypIbMwuBbLJ+nf m2qPYwD2wVteJNGpVYQpLlNfL47nP/GlnMAmzL1m6yp3PS1LMp/yjUpFPFBiTaDE EupS1XJZxCLROF8ZxRIRN6Jjlp3F+CM84TIS+8oDzNt7BqidOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH6O25qwXVjZ9ow+9pvv9uy2ttjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvNzkxMzU0ZDMtYjY5YS0z ZjgwLTk4OTUtMjVhNTZiYWM3NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotoIAwQC xhbQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG62SFt7uvGnVEkV1riscZQgjq20r27grgpF0AkNputjSMSK RsMparo5+3sm8jzSxC4FLiTdz4UNzin/82WYfMinveMlSxvQGMGVa9GyoBoC0ZJm n+NsG5Vr8JfQp5SKU81lhVgkJwB5tVS7m/NI3lhN+nFREPWezyEboJ3rwW5YhiMY kDeCRnmj1BNXmNx/CoXHSYd+ef7ZzHV1xFDm08cIIWKMiqqOrj9T6rrhRrPbDa5q VWEOsFO6zb1FghqZxD2jEVLdvewbTVY9wEIuTF6r9WXrnx4o5ZrlXXbdtdy4Jsgy 6HwE4uyqQ9Oqqz9HhOkPnOBjGv9eqhRBcrsFn3c= -----END CERTIFICATE-----Generated at Sat May 10 20:43:04 2025 by rpki-client