$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa File: bd227794-03b0-3e1a-98e0-833817b1a3dc.roa (raw, json) Hash identifier: Xb86Hx1Ubtcq+JrG3Yd0ZAUSpRE8oUoF4WnJ1GkA4bI= Subject key identifier: 20:7D:50:B1:3D:77:3F:FE:7D:16:61:F9:05:79:02:50:5D:B8:0C:B3 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F432858496CE44AFC214BCEB255C52000 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 53768 IP address blocks: 162.134.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4a:fc:21:4b:ce:b2:55:c5:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=5b97cad4-2381-477b-80f4-8dc610d88a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:03:f3:4e:03:c3:ad:13:a3:e0:9f:d8:cf: c4:d9:01:76:37:e8:04:8e:09:08:a9:22:8d:85:3a: 74:fa:6d:c7:f8:23:a1:1e:5b:b2:3a:ec:88:2d:70: 94:fc:8c:31:58:6a:ec:5c:2d:51:5c:bf:26:e2:48: bd:c1:61:d1:a0:8b:b6:77:e1:c1:51:1d:ca:cf:0c: f8:60:7d:9c:ca:ec:3b:cf:6d:33:d5:44:3b:35:93: cc:a6:8e:fa:79:37:0a:a1:4e:bb:e0:2e:51:af:70: c3:18:06:32:24:70:87:14:7b:54:09:8e:05:9b:c9: dc:db:3c:9f:df:40:e2:57:68:d8:96:38:c2:30:98: 42:bf:e6:8a:71:f1:f7:49:8a:4b:73:bc:86:3b:2d: fb:c2:b3:5f:d4:d6:07:d0:94:39:79:a5:c7:33:30: d0:68:b0:5f:16:f0:ff:59:91:eb:f3:a6:86:e7:83: 0c:5a:e1:7b:1c:80:b3:b8:29:95:02:b9:5d:41:66: 35:b2:10:72:63:af:b2:61:17:9b:be:77:d6:2d:2e: 82:d5:a8:c5:a6:bb:eb:8b:a6:86:60:f3:f0:a2:03: c3:3f:bc:bd:25:e7:44:ea:01:b7:fd:66:3e:c2:46: e1:b1:a8:3e:3e:b2:d5:08:fe:ca:03:83:46:f0:7a: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7D:50:B1:3D:77:3F:FE:7D:16:61:F9:05:79:02:50:5D:B8:0C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2b:92:3e:cd:0f:f7:89:12:ef:7e:24:c9:07:b5:82:89:8c: 30:35:6a:a6:fd:ff:d3:11:36:5e:bc:7c:84:b6:31:15:21:d7: 53:b9:9a:e5:d1:17:42:7c:63:e7:ad:04:4f:78:16:17:d6:f2: c3:39:a7:bd:ea:04:2e:2b:f8:c1:ca:90:08:7b:41:6b:f6:43: 81:8c:98:d6:10:b9:36:e1:49:b9:96:64:d4:82:03:ae:e0:d6: be:82:d0:f3:24:9c:29:65:d4:1b:80:52:96:60:27:27:cb:68: cb:f1:6d:7e:c7:06:49:6d:50:0f:89:a1:8e:dd:80:ef:39:eb: 2a:1e:6f:5a:fc:07:80:91:85:1b:c7:4d:ad:fc:eb:18:c5:b2: 84:70:ed:db:71:62:15:19:73:bb:90:15:7a:49:4f:55:7d:4b: 44:40:41:64:ee:26:5c:bf:35:15:87:f0:f9:4a:ef:00:d9:80: 86:0c:33:17:44:bf:be:b8:f1:5e:10:f8:d5:3c:a1:8e:e9:4f: 9f:3c:0b:db:40:fa:7c:9d:3e:1f:b9:07:9b:ab:2d:66:eb:21: 36:19:c9:da:8e:71:36:7e:7b:70:bf:3a:8f:dc:ce:bc:9e:e0: fc:30:d6:21:cf:f6:bd:8b:d3:4b:de:72:5d:99:7f:b6:83:f6: f0:2f:8e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Er8IUvOslXFIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NWI5N2NhZDQtMjM4MS00NzdiLTgwZjQtOGRjNjEwZDg4YTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fsD804Dw60To+Cf2M/E2QF2N+gEjgkIqSKN hTp0+m3H+COhHluyOuyILXCU/IwxWGrsXC1RXL8m4ki9wWHRoIu2d+HBUR3Kzwz4 YH2cyuw7z20z1UQ7NZPMpo76eTcKoU674C5Rr3DDGAYyJHCHFHtUCY4Fm8nc2zyf 30DiV2jYljjCMJhCv+aKcfH3SYpLc7yGOy37wrNf1NYH0JQ5eaXHMzDQaLBfFvD/ WZHr86aG54MMWuF7HICzuCmVArldQWY1shByY6+yYRebvnfWLS6C1ajFprvri6aG YPPwogPDP7y9JedE6gG3/WY+wkbhsag+PrLVCP7KA4NG8HomQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB9ULE9dz/+fRZh+QV5AlBduAyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvYmQyMjc3OTQtMDNiMC0z ZTFhLTk4ZTAtODMzODE3YjFhM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEooYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABorkj7ND/eJEu9+JMkHtYKJjDA1aqb9/9MRNl68fIS2MRUh11O5muXR F0J8Y+etBE94FhfW8sM5p73qBC4r+MHKkAh7QWv2Q4GMmNYQuTbhSbmWZNSCA67g 1r6C0PMknCll1BuAUpZgJyfLaMvxbX7HBkltUA+JoY7dgO856yoeb1r8B4CRhRvH Ta386xjFsoRw7dtxYhUZc7uQFXpJT1V9S0RAQWTuJly/NRWH8PlK7wDZgIYMMxdE v7648V4Q+NU8oY7pT588C9tA+nydPh+5B5urLWbrITYZydqOcTZ+e3C/Oo/czrye 4Pww1iHP9r2L00vecl2Zf7aD9vAvjiE= -----END CERTIFICATE-----Generated at Sat May 10 07:33:30 2025 by rpki-client