$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ed93203f-cf71-30b1-9801-397105ab7580.roa File: ed93203f-cf71-30b1-9801-397105ab7580.roa (raw, json) Hash identifier: 9dn0dyU7R8agRFCqapZaRzzoUv945rEnXsUQIX8Wxpk= Subject key identifier: 90:FE:95:8B:3B:51:E0:8E:A9:DD:77:42:53:54:CC:24:26:A1:20:B4 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F432858499F24945538AB5E339B359C00 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ed93203f-cf71-30b1-9801-397105ab7580.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7046 IP address blocks: 165.119.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:94:55:38:ab:5e:33:9b:35:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=56b25864-1b19-4325-8efd-5fe668ff3386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:0e:ae:26:5c:aa:47:02:45:c4:66:5e:c5: a2:84:95:e3:16:55:73:8c:95:00:02:24:8c:e7:d8: 57:9b:b9:3d:f7:9a:04:c9:25:c8:da:55:b3:57:85: 91:5f:26:59:d0:6d:f1:66:8c:e3:da:6b:b8:65:a5: 1c:59:ed:cd:b8:db:91:71:8f:31:b2:e4:97:03:ca: b3:6b:d2:9d:dd:38:fe:eb:3e:28:47:80:96:d6:f9: 32:da:02:ae:78:0a:39:59:48:ab:64:d1:a9:64:c0: d1:6b:df:a9:c4:89:15:11:e3:63:82:38:00:59:f4: b7:de:ce:e3:70:5a:a1:92:a0:5d:64:bf:f5:c7:7a: cd:2b:cc:06:00:84:21:6e:9e:3c:02:81:26:9d:52: 74:f6:69:5d:16:cc:4a:73:84:03:a9:d3:36:66:4f: 63:aa:da:3a:d1:91:93:37:c4:79:87:40:39:fb:e2: 6d:f2:87:5d:3d:8a:15:62:1c:1a:bc:8a:ac:aa:d6: 9f:20:c7:60:cc:79:5d:8a:b0:e0:77:f4:85:0d:02: 6f:9c:fc:e0:61:a3:75:57:e8:c6:b6:88:69:ff:a5: d8:99:cc:e7:aa:c3:04:3f:c0:02:ab:aa:ed:01:9d: 3d:70:28:e3:de:f1:c0:de:9f:59:61:f8:12:f3:fe: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FE:95:8B:3B:51:E0:8E:A9:DD:77:42:53:54:CC:24:26:A1:20:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ed93203f-cf71-30b1-9801-397105ab7580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 165.119.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:eb:02:34:aa:f4:f0:79:a9:c8:49:8e:81:fd:e4:59:1a:57: 77:2f:04:a1:b2:26:78:5a:34:d8:01:37:2c:12:54:71:42:10: c9:91:a4:58:25:57:55:f2:65:54:30:38:6f:01:ef:62:0c:ee: 71:ee:1e:64:b7:0d:9b:67:a7:0e:aa:7b:02:32:93:7b:ea:1f: df:19:1d:b0:f8:e5:b1:a1:f6:de:ec:ea:ac:28:62:17:1b:f5: c7:49:ea:c2:c9:e4:af:74:32:36:73:95:54:a9:eb:0d:15:eb: b7:8b:0c:ee:2d:4a:c8:3d:05:9d:21:16:70:d8:5d:33:51:ef: 2b:20:ae:7a:a4:4d:f4:07:83:dd:85:ea:80:cf:0f:05:5b:2e: 74:f7:34:a7:13:44:97:44:ff:b2:c3:7f:72:b9:73:c8:e5:30: 72:c2:7b:93:cf:03:4c:de:14:bf:fa:8b:e6:ab:5b:49:2c:b7: 53:19:a9:2f:5c:34:9a:57:11:27:d5:ab:43:ff:db:29:09:3f: f4:75:34:14:79:9f:21:cb:0d:ae:44:15:22:5c:92:89:82:eb: 83:94:63:52:79:a6:59:8e:f4:fa:fa:1d:5e:9d:59:24:aa:29: 06:08:58:1a:6f:22:7a:e0:fe:2e:88:88:a1:fd:ae:5e:ea:67: 32:93:86:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJRVOKteM5s1nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTZiMjU4NjQtMWIxOS00MzI1LThlZmQtNWZlNjY4ZmYzMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtgOriZcqkcCRcRmXsWihJXjFlVzjJUAAiSM 59hXm7k995oEySXI2lWzV4WRXyZZ0G3xZozj2mu4ZaUcWe3NuNuRcY8xsuSXA8qz a9Kd3Tj+6z4oR4CW1vky2gKueAo5WUirZNGpZMDRa9+pxIkVEeNjgjgAWfS33s7j cFqhkqBdZL/1x3rNK8wGAIQhbp48AoEmnVJ09mldFsxKc4QDqdM2Zk9jqto60ZGT N8R5h0A5++Jt8oddPYoVYhwavIqsqtafIMdgzHldirDgd/SFDQJvnPzgYaN1V+jG tohp/6XYmcznqsMEP8ACq6rtAZ09cCjj3vHA3p9ZYfgS8/7qOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD+lYs7UeCOqd13QlNUzCQmoSC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvZWQ5MzIwM2YtY2Y3MS0z MGIxLTk4MDEtMzk3MTA1YWI3NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApXf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXrAjSq9PB5qchJjoH95FkaV3cvBKGyJnhaNNgBNywSVHFCEMmRpFgl V1XyZVQwOG8B72IM7nHuHmS3DZtnpw6qewIyk3vqH98ZHbD45bGh9t7s6qwoYhcb 9cdJ6sLJ5K90MjZzlVSp6w0V67eLDO4tSsg9BZ0hFnDYXTNR7ysgrnqkTfQHg92F 6oDPDwVbLnT3NKcTRJdE/7LDf3K5c8jlMHLCe5PPA0zeFL/6i+arW0kst1MZqS9c NJpXESfVq0P/2ykJP/R1NBR5nyHLDa5EFSJckomC64OUY1J5plmO9Pr6HV6dWSSq KQYIWBpvInrg/i6IiKH9rl7qZzKThnM= -----END CERTIFICATE-----Generated at Thu May 1 09:44:25 2025 by rpki-client