$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7d1982a8-284b-3227-b752-936276f7f287.roa File: 7d1982a8-284b-3227-b752-936276f7f287.roa (raw, json) Hash identifier: LNVs6IE9VDrPbopK/MMxUk2KU+zMw1YZmbLIpDLLz50= Subject key identifier: 47:48:B3:48:79:C3:AA:C0:FB:AF:A5:F1:0E:DC:1E:7E:72:D5:00:95 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F432858499829BE916E3702061F309340 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7d1982a8-284b-3227-b752-936276f7f287.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 63360 IP address blocks: 168.225.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:be:91:6e:37:02:06:1f:30:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=4af0970f-e13e-4661-a7de-bd1469e17eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:6f:7b:84:df:cd:8f:c4:5d:17:0c:f2:f5: 53:3a:56:83:b7:f3:ca:77:ae:6d:41:c1:f6:4f:cf: ec:c4:ce:8e:d6:67:e0:43:21:8d:14:ff:43:a1:0b: ff:f0:86:db:c4:ed:49:1a:e5:93:ef:9a:fc:2a:af: 76:64:fc:9f:88:5c:25:07:21:6a:04:df:ac:19:22: 73:5d:ce:96:04:78:8f:d5:f5:58:7a:9a:91:5d:14: 0e:2f:df:a2:d0:23:56:1c:d5:c1:ed:cb:18:14:38: 0a:6b:93:52:2e:fb:34:39:ed:01:f0:81:99:b7:71: 85:b7:f7:78:5e:a2:1e:33:36:42:55:f7:4b:f6:f8: d6:8f:c9:73:37:b6:f4:b2:96:c2:99:e5:f2:ed:d4: be:f8:4a:59:53:67:06:36:0c:de:f6:1d:0e:e5:dd: d9:fe:1a:ad:48:36:08:08:9a:20:b1:72:eb:ab:59: 82:bf:7c:32:47:13:85:c7:dd:9f:13:92:ea:8e:03: 0c:23:be:1f:e3:80:3f:db:17:63:93:fe:2f:e1:ac: c3:b4:5b:de:aa:2f:bc:8c:44:fd:aa:4d:e1:c1:8c: 51:95:24:bc:32:6b:72:70:ee:98:d2:f0:15:b2:82: de:d8:cc:bc:fe:61:69:87:1c:17:4d:f3:67:4a:a0: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:B3:48:79:C3:AA:C0:FB:AF:A5:F1:0E:DC:1E:7E:72:D5:00:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7d1982a8-284b-3227-b752-936276f7f287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:de:d2:f8:8e:ac:d3:cd:34:5a:37:0b:89:d8:4a:ca:fd:67: a0:bd:bb:55:59:66:b6:9f:24:b5:85:83:52:35:8d:cd:4d:fa: 08:06:8b:eb:4b:b4:83:94:ef:b0:e9:b2:16:90:44:e2:86:b8: 2e:04:9b:88:b6:a6:c0:01:72:a2:f9:9d:0e:c0:c8:5e:3f:d7: 8a:ad:80:7a:88:54:ef:18:fe:1c:e3:d2:b1:6f:6c:04:07:75: 8d:f5:cd:89:f3:8e:b5:ec:01:ac:fb:e3:72:c6:ea:d3:e9:8a: 4d:fb:ff:58:56:5a:7d:93:6b:db:1e:24:49:39:5e:cf:91:a2: 14:47:4d:88:b1:12:14:97:2e:1d:80:f2:d1:3a:eb:42:44:f6: 53:c9:4d:a3:49:9d:c7:37:86:35:49:0e:7b:49:b0:70:f4:34: d2:e3:55:1c:b7:e0:b0:af:44:77:bb:08:a1:3d:92:ea:fc:51: 34:76:6b:fc:05:0c:9a:74:7b:8f:5c:c9:c4:28:20:f6:c3:06: 1e:4e:35:08:72:01:96:45:18:d0:da:9f:88:df:3e:21:3c:44: 9d:8c:c1:e8:4f:e6:4d:44:74:a7:6e:4e:ea:8c:13:17:b9:d4: 1b:e7:6c:76:cd:b9:c7:16:7f:0c:85:5d:c3:3d:ed:d7:0b:b4: 0e:4c:b1:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKb6RbjcCBh8wk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NGFmMDk3MGYtZTEzZS00NjYxLWE3ZGUtYmQxNDY5ZTE3ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZpve4TfzY/EXRcM8vVTOlaDt/PKd65tQcH2 T8/sxM6O1mfgQyGNFP9DoQv/8IbbxO1JGuWT75r8Kq92ZPyfiFwlByFqBN+sGSJz Xc6WBHiP1fVYepqRXRQOL9+i0CNWHNXB7csYFDgKa5NSLvs0Oe0B8IGZt3GFt/d4 XqIeMzZCVfdL9vjWj8lzN7b0spbCmeXy7dS++EpZU2cGNgze9h0O5d3Z/hqtSDYI CJogsXLrq1mCv3wyRxOFx92fE5LqjgMMI74f44A/2xdjk/4v4azDtFveqi+8jET9 qk3hwYxRlSS8MmtycO6Y0vAVsoLe2My8/mFphxwXTfNnSqDgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdIs0h5w6rA+6+l8Q7cHn5y1QCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvN2QxOTgyYTgtMjg0Yi0z MjI3LWI3NTItOTM2Mjc2ZjdmMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3e0viOrNPNNFo3C4nYSsr9Z6C9u1VZZrafJLWFg1I1jc1N+ggGi+tL tIOU77DpshaQROKGuC4Em4i2psABcqL5nQ7AyF4/14qtgHqIVO8Y/hzj0rFvbAQH dY31zYnzjrXsAaz743LG6tPpik37/1hWWn2Ta9seJEk5Xs+RohRHTYixEhSXLh2A 8tE660JE9lPJTaNJncc3hjVJDntJsHD0NNLjVRy34LCvRHe7CKE9kur8UTR2a/wF DJp0e49cycQoIPbDBh5ONQhyAZZFGNDan4jfPiE8RJ2MwehP5k1EdKduTuqMExe5 1BvnbHbNuccWfwyFXcM97dcLtA5MsdQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:22 2025 by rpki-client