$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa File: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (raw, json) Hash identifier: wjHivPFiCLd0Pi6/RhpmHX3t6wi8pPueK9hSKNsz4CE= Subject key identifier: 4E:A0:3C:E0:61:E5:82:02:68:9F:2D:F1:A9:38:2D:99:F2:CD:FF:EA Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F432858490E16C2B36219DB3DA6D60440 Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 18986 IP address blocks: 202.130.217.0/24 maxlen: 24 203.21.47.0/24 maxlen: 24 203.21.104.0/24 maxlen: 24 203.28.168.0/24 maxlen: 24 203.30.143.0/24 maxlen: 24 203.30.211.0/24 maxlen: 24 203.34.15.0/24 maxlen: 24 203.57.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c2:b3:62:19:db:3d:a6:d6:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=316fb4c7-eaca-491c-841c-12449b91b7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:66:ad:a2:80:86:57:ab:c9:54:14:98:ec: 51:86:5b:b4:3c:12:11:f2:4c:28:ac:63:63:45:cd: 29:90:7a:4b:eb:a8:3b:47:16:c6:7c:2c:b4:ab:14: 0d:10:93:2a:64:60:50:7e:68:63:f6:b0:12:d6:75: 86:da:f0:3e:66:fc:7c:ba:2d:ba:5f:80:3c:71:19: 8b:4c:67:b2:7d:b5:6a:2a:ec:55:12:85:b6:bb:bb: 35:30:6d:29:a0:30:4b:1f:da:e5:d5:da:d5:33:b4: ae:20:30:c5:b7:a7:6e:c3:33:19:53:5d:25:23:6d: 3b:af:b2:21:21:13:73:41:76:ea:00:0b:34:75:a5: 9d:70:ea:7d:06:00:cf:3c:0a:84:68:18:a3:71:7c: ae:f0:e5:cc:d3:b2:35:09:af:b3:d0:fd:ac:02:f2: fc:c5:bd:a1:25:60:d2:b3:31:c9:cf:84:9e:e1:ea: 44:95:72:b3:5f:05:2f:06:2a:5c:87:4e:9b:16:24: 54:6e:c7:ed:0c:13:fd:ac:8f:ca:57:32:cb:6e:31: e6:d8:3d:f3:4d:d8:2c:9c:37:2f:2c:dc:48:7a:39: f4:a5:e6:c2:9a:b0:b0:08:83:2d:8f:9f:d1:33:94: 6f:bd:80:80:f4:67:55:42:94:d2:8c:07:ef:aa:4b: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:3C:E0:61:E5:82:02:68:9F:2D:F1:A9:38:2D:99:F2:CD:FF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: 202.130.217.0/24 203.21.47.0/24 203.21.104.0/24 203.28.168.0/24 203.30.143.0/24 203.30.211.0/24 203.34.15.0/24 203.57.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6f:de:28:d6:ac:5d:42:c3:f9:9f:a0:4f:6c:73:81:19:fb: ae:fe:13:8b:9e:ff:63:b4:a5:4d:fe:ba:b3:af:ae:1e:93:da: c8:21:f0:0b:43:84:df:10:6d:79:66:7c:11:29:de:00:e5:50: a7:2e:d5:01:76:15:11:ed:f6:c0:f3:1c:8d:dc:3d:bf:bf:d7: 49:95:2d:e6:b6:9e:d9:13:b1:2b:e6:e0:f9:99:f0:47:20:08: 65:f8:5a:56:47:1f:34:4b:42:ae:20:ed:06:d8:17:ee:e2:f6: 0d:c1:28:fb:de:91:aa:ca:7d:f4:7d:e4:14:36:17:be:0d:b8: ac:f3:0d:72:76:81:e1:cd:ef:da:62:92:06:2a:58:08:b3:32: f5:1b:5b:3b:1a:70:c9:ec:60:4a:b8:36:8a:2a:c5:26:a1:34: b1:c6:93:bd:18:0a:be:1f:25:84:06:74:c2:03:8d:3a:a9:07: 52:5d:1a:c1:f0:ea:2d:e4:6f:7c:99:22:21:a9:67:a0:38:05: 91:53:de:03:ea:0d:4e:63:44:04:40:97:d0:b1:6c:b0:a2:34: 74:bf:78:46:1a:1a:9a:ae:d8:e6:0c:6c:a8:b0:f1:5e:a3:6b: c9:ba:71:02:57:41:1f:a3:67:8e:5f:b4:3c:8e:d7:ad:b0:24: 58:c1:05:80 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEkOFsKzYhnbPabWBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MzE2ZmI0YzctZWFjYS00OTFjLTg0MWMtMTI0NDliOTFiN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcNmraKAhleryVQUmOxRhlu0PBIR8kworGNj Rc0pkHpL66g7RxbGfCy0qxQNEJMqZGBQfmhj9rAS1nWG2vA+Zvx8ui26X4A8cRmL TGeyfbVqKuxVEoW2u7s1MG0poDBLH9rl1drVM7SuIDDFt6duwzMZU10lI207r7Ih IRNzQXbqAAs0daWdcOp9BgDPPAqEaBijcXyu8OXM07I1Ca+z0P2sAvL8xb2hJWDS szHJz4Se4epElXKzXwUvBipch06bFiRUbsftDBP9rI/KVzLLbjHm2D3zTdgsnDcv LNxIejn0pebCmrCwCIMtj5/RM5RvvYCA9GdVQpTSjAfvqkti6wIDAQABo4IDfzCC A3swHQYDVR0OBBYEFE6gPOBh5YICaJ8t8ak4LZnyzf/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvYzk4YmNjN2YtMzNhOS0z NjA5LTg0ZjEtMjE2Y2NlM2VhNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAyoLZAwQA yxUvAwQAyxVoAwQAyxyoAwQAyx6PAwQAyx7TAwQAyyIPAwQAyzluMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGVv3ijWrF1Cw/mfoE9sc4EZ+67+E4ue/2O0pU3+urOvrh6T2sgh8AtDhN8QbXlm fBEp3gDlUKcu1QF2FRHt9sDzHI3cPb+/10mVLea2ntkTsSvm4PmZ8EcgCGX4WlZH HzRLQq4g7QbYF+7i9g3BKPvekarKffR95BQ2F74NuKzzDXJ2geHN79pikgYqWAiz MvUbWzsacMnsYEq4NooqxSahNLHGk70YCr4fJYQGdMIDjTqpB1JdGsHw6i3kb3yZ IiGpZ6A4BZFT3gPqDU5jRARAl9CxbLCiNHS/eEYaGpqu2OYMbKiw8V6ja8m6cQJX QR+jZ45ftDyO162wJFjBBYA= -----END CERTIFICATE-----Generated at Mon May 12 10:47:35 2025 by rpki-client