$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa File: 024ca933-fa24-36cd-85e1-460a5cc4da90.roa (raw, json) Hash identifier: i524UH3FNCcLLhdGlYfMxlol/VrMhk0FCiFRlTGFFOQ= Subject key identifier: 2C:3C:3D:55:FE:60:9B:F5:0C:41:FE:A5:A6:02:68:7F:18:24:58:A1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849CE9A6B9D41003E965C3813E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 165.225.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6b:9d:41:00:3e:96:5c:38:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=b60eeb4a-8427-4f54-a922-bbe76630f3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:5a:fb:b8:92:69:84:70:74:3e:07:a8:4e: 82:73:3f:7f:d7:41:62:71:a9:c4:9d:5a:34:ed:76: 43:89:85:28:4c:eb:64:e1:ba:dd:6f:86:fc:26:c3: da:7a:1c:cb:9f:ff:2b:8f:d9:0b:7e:fe:cd:5f:40: 47:1a:02:e3:e0:7e:2a:b1:4d:42:87:93:83:ca:9e: f1:95:a4:45:11:83:78:9c:e4:b8:11:01:d6:fd:54: de:0d:85:d1:c7:5d:9f:dc:75:c9:36:6f:d6:e1:77: a1:6e:8a:bc:75:50:5c:2d:93:6f:ec:04:f9:05:6e: 6a:90:9c:63:9e:b5:7c:00:ba:13:24:f9:31:ac:75: 8d:8f:b1:d1:22:11:f5:38:51:00:f4:2c:b5:22:04: 90:4d:e7:39:ff:b0:06:da:7e:ab:12:78:ef:57:82: ee:8d:4c:bf:a1:79:03:85:af:8b:84:9f:46:21:a4: 78:a3:6d:07:2a:16:3b:1b:d4:b6:53:20:cb:db:86: e4:8c:26:74:e1:d3:38:98:d8:90:4b:52:77:7b:0e: 50:5d:55:ce:bb:36:62:a1:e1:0b:aa:63:53:93:38: 9c:21:65:64:ec:da:c9:5c:d9:7a:d0:2e:eb:eb:00: 7a:92:36:46:b7:35:d2:d3:aa:7f:c7:f7:f6:58:24: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:3D:55:FE:60:9B:F5:0C:41:FE:A5:A6:02:68:7F:18:24:58:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:73:54:fd:ec:45:7d:8f:e0:a7:16:de:e1:21:db:a8:68:c8: 16:75:f1:83:0b:b9:10:8a:14:5b:83:36:96:b0:51:c8:0e:c1: 95:af:6c:32:4c:7a:d3:e0:7a:59:bf:1b:5b:a6:b1:c7:0a:af: 12:dc:1f:e0:92:e0:e5:56:c5:e2:3d:65:16:5b:4d:1f:c3:16: d4:8a:bb:29:1b:d6:33:0e:af:d8:77:ed:a1:9b:ef:46:98:2f: 5d:5b:a5:9b:7f:1c:6d:10:7d:e2:c1:99:21:71:01:68:e0:21: 13:41:2b:91:c1:0f:8e:8b:05:4a:8f:00:76:f4:5f:64:a1:92: a2:cb:4f:69:8b:61:d9:8c:41:8d:dd:7f:dc:9d:90:3f:7e:94: 11:ef:c6:72:49:39:a4:58:4f:59:50:e5:d0:f3:bf:f9:33:09: 7a:54:5d:f3:88:54:ef:a1:f5:29:69:c7:f2:d7:78:05:4e:af: dc:ca:0d:46:ac:04:0d:dc:62:bd:1a:20:68:9f:3f:61:3f:cb: ad:24:c4:6b:5c:d3:a6:b9:c7:ca:e3:71:4a:fd:2f:07:16:eb: fc:81:91:54:09:18:19:79:00:f4:89:6d:a0:0c:d3:0c:79:f4: 5b:1b:4d:e2:21:8a:d0:cc:15:3a:c8:6b:e2:cf:68:69:70:4c: b8:58:29:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmudQQA+llw4E+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YjYwZWViNGEtODQyNy00ZjU0LWE5MjItYmJlNzY2MzBmM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzBa+7iSaYRwdD4HqE6Ccz9/10FicanEnVo0 7XZDiYUoTOtk4brdb4b8JsPaehzLn/8rj9kLfv7NX0BHGgLj4H4qsU1Ch5ODyp7x laRFEYN4nOS4EQHW/VTeDYXRx12f3HXJNm/W4Xehboq8dVBcLZNv7AT5BW5qkJxj nrV8ALoTJPkxrHWNj7HRIhH1OFEA9Cy1IgSQTec5/7AG2n6rEnjvV4LujUy/oXkD ha+LhJ9GIaR4o20HKhY7G9S2UyDL24bkjCZ04dM4mNiQS1J3ew5QXVXOuzZioeEL qmNTkzicIWVk7NrJXNl60C7r6wB6kjZGtzXS06p/x/f2WCT4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw8PVX+YJv1DEH+paYCaH8YJFihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDI0Y2E5MzMtZmEyNC0z NmNkLTg1ZTEtNDYwYTVjYzRkYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRzVP3sRX2P4KcW3uEh26hoyBZ18YMLuRCKFFuDNpawUcgOwZWvbDJM etPgelm/G1umsccKrxLcH+CS4OVWxeI9ZRZbTR/DFtSKuykb1jMOr9h37aGb70aY L11bpZt/HG0QfeLBmSFxAWjgIRNBK5HBD46LBUqPAHb0X2ShkqLLT2mLYdmMQY3d f9ydkD9+lBHvxnJJOaRYT1lQ5dDzv/kzCXpUXfOIVO+h9Slpx/LXeAVOr9zKDUas BA3cYr0aIGifP2E/y60kxGtc06a5x8rjcUr9LwcW6/yBkVQJGBl5APSJbaAM0wx5 9FsbTeIhitDMFTrIa+LPaGlwTLhYKSA= -----END CERTIFICATE-----Generated at Sun Jun 15 12:53:19 2025 by rpki-client