$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa File: 0d50241c-e841-3989-8c88-37d5a93ca144.roa (raw, json) Hash identifier: DMlCBsCFrC3F4V2IJ1CZP5kZUExk14r1v1ot4037u20= Subject key identifier: BB:CE:DC:B0:FF:F6:E8:3C:96:9F:6C:C7:C7:B8:FB:59:4A:08:1C:49 Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584949FE8B950F3CF6707E59F7C0 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 52347 IP address blocks: 162.217.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8b:95:0f:3c:f6:70:7e:59:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=f738d626-bd7e-4fe6-99d8-b688991ae1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:36:81:a3:d8:50:3e:67:f1:36:d8:46:90: 83:9f:22:b0:9b:d7:7c:fb:e2:bc:20:62:d5:a5:8b: 13:32:51:3a:e1:e2:3d:d1:f6:f6:11:33:32:ca:ea: 56:a4:3a:67:e4:46:23:6a:d1:22:f6:5b:7d:a5:09: b7:bc:b3:14:05:0a:04:34:51:e8:fb:c5:1c:ce:8a: 9d:2a:64:a9:1b:3d:ac:1c:11:02:61:ee:d5:81:e6: 56:47:26:9a:b7:54:19:b5:e1:f5:f0:8a:6e:43:9c: ba:29:6e:0e:25:6f:8c:7b:67:af:f1:8e:07:7f:49: 83:bb:76:28:33:4c:d6:9e:34:94:2a:06:73:e6:84: 1e:bf:b9:3d:48:90:a6:09:3f:4c:06:49:6c:82:97: 68:48:03:33:12:26:b2:5a:33:5a:2c:00:1a:e5:35: 83:b6:6e:ff:03:58:60:5f:a4:67:1c:89:8e:81:d5: a6:c6:dc:f5:63:88:c3:ac:da:30:7b:31:62:05:2d: c6:34:59:e6:36:db:62:39:79:8a:37:3c:c6:f5:2b: ff:2b:22:ef:8a:60:1a:93:89:4e:1e:6a:d3:f2:c5: 1d:6c:c1:55:4b:c0:ea:48:d5:03:66:00:a1:64:a9: 62:8c:03:42:04:bd:71:53:07:da:d8:2a:92:9b:df: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CE:DC:B0:FF:F6:E8:3C:96:9F:6C:C7:C7:B8:FB:59:4A:08:1C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:94:3e:76:5c:ef:23:47:08:58:40:0e:df:ae:ba:69:72:6f: f8:23:a4:ed:fd:47:18:9c:99:58:d3:a4:a4:66:d2:02:99:de: 54:08:ab:95:d2:9c:45:71:f5:e5:29:86:76:fc:2a:ed:58:5c: 2a:06:27:63:3e:08:ad:af:aa:40:0f:55:73:a9:76:50:f9:f0: cb:69:db:cd:d6:17:eb:7b:0a:75:22:79:02:90:db:69:6d:16: 11:e2:db:4c:2b:11:34:7f:55:ac:dd:91:64:3e:02:7a:a4:38: 0c:d6:fb:a7:af:13:a0:32:61:4f:f1:76:09:b0:c6:a0:aa:94: b1:33:22:3e:db:bf:7c:4a:94:ba:24:a0:62:72:d5:d7:0b:96: df:b6:c0:5b:6e:a5:c6:63:21:d6:9e:4b:56:b2:f8:1d:ec:0e: 7c:39:67:74:28:95:70:a1:38:d3:ad:ee:05:ed:00:fb:d0:cc: 27:27:b0:6d:6e:32:a7:5b:35:1a:3d:07:27:4c:b6:31:f8:66: d9:3a:e4:8e:ba:59:96:5e:48:eb:fb:e0:32:e4:f5:5a:89:f6: b0:2e:fb:6d:de:ae:06:5b:49:a5:72:dc:00:04:53:45:39:a6: 68:14:59:b1:a2:19:81:b1:72:7c:58:b6:44:5a:cc:7d:86:42: ca:24:d8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/ouVDzz2cH5Z98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZjczOGQ2MjYtYmQ3ZS00ZmU2LTk5ZDgtYjY4ODk5MWFlMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDI2gaPYUD5n8TbYRpCDnyKwm9d8++K8IGLV pYsTMlE64eI90fb2ETMyyupWpDpn5EYjatEi9lt9pQm3vLMUBQoENFHo+8Uczoqd KmSpGz2sHBECYe7VgeZWRyaat1QZteH18IpuQ5y6KW4OJW+Me2ev8Y4Hf0mDu3Yo M0zWnjSUKgZz5oQev7k9SJCmCT9MBklsgpdoSAMzEiayWjNaLAAa5TWDtm7/A1hg X6RnHImOgdWmxtz1Y4jDrNowezFiBS3GNFnmNttiOXmKNzzG9Sv/KyLvimAak4lO HmrT8sUdbMFVS8DqSNUDZgChZKlijANCBL1xUwfa2CqSm99vowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvO3LD/9ug8lp9sx8e4+1lKCBxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvMGQ1MDI0MWMtZTg0MS0z OTg5LThjODgtMzdkNWE5M2NhMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaUPnZc7yNHCFhADt+uumlyb/gjpO39RxicmVjTpKRm0gKZ3lQIq5XS nEVx9eUphnb8Ku1YXCoGJ2M+CK2vqkAPVXOpdlD58Mtp283WF+t7CnUieQKQ22lt FhHi20wrETR/VazdkWQ+AnqkOAzW+6evE6AyYU/xdgmwxqCqlLEzIj7bv3xKlLok oGJy1dcLlt+2wFtupcZjIdaeS1ay+B3sDnw5Z3QolXChONOt7gXtAPvQzCcnsG1u MqdbNRo9BydMtjH4Ztk65I66WZZeSOv74DLk9VqJ9rAu+23ergZbSaVy3AAEU0U5 pmgUWbGiGYGxcnxYtkRazH2GQsok2As= -----END CERTIFICATE-----Generated at Wed May 7 11:15:27 2025 by rpki-client