$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa File: 322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa (raw, json) Hash identifier: L+HB+t9dVfQJmlnEMlkCFnIVnNSwpcLgPEGukDKLO7c= Subject key identifier: 9B:2A:B7:1E:1D:B3:22:FD:7D:09:58:B5:16:39:EE:E4:59:7C:0B:5D Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F43285849B6DF4C5DB61A400D3E579580 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4c:5d:b6:1a:40:0d:3e:57:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=286de532-e08c-40dd-90d4-6a8a6e3a47f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:5f:78:c0:e1:46:b3:0b:17:99:2a:b1:e9: d4:31:fe:c8:1f:e0:9e:a5:d2:bf:3b:9e:29:b9:3d: c7:e6:5e:c7:81:37:69:07:09:44:e2:7b:d0:a6:dc: dd:1b:36:2e:e3:47:d4:75:ea:87:85:a2:4d:49:a6: d5:6e:61:41:01:9d:c6:1a:6d:ed:a5:66:13:74:ad: a3:8e:72:83:e4:37:fb:63:98:7f:74:6f:8a:78:db: 29:f6:49:e5:d5:73:e0:8c:ef:bd:32:0f:95:8f:7e: 15:f8:3a:9b:c6:e7:f1:ff:9c:dc:77:e2:2a:4a:2b: b2:70:12:50:70:f5:84:bb:fa:aa:e4:4b:f2:40:48: 07:15:7f:b3:ce:9c:58:ee:d1:f8:b5:c9:47:c0:7f: 03:56:56:30:54:38:cf:52:90:ec:c3:69:21:9d:84: ac:95:07:46:b3:83:80:e3:89:93:8a:7a:44:54:14: fb:a7:5d:40:e3:73:bb:10:21:4b:67:68:fd:63:b4: b2:d4:ec:c2:f2:21:8f:f2:49:94:01:df:37:42:a0: c6:06:c0:e8:a1:27:76:9f:d3:06:93:17:27:b1:34: 40:83:c0:d8:6a:e6:85:25:74:cb:50:6a:b9:00:67: 97:99:b7:7a:21:a6:0a:5a:cc:af:46:65:c6:13:74: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2A:B7:1E:1D:B3:22:FD:7D:09:58:B5:16:39:EE:E4:59:7C:0B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:38:f2:cc:dd:78:62:c2:72:c5:c6:82:40:a8:d3:ff:4c:68: 4c:54:06:83:b8:8a:57:3e:d6:b0:07:65:2c:cf:5e:05:fe:e9: 4f:3e:5d:4b:6c:5e:34:12:3f:f2:08:68:35:8f:6d:78:6a:8d: 74:c0:5c:4d:cb:ad:9b:1a:9d:07:5d:8a:42:79:a5:29:d3:5b: 21:64:62:45:e0:de:79:41:0f:f4:87:6d:65:4f:0c:13:63:03: 12:0a:48:0d:cf:89:10:e4:6f:95:cf:18:61:b9:97:a0:db:e8: 94:b6:e1:ff:a9:44:30:51:d8:66:17:86:71:44:17:38:c6:84: cd:4d:0e:e2:c1:b1:2f:98:80:25:98:b9:62:be:06:1a:27:48: 5b:63:1b:64:74:f9:7d:ff:6a:44:45:e2:c7:d7:0b:50:cf:30: 63:5d:96:11:d4:91:cf:46:99:2e:d1:48:3f:45:da:d5:5c:a0: aa:21:da:68:1c:cd:1a:16:1e:6a:00:e0:77:a2:eb:f1:1c:0b: c1:02:ee:0a:7a:8d:eb:12:d2:67:19:83:62:d6:0f:d6:89:21: 40:64:e5:50:2f:3f:24:6b:9f:04:94:ba:55:64:35:8b:aa:b8: 28:c0:12:8b:07:4c:3f:51:79:b5:20:38:5c:bc:06:1a:7d:f2: d2:f1:49:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230xdthpADT5XlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk Mjg2ZGU1MzItZTA4Yy00MGRkLTkwZDQtNmE4YTZlM2E0N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0xfeMDhRrMLF5kqsenUMf7IH+CepdK/O54p uT3H5l7HgTdpBwlE4nvQptzdGzYu40fUdeqHhaJNSabVbmFBAZ3GGm3tpWYTdK2j jnKD5Df7Y5h/dG+KeNsp9knl1XPgjO+9Mg+Vj34V+Dqbxufx/5zcd+IqSiuycBJQ cPWEu/qq5EvyQEgHFX+zzpxY7tH4tclHwH8DVlYwVDjPUpDsw2khnYSslQdGs4OA 44mTinpEVBT7p11A43O7ECFLZ2j9Y7Sy1OzC8iGP8kmUAd83QqDGBsDooSd2n9MG kxcnsTRAg8DYauaFJXTLUGq5AGeXmbd6IaYKWsyvRmXGE3QAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsqtx4dsyL9fQlYtRY57uRZfAtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMzIyZDZkOTYtZTdmYS0z NDNiLWIzYmEtZjIxZTY5MDM3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM48szdeGLCcsXGgkCo0/9MaExUBoO4ilc+1rAHZSzPXgX+6U8+XUts XjQSP/IIaDWPbXhqjXTAXE3LrZsanQddikJ5pSnTWyFkYkXg3nlBD/SHbWVPDBNj AxIKSA3PiRDkb5XPGGG5l6Db6JS24f+pRDBR2GYXhnFEFzjGhM1NDuLBsS+YgCWY uWK+BhonSFtjG2R0+X3/akRF4sfXC1DPMGNdlhHUkc9GmS7RSD9F2tVcoKoh2mgc zRoWHmoA4Hei6/EcC8EC7gp6jesS0mcZg2LWD9aJIUBk5VAvPyRrnwSUulVkNYuq uCjAEosHTD9RebUgOFy8Bhp98tLxSak= -----END CERTIFICATE-----Generated at Mon May 5 10:56:41 2025 by rpki-client