$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2ed88afe-515f-30e1-b7f8-611d05859baa.roa File: 2ed88afe-515f-30e1-b7f8-611d05859baa.roa (raw, json) Hash identifier: RHQ/tZJpB5HKxlF5/HhgJ2dzL7oj+D+riXgoEHozYaQ= Subject key identifier: 91:56:AD:38:D3:FB:5E:10:90:06:2A:9E:21:92:6B:8A:13:5B:75:39 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F43285849BDDA2ACDFA89C094DA668400 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2ed88afe-515f-30e1-b7f8-611d05859baa.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 13807 IP address blocks: 162.250.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2a:cd:fa:89:c0:94:da:66:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=9c8c3d30-0b61-405b-9cd3-220da64f4d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b0:40:6c:7e:18:00:a6:ba:81:b8:d8:b1:b2: fa:45:25:c9:71:04:b1:13:c9:62:c3:c0:b5:c7:e6: a9:9c:94:9e:08:45:69:15:0e:fd:76:2c:94:71:05: 0e:35:52:bb:5a:1c:09:f0:e6:c9:34:07:78:e1:9b: d8:ed:0b:87:33:75:ca:fd:36:7a:dc:2b:f5:d3:e4: 9a:17:ff:77:ee:b9:36:e1:d8:4f:7b:e3:0c:1d:18: fb:b8:20:d2:92:14:fb:62:2c:7c:5b:ab:3e:5b:e7: 95:d2:96:9c:bf:b7:c9:7f:e0:fe:67:71:b4:74:34: cf:68:ae:15:c0:2a:d7:3c:6e:19:d4:42:8d:6d:90: b3:22:cf:7e:27:1d:43:d7:0e:3b:47:6e:1b:66:10: 8f:41:47:ff:be:33:14:13:5f:7b:38:af:21:53:16: 21:a7:db:b3:93:d5:da:9f:10:d7:56:b0:3f:d1:06: 4e:f0:5f:2e:5f:18:f0:72:3d:c7:57:3d:99:51:f5: 29:a0:fb:89:f4:20:a1:0f:07:1c:6b:eb:be:c2:aa: b9:b6:48:ce:cf:c5:99:91:1b:81:b4:82:14:cc:32: 01:ca:03:86:12:a0:5b:af:2e:6f:8b:0d:da:35:48: fb:20:cf:34:32:3d:88:87:aa:25:96:42:a2:38:10: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:56:AD:38:D3:FB:5E:10:90:06:2A:9E:21:92:6B:8A:13:5B:75:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2ed88afe-515f-30e1-b7f8-611d05859baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 162.250.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:99:de:76:ca:95:58:7e:93:cb:fd:d2:07:86:aa:2d:4f:87: 22:8e:54:ee:f7:64:47:2a:59:af:eb:d5:5f:14:9a:ac:57:5d: 8e:e4:2f:5f:57:06:a0:db:e1:20:c0:8e:d2:af:24:78:9b:44: a2:1b:3e:44:13:27:30:44:69:78:0b:9a:93:33:8d:df:9c:d4: 08:13:77:e6:0d:33:3d:a3:d8:2a:f6:f5:84:08:e7:f1:cd:da: 63:4a:4b:be:d7:75:a2:f3:d7:25:f4:c7:a4:eb:a2:98:51:00: 21:ba:00:60:6c:42:8f:2b:1b:76:0e:7e:a8:89:21:0f:1e:1a: 7e:cf:c3:03:a9:3d:29:7a:ae:09:29:a3:40:25:31:b8:9e:63: 73:b9:a0:c7:7f:15:d5:00:75:a7:f8:2b:41:1e:99:79:98:a2: 56:3a:1a:2f:0d:bc:d2:08:75:38:a2:43:e7:af:88:3f:d8:ca: 11:2f:e6:dc:f2:76:fc:05:39:a8:32:57:9d:22:fe:b9:7f:5b: 25:43:2b:23:ab:07:02:85:f0:52:57:74:55:c6:e1:95:44:d0: c2:d4:46:3b:8b:61:a7:51:0f:a7:68:d8:2c:44:8a:0a:9e:2e: b2:5e:8a:4d:b8:18:b5:9f:f1:c4:1f:2e:a0:77:87:dd:2b:b4: fc:fe:13:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92irN+onAlNpmhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OWM4YzNkMzAtMGI2MS00MDViLTljZDMtMjIwZGE2NGY0ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rBAbH4YAKa6gbjYsbL6RSXJcQSxE8liw8C1 x+apnJSeCEVpFQ79diyUcQUONVK7WhwJ8ObJNAd44ZvY7QuHM3XK/TZ63Cv10+Sa F/937rk24dhPe+MMHRj7uCDSkhT7Yix8W6s+W+eV0pacv7fJf+D+Z3G0dDTPaK4V wCrXPG4Z1EKNbZCzIs9+Jx1D1w47R24bZhCPQUf/vjMUE197OK8hUxYhp9uzk9Xa nxDXVrA/0QZO8F8uXxjwcj3HVz2ZUfUpoPuJ9CChDwcca+u+wqq5tkjOz8WZkRuB tIIUzDIBygOGEqBbry5viw3aNUj7IM80Mj2Ih6ollkKiOBBoOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFWrTjT+14QkAYqniGSa4oTW3U5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMmVkODhhZmUtNTE1Zi0z MGUxLWI3ZjgtNjExZDA1ODU5YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Z3nbKlVh+k8v90geGqi1PhyKOVO73ZEcqWa/r1V8UmqxXXY7kL19X BqDb4SDAjtKvJHibRKIbPkQTJzBEaXgLmpMzjd+c1AgTd+YNMz2j2Cr29YQI5/HN 2mNKS77XdaLz1yX0x6TrophRACG6AGBsQo8rG3YOfqiJIQ8eGn7PwwOpPSl6rgkp o0AlMbieY3O5oMd/FdUAdaf4K0EemXmYolY6Gi8NvNIIdTiiQ+eviD/YyhEv5tzy dvwFOagyV50i/rl/WyVDKyOrBwKF8FJXdFXG4ZVE0MLURjuLYadRD6do2CxEigqe LrJeik24GLWf8cQfLqB3h90rtPz+E24= -----END CERTIFICATE-----Generated at Sat May 10 10:16:43 2025 by rpki-client