$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa File: 947df0f8-80fa-3538-878b-55885ca0b9b8.roa (raw, json) Hash identifier: c5HsNzWcpafHAxvMjnAWQhxIsjyEWUaPEhhA0iPd1sg= Subject key identifier: 7E:24:E3:EB:D0:1D:21:D2:BE:3D:8C:C2:90:3C:49:DA:E0:9B:48:94 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285849806F1B86D0A411AE0F5D5E80 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 398216 IP address blocks: 63.250.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1b:86:d0:a4:11:ae:0f:5d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=f701e682-a3c3-4d58-9cdb-95e9d571d0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:16:f8:e5:f6:98:3b:55:17:15:4a:ea:70: 8c:88:0c:94:05:3f:a3:29:02:e4:02:68:85:ce:a7: 08:2a:34:eb:7b:70:3f:db:05:cb:04:bf:e1:8e:48: 22:9f:30:52:a8:ea:be:d6:3c:67:7d:0d:5e:31:93: ce:ca:83:78:68:f6:0f:ce:c8:bf:49:34:af:c5:9c: f8:71:64:57:77:b3:7c:e0:55:f8:91:d2:88:7e:de: cb:83:93:1d:1a:b1:60:f8:24:67:0c:95:27:e1:27: d8:c4:e7:b9:22:fe:65:2b:61:ca:72:79:f8:0d:3f: 1d:f6:cf:f1:21:72:59:11:2f:92:74:46:21:f6:6a: 39:15:0b:66:3b:5b:15:00:5a:f4:d5:ad:a7:40:eb: 7c:e1:63:43:4b:26:d1:5b:72:fd:b8:58:18:9c:59: 6d:05:9d:95:ca:74:05:c8:e0:42:2a:b9:b4:9f:88: 11:9a:ff:9e:68:9c:96:6d:b5:28:80:62:11:e1:07: cf:11:55:4e:e3:54:b0:b9:31:b6:bb:00:c3:9c:ec: 3d:17:83:2e:14:af:e0:71:35:c4:d1:2a:b7:22:f3: 91:c5:8f:75:2f:89:e3:18:7c:e8:31:13:28:ed:a6: f5:dc:1c:7a:02:f4:b7:a7:66:35:b1:cb:e7:53:94: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:E3:EB:D0:1D:21:D2:BE:3D:8C:C2:90:3C:49:DA:E0:9B:48:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 63.250.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:47:4f:bd:21:9f:c1:53:06:05:3e:b2:b7:63:99:fe:66:8b: 64:c5:3e:d5:fb:79:b4:03:29:d6:bb:6a:1a:f3:68:4f:bd:58: 1e:e2:9a:61:fa:09:49:e1:13:00:3b:ce:81:c7:37:7f:cb:c6: e8:fe:0d:6d:be:4f:53:a8:13:3f:53:96:4a:ea:11:a0:16:b1: c2:b6:ca:42:cf:77:f4:bc:d7:97:5c:73:f2:ac:91:ac:7e:94: 24:75:0b:cf:74:19:e5:2d:62:ad:a2:1a:71:41:6d:81:b5:c1: 41:7f:27:5c:66:2a:c4:b2:78:91:dc:87:76:54:0a:28:c3:9a: d4:4a:f8:f0:ae:47:b6:bd:c4:8f:47:84:4b:2e:e9:11:36:56: 63:72:a4:04:ba:55:d9:7e:a0:10:56:a9:5f:50:49:6e:00:84: 2b:76:25:e4:16:20:22:01:3c:be:42:50:98:8b:44:a9:8d:cd: 71:13:be:0e:0d:74:da:89:37:2e:8e:bf:7a:a8:9d:3f:ef:53: 4e:6f:37:a1:8c:da:4f:d8:9a:63:24:52:be:05:ad:51:61:27: 0b:23:24:65:17:45:98:25:a9:b6:64:65:2e:65:f5:a7:cf:bd: e4:31:41:f2:dd:00:ce:24:4c:3c:73:ba:16:5b:2d:a9:4a:36: 3a:e4:b9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxuG0KQRrg9dXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZjcwMWU2ODItYTNjMy00ZDU4LTljZGItOTVlOWQ1NzFkMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+QW+OX2mDtVFxVK6nCMiAyUBT+jKQLkAmiF zqcIKjTre3A/2wXLBL/hjkginzBSqOq+1jxnfQ1eMZPOyoN4aPYPzsi/STSvxZz4 cWRXd7N84FX4kdKIft7Lg5MdGrFg+CRnDJUn4SfYxOe5Iv5lK2HKcnn4DT8d9s/x IXJZES+SdEYh9mo5FQtmO1sVAFr01a2nQOt84WNDSybRW3L9uFgYnFltBZ2VynQF yOBCKrm0n4gRmv+eaJyWbbUogGIR4QfPEVVO41SwuTG2uwDDnOw9F4MuFK/gcTXE 0Sq3IvORxY91L4njGHzoMRMo7ab13Bx6AvS3p2Y1scvnU5TCEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4k4+vQHSHSvj2MwpA8Sdrgm0iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvOTQ3ZGYwZjgtODBmYS0z NTM4LTg3OGItNTU4ODVjYTBiOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxHT70hn8FTBgU+srdjmf5mi2TFPtX7ebQDKda7ahrzaE+9WB7immH6 CUnhEwA7zoHHN3/Lxuj+DW2+T1OoEz9TlkrqEaAWscK2ykLPd/S815dcc/Kskax+ lCR1C890GeUtYq2iGnFBbYG1wUF/J1xmKsSyeJHch3ZUCijDmtRK+PCuR7a9xI9H hEsu6RE2VmNypAS6Vdl+oBBWqV9QSW4AhCt2JeQWICIBPL5CUJiLRKmNzXETvg4N dNqJNy6Ov3qonT/vU05vN6GM2k/YmmMkUr4FrVFhJwsjJGUXRZglqbZkZS5l9afP veQxQfLdAM4kTDxzuhZbLalKNjrkuVA= -----END CERTIFICATE-----Generated at Fri May 9 20:51:47 2025 by rpki-client