$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6638d6da-3a03-34e9-84ec-395fcbe3f335.roa File: 6638d6da-3a03-34e9-84ec-395fcbe3f335.roa (raw, json) Hash identifier: LNTQHD7LycHQO1KdCeJcnrwtGdAduDNLfWMIgyIxNKo= Subject key identifier: 89:30:09:54:92:63:B7:48:A5:D2:51:B8:5D:A1:42:36:1F:16:7A:0E Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F43285849A61F340EA5068A9105037280 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6638d6da-3a03-34e9-84ec-395fcbe3f335.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 63360 IP address blocks: 168.225.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:34:0e:a5:06:8a:91:05:03:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=2588a2fb-1ad0-4004-bea6-5b904ec511a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:d0:b6:b4:fe:8a:30:db:81:68:84:9e:5e: 56:58:c8:70:a5:11:1b:26:5f:39:07:6a:73:15:d5: 18:c3:49:6d:34:b8:6f:07:2b:aa:b5:27:e2:d1:5a: 4d:d3:80:c9:c9:c2:11:02:b5:f7:e9:22:5d:c8:9d: 35:50:67:72:9a:1e:1b:3e:5e:ef:3c:60:3d:7c:f7: 82:68:f0:69:99:df:5a:ed:62:7b:5f:f7:c2:27:2f: 2a:eb:75:4c:2a:e2:97:d6:20:42:c7:42:e6:51:26: 2b:02:7a:c0:11:a8:67:8c:a4:a6:96:7c:a5:f8:41: da:bb:5e:2e:1e:57:66:81:5a:5c:16:df:26:33:11: 35:aa:49:c8:c1:47:fc:98:bc:b2:64:c4:fd:87:67: 69:c7:7e:e3:d0:2e:a3:10:3c:1e:16:6d:99:e1:4a: 50:a2:52:3e:66:44:ed:ce:13:7b:0f:8c:26:35:74: 49:6b:8e:c0:2b:0d:60:5b:af:6b:1e:d4:1e:ac:1b: 36:8c:c8:96:91:7c:1d:12:c8:98:5f:2e:0d:b9:19: 50:3b:a4:d4:0e:15:b2:86:d0:77:7b:d6:0a:19:3b: ba:f1:88:83:35:a5:a0:24:bf:f5:4c:5c:c8:e3:f4: 7b:13:49:f0:9f:f0:40:b7:e6:92:dc:58:98:8c:f4: 4c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:30:09:54:92:63:B7:48:A5:D2:51:B8:5D:A1:42:36:1F:16:7A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6638d6da-3a03-34e9-84ec-395fcbe3f335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:03:9a:d2:65:70:93:1d:84:08:42:bf:83:55:70:af:b8:16: 78:d9:7b:33:eb:d3:b2:d4:53:2d:c7:0e:99:9a:1b:6e:da:b8: d1:1e:39:f4:8e:2a:67:e4:fa:3e:97:2c:2b:e8:06:5a:42:d1: 19:ba:aa:87:e3:c0:ff:83:3f:94:8e:42:10:df:32:7f:5a:4f: 7d:c6:9b:3a:01:af:66:b4:d6:6d:92:99:cb:b1:99:5d:ac:e2: 12:71:06:dc:cb:8b:cc:8c:2b:bc:ba:b2:4a:c4:b4:2f:55:d9: 2d:cc:41:f1:4d:25:97:d5:29:fa:25:09:ab:41:68:eb:e4:5a: a8:77:01:aa:bb:f2:4f:d8:cb:c0:14:1f:53:72:fe:d4:d7:9e: 52:1f:97:99:2b:8c:a5:60:fa:d2:2a:0a:92:5d:46:a8:9f:27: 5c:49:9a:de:f6:40:74:4f:7d:cc:c7:02:3b:61:26:64:78:74: 16:a2:78:94:e7:20:6f:9d:ae:8c:ef:b8:d3:1e:95:67:3b:1c: 8f:94:65:27:9d:0a:09:4c:6d:f4:02:10:a2:04:09:08:44:e9: e0:1b:50:2f:41:89:7b:a8:70:53:fa:ef:86:71:05:26:d2:af: 2f:7a:d3:9d:df:aa:bd:18:cc:fb:6e:a4:02:a7:90:a1:32:b4: 2e:78:93:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzQOpQaKkQUDcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MjU4OGEyZmItMWFkMC00MDA0LWJlYTYtNWI5MDRlYzUxMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBbQtrT+ijDbgWiEnl5WWMhwpREbJl85B2pz FdUYw0ltNLhvByuqtSfi0VpN04DJycIRArX36SJdyJ01UGdymh4bPl7vPGA9fPeC aPBpmd9a7WJ7X/fCJy8q63VMKuKX1iBCx0LmUSYrAnrAEahnjKSmlnyl+EHau14u HldmgVpcFt8mMxE1qknIwUf8mLyyZMT9h2dpx37j0C6jEDweFm2Z4UpQolI+ZkTt zhN7D4wmNXRJa47AKw1gW69rHtQerBs2jMiWkXwdEsiYXy4NuRlQO6TUDhWyhtB3 e9YKGTu68YiDNaWgJL/1TFzI4/R7E0nwn/BAt+aS3FiYjPRMgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkwCVSSY7dIpdJRuF2hQjYfFnoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvNjYzOGQ2ZGEtM2EwMy0z NGU5LTg0ZWMtMzk1ZmNiZTNmMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMDmtJlcJMdhAhCv4NVcK+4FnjZezPr07LUUy3HDpmaG27auNEeOfSO Kmfk+j6XLCvoBlpC0Rm6qofjwP+DP5SOQhDfMn9aT33GmzoBr2a01m2SmcuxmV2s 4hJxBtzLi8yMK7y6skrEtC9V2S3MQfFNJZfVKfolCatBaOvkWqh3Aaq78k/Yy8AU H1Ny/tTXnlIfl5krjKVg+tIqCpJdRqifJ1xJmt72QHRPfczHAjthJmR4dBaieJTn IG+drozvuNMelWc7HI+UZSedCglMbfQCEKIECQhE6eAbUC9BiXuocFP674ZxBSbS ry96053fqr0YzPtupAKnkKEytC54k1g= -----END CERTIFICATE-----Generated at Sun Apr 27 21:23:05 2025 by rpki-client