$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa File: b91cefc2-5e14-330e-b561-e34c119b1bef.roa (raw, json) Hash identifier: qRACVrxf1uath8SrHlkooY5TT9ifxkBo5mWNhqlMxZU= Subject key identifier: D4:7B:D6:46:DA:6B:FD:42:30:81:63:26:1C:6C:F8:BA:D5:58:67:EC Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849AA4F6877BB68E9AD64777780 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16433 IP address blocks: 162.217.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:68:77:bb:68:e9:ad:64:77:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=25c0b5c9-167c-4d68-8e2f-c77f118d8120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:3e:a9:c8:c1:76:c9:e6:c3:6c:5d:fb:d1: bb:79:e3:f4:b6:cc:37:57:ff:92:ac:b5:da:09:bd: a6:06:3f:f2:a1:c8:b3:a0:19:3e:00:56:65:31:7f: 99:bb:1e:02:99:a5:d9:c4:a8:95:7e:a6:80:4f:3f: 42:1f:40:94:aa:71:09:de:4a:c3:dd:a0:fd:b5:e9: 97:f9:4a:c4:25:e6:60:40:b3:0d:7a:e1:ea:0d:91: 46:60:c3:44:d4:b8:80:d2:d4:8c:11:f7:db:cc:c2: 04:26:a9:14:23:72:2a:7e:ea:eb:c0:1f:5b:1a:88: c7:0c:89:f2:53:7c:42:3d:33:1c:80:d4:24:b0:af: 12:6d:ae:ec:c5:e7:25:1d:41:9e:ef:d7:49:b6:9f: d5:18:7f:89:ec:6b:94:b3:fc:76:93:0d:88:33:d6: 60:7c:03:e1:6b:b2:86:e1:18:40:e1:32:84:d0:56: b8:a6:b1:17:35:c7:6c:cc:d8:fb:bb:b6:fa:0f:fd: 2a:fb:7a:2d:c8:6e:c9:39:12:23:a6:a2:b8:91:b3: 84:7f:78:a1:e6:0b:df:64:cb:d6:21:9f:78:a3:b5: 33:d4:21:43:bc:ff:19:21:d4:4e:38:b2:ee:bd:74: ce:36:af:7a:9a:89:4b:31:9e:32:34:4f:1f:e6:c8: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7B:D6:46:DA:6B:FD:42:30:81:63:26:1C:6C:F8:BA:D5:58:67:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.217.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:69:52:05:fa:af:fc:93:59:82:44:3b:50:4b:04:75:bb:72: f4:ad:e3:86:c4:87:9b:8a:62:3e:45:ca:2c:fc:bd:04:d8:75: b2:04:b6:c8:14:4f:dc:c9:76:c0:7d:0c:35:ef:17:a5:09:c9: 68:e7:97:5c:2d:f8:c0:1f:8b:53:df:5e:29:b9:17:d8:fb:5a: 2e:db:16:f4:16:d6:70:56:2d:ff:22:ae:ea:47:46:52:28:d4: 7c:ae:cd:21:13:51:ff:17:b3:7f:32:ad:6b:5b:51:8f:19:cf: c6:48:44:4d:25:29:ac:98:7b:f8:da:4b:32:3d:cc:2b:58:7f: 99:e2:25:53:55:96:ae:35:4f:57:58:ad:31:4e:4d:e8:74:0b: 01:b8:d5:60:bd:c3:f3:c2:84:84:6d:c7:aa:c9:6d:18:45:20: d0:0e:61:f1:47:c7:e6:e2:c4:b9:de:7c:1c:c8:39:92:4f:24: 8b:30:44:e8:fc:cc:8e:ab:3a:07:5f:b4:64:68:c4:bc:ad:79: 31:4b:61:ac:8a:d1:49:52:09:40:22:85:74:45:e9:a2:51:f6: 77:49:48:9c:75:02:c2:9c:92:a6:c6:5e:86:a4:66:c7:98:0b: a5:90:56:34:29:a3:cb:6c:b0:96:6c:24:37:57:3c:db:27:45: 36:bd:4d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2h3u2jprWR3d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MjVjMGI1YzktMTY3Yy00ZDY4LThlMmYtYzc3ZjExOGQ4MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cI+qcjBdsnmw2xd+9G7eeP0tsw3V/+SrLXa Cb2mBj/yocizoBk+AFZlMX+Zux4CmaXZxKiVfqaATz9CH0CUqnEJ3krD3aD9temX +UrEJeZgQLMNeuHqDZFGYMNE1LiA0tSMEffbzMIEJqkUI3IqfurrwB9bGojHDIny U3xCPTMcgNQksK8Sba7sxeclHUGe79dJtp/VGH+J7GuUs/x2kw2IM9ZgfAPha7KG 4RhA4TKE0Fa4prEXNcdszNj7u7b6D/0q+3otyG7JORIjpqK4kbOEf3ih5gvfZMvW IZ94o7Uz1CFDvP8ZIdROOLLuvXTONq96molLMZ4yNE8f5si+XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR71kbaa/1CMIFjJhxs+LrVWGfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjkxY2VmYzItNWUxNC0z MzBlLWI1NjEtZTM0YzExOWIxYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdpUgX6r/yTWYJEO1BLBHW7cvSt44bEh5uKYj5Fyiz8vQTYdbIEtsgU T9zJdsB9DDXvF6UJyWjnl1wt+MAfi1PfXim5F9j7Wi7bFvQW1nBWLf8irupHRlIo 1HyuzSETUf8Xs38yrWtbUY8Zz8ZIRE0lKayYe/jaSzI9zCtYf5niJVNVlq41T1dY rTFOTeh0CwG41WC9w/PChIRtx6rJbRhFINAOYfFHx+bixLnefBzIOZJPJIswROj8 zI6rOgdftGRoxLyteTFLYayK0UlSCUAihXRF6aJR9ndJSJx1AsKckqbGXoakZseY C6WQVjQpo8tssJZsJDdXPNsnRTa9TQw= -----END CERTIFICATE-----Generated at Thu May 8 05:28:42 2025 by rpki-client