$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5e056687-f8b8-3bef-aced-35d6417e632c.roa File: 5e056687-f8b8-3bef-aced-35d6417e632c.roa (raw, json) Hash identifier: moQmeW93hwZpxwIhvNZ6ZRaCQoZSCDi3aKiDG/Bow2g= Subject key identifier: 86:AA:93:4D:06:37:F1:5E:76:FB:27:50:08:54:03:17:DD:AE:22:A8 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285848E9CBD9CB8C81DCD728442B40 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5e056687-f8b8-3bef-aced-35d6417e632c.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 22742 IP address blocks: 162.246.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d9:cb:8c:81:dc:d7:28:44:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=66df4efb-0e5b-43c4-aac3-efe266e075db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:c2:97:cb:3a:d0:51:7d:fc:2f:5e:e7:67: e0:c7:16:db:37:75:c0:28:51:e1:a8:4a:7c:c2:7b: 28:fb:11:a4:89:c4:79:f0:ad:35:0f:cc:c7:de:cc: 7e:aa:ad:49:e2:d6:60:8e:e4:e3:ec:a9:84:72:21: fd:08:9a:b3:9a:73:b0:ac:69:9e:89:63:b4:3f:5b: 04:6a:3c:0a:b7:bc:3a:97:3d:db:8d:95:64:7e:84: 3a:d1:f8:36:85:6b:62:0b:d5:f2:0e:0c:29:82:f7: c5:1c:a6:28:e6:6e:89:d5:3e:df:b2:e3:b7:1a:2b: 46:ed:d3:60:0b:8a:85:62:96:98:92:d6:72:ab:d2: c1:bb:51:87:8f:b0:15:ea:66:5d:e2:ae:51:ce:24: 20:70:1c:d4:a6:af:73:a7:2d:77:70:69:25:a8:f5: de:d1:7f:bb:cb:bb:f6:89:98:9c:c6:91:1b:a7:fe: f6:3f:f6:b8:6e:83:e1:28:4d:aa:25:89:dd:e4:ba: da:48:3d:b0:a9:6e:a5:6b:88:bd:6e:3c:6b:a3:8a: dc:cf:29:a1:44:6a:14:12:06:1f:c4:b7:27:4a:5e: 1c:be:ff:c2:e6:7f:4d:92:37:9a:a1:18:14:24:1c: 60:f1:fa:06:23:08:d5:9e:79:18:d6:cc:e7:6a:e3: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:93:4D:06:37:F1:5E:76:FB:27:50:08:54:03:17:DD:AE:22:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5e056687-f8b8-3bef-aced-35d6417e632c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.246.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6a:75:60:df:30:23:31:2d:27:9f:3f:96:70:70:3f:67:c7: 8f:fe:80:0a:87:63:a4:90:3f:77:4b:79:23:04:0e:9f:70:97: 35:57:2a:84:4d:99:ee:6f:4d:09:a5:b0:90:42:2c:ff:40:10: c1:c6:55:6a:4a:1f:67:0d:82:1a:9c:3f:51:41:2d:e4:e8:70: 9e:7c:a8:c3:9f:22:96:54:0d:63:91:e1:90:fb:0a:a4:cd:21: fa:c7:bc:d5:7d:86:be:a2:81:15:41:48:85:70:70:63:16:f5: 5b:ba:dd:c1:b7:35:db:05:cc:b0:7f:d6:0d:cd:0c:76:1c:f6: cc:af:d6:c3:f0:1d:40:4c:b3:80:10:cd:dc:38:24:9a:ae:ed: dd:92:9d:f9:64:c4:0d:95:de:77:7e:00:06:5d:dd:9d:cd:a4: 0b:0b:45:de:de:dc:d3:c7:a1:1c:11:bf:cb:10:5f:fc:61:72: 76:aa:5b:0c:61:ce:e7:58:a8:0d:a3:aa:9c:a5:f1:b1:36:84: 77:44:90:f8:19:76:81:47:1f:6b:69:82:36:7a:e5:60:06:59: d4:ab:1c:c3:e7:74:bc:d2:e7:c3:d3:00:2f:e2:26:0c:60:cd: 35:95:3e:aa:2a:5c:df:f9:aa:5c:ad:bc:f2:3f:6e:ee:a6:25: be:3a:db:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9nLjIHc1yhEK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NjZkZjRlZmItMGU1Yi00M2M0LWFhYzMtZWZlMjY2ZTA3NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdvCl8s60FF9/C9e52fgxxbbN3XAKFHhqEp8 wnso+xGkicR58K01D8zH3sx+qq1J4tZgjuTj7KmEciH9CJqzmnOwrGmeiWO0P1sE ajwKt7w6lz3bjZVkfoQ60fg2hWtiC9XyDgwpgvfFHKYo5m6J1T7fsuO3GitG7dNg C4qFYpaYktZyq9LBu1GHj7AV6mZd4q5RziQgcBzUpq9zpy13cGklqPXe0X+7y7v2 iZicxpEbp/72P/a4boPhKE2qJYnd5LraSD2wqW6la4i9bjxro4rczymhRGoUEgYf xLcnSl4cvv/C5n9NkjeaoRgUJBxg8foGIwjVnnkY1sznauNVjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaqk00GN/FedvsnUAhUAxfdriKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvNWUwNTY2ODctZjhiOC0z YmVmLWFjZWQtMzVkNjQxN2U2MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVqdWDfMCMxLSefP5ZwcD9nx4/+gAqHY6SQP3dLeSMEDp9wlzVXKoRN me5vTQmlsJBCLP9AEMHGVWpKH2cNghqcP1FBLeTocJ58qMOfIpZUDWOR4ZD7CqTN IfrHvNV9hr6igRVBSIVwcGMW9Vu63cG3NdsFzLB/1g3NDHYc9syv1sPwHUBMs4AQ zdw4JJqu7d2SnflkxA2V3nd+AAZd3Z3NpAsLRd7e3NPHoRwRv8sQX/xhcnaqWwxh zudYqA2jqpyl8bE2hHdEkPgZdoFHH2tpgjZ65WAGWdSrHMPndLzS58PTAC/iJgxg zTWVPqoqXN/5qlytvPI/bu6mJb46278= -----END CERTIFICATE-----Generated at Mon May 5 14:45:25 2025 by rpki-client