$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa File: 0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa (raw, json) Hash identifier: mX+LuBgbZB9lVf5un19tfEvgBMt5W7dmpCFZNWtpHQA= Subject key identifier: 5A:BF:C4:D6:D5:BF:DF:DF:13:18:C9:66:59:64:A2:E1:86:0E:44:92 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584A3CE02E6F053B2F6C8B18DD80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 26548 IP address blocks: 162.249.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2e:6f:05:3b:2f:6c:8b:18:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=4c4bfd64-0825-4256-be47-e8241b1582b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:28:35:9a:6d:1e:7a:2f:8f:31:5d:1c:4a: 35:5f:99:0f:95:11:b8:bd:b3:53:2b:54:0c:32:bd: 5a:10:eb:23:be:26:80:dc:69:1e:f3:5d:2c:7d:91: 6a:d1:b2:16:51:1d:36:8e:5a:3e:04:1c:94:2c:69: cc:30:31:fb:68:96:37:e4:c3:cf:8c:4f:df:53:f8: 5a:be:3f:0b:36:ed:09:4e:d1:43:33:33:9c:4f:dd: 80:34:57:99:d6:8b:52:76:c0:a5:69:9e:ce:f9:0c: 54:89:16:ea:e4:3a:39:b6:76:bf:56:d1:e4:1e:1a: 8d:2d:b8:7c:a5:d8:81:50:13:6b:1d:03:75:f4:88: de:57:4e:86:bb:93:fb:97:9e:9f:15:23:92:15:5a: 6b:db:91:bd:e9:c9:1c:66:e1:57:10:3d:16:13:dc: 40:ad:a1:fe:a3:6c:47:82:6a:5e:bc:d6:90:e4:84: 4b:0e:9c:ec:81:f5:49:24:3b:8f:a1:37:27:ae:61: 8b:d9:b3:67:7c:73:b8:46:0f:10:06:28:4d:24:57: ad:57:6e:d9:e4:dc:ed:f4:83:0f:84:61:68:a1:ee: a6:b6:5b:00:1c:c1:21:0d:1d:b9:03:63:6b:74:d5: 5c:45:c6:ae:02:05:64:01:c2:10:a2:87:0c:bd:7f: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:C4:D6:D5:BF:DF:DF:13:18:C9:66:59:64:A2:E1:86:0E:44:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0345be5a-20c2-35c0-9ab8-a8c22ce92237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 162.249.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:97:02:96:98:7e:8c:0c:cd:80:22:ca:34:15:76:86:eb:54: 44:eb:00:8c:a1:d7:b0:d5:09:7d:5e:97:49:66:07:2b:86:24: 74:49:cf:c9:6b:31:10:f6:e8:05:12:be:50:f3:74:ef:69:88: 5c:87:1b:8d:fa:d2:21:ae:d8:5e:15:25:a6:df:e5:21:97:07: 12:87:30:9a:75:d4:ca:8b:95:66:24:b9:e6:a0:84:81:e3:e0: 2f:82:e3:eb:fc:60:ba:35:5b:9e:4d:78:3f:15:8b:7a:6f:84: 56:04:d1:d1:f2:65:23:b6:2b:a1:d7:93:55:cb:5f:3d:cb:f0: 7c:70:69:a3:cd:28:fb:19:6a:8d:b6:c7:7e:65:64:ca:90:e6: 1d:ae:ae:be:8f:50:6c:90:95:b6:9d:37:da:41:d1:3e:a6:1c: 35:e4:45:3d:a9:36:b9:6b:ad:f7:03:d0:98:8f:6a:20:a6:19: 68:4f:59:40:5a:8a:90:b1:68:ae:28:d3:50:8d:3e:a8:79:9e: b2:05:fa:29:53:cb:ce:5c:25:a9:82:f2:d5:0a:6f:53:27:e4: eb:36:13:18:76:69:b9:31:e5:4c:39:7d:f1:98:8f:6a:8b:2e: 0a:e8:0c:f4:a2:4c:ec:99:97:10:ee:51:b9:a1:b0:69:fa:09: 4e:81:13:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84C5vBTsvbIsY3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NGM0YmZkNjQtMDgyNS00MjU2LWJlNDctZTgyNDFiMTU4MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi8oNZptHnovjzFdHEo1X5kPlRG4vbNTK1QM Mr1aEOsjviaA3Gke810sfZFq0bIWUR02jlo+BByULGnMMDH7aJY35MPPjE/fU/ha vj8LNu0JTtFDMzOcT92ANFeZ1otSdsClaZ7O+QxUiRbq5Do5tna/VtHkHhqNLbh8 pdiBUBNrHQN19IjeV06Gu5P7l56fFSOSFVpr25G96ckcZuFXED0WE9xAraH+o2xH gmpevNaQ5IRLDpzsgfVJJDuPoTcnrmGL2bNnfHO4Rg8QBihNJFetV27Z5Nzt9IMP hGFooe6mtlsAHMEhDR25A2NrdNVcRcauAgVkAcIQoocMvX/DmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq/xNbVv9/fExjJZllkouGGDkSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvMDM0NWJlNWEtMjBjMi0z NWMwLTlhYjgtYThjMjJjZTkyMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeXApaYfowMzYAiyjQVdobrVETrAIyh17DVCX1el0lmByuGJHRJz8lr MRD26AUSvlDzdO9piFyHG4360iGu2F4VJabf5SGXBxKHMJp11MqLlWYkueaghIHj 4C+C4+v8YLo1W55NeD8Vi3pvhFYE0dHyZSO2K6HXk1XLXz3L8HxwaaPNKPsZao22 x35lZMqQ5h2urr6PUGyQlbadN9pB0T6mHDXkRT2pNrlrrfcD0JiPaiCmGWhPWUBa ipCxaK4o01CNPqh5nrIF+ilTy85cJamC8tUKb1Mn5Os2Exh2abkx5Uw5ffGYj2qL LgroDPSiTOyZlxDuUbmhsGn6CU6BExI= -----END CERTIFICATE-----Generated at Sun Jun 29 01:33:44 2025 by rpki-client