$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa File: d883bae7-3067-34d2-b612-d4b17b17fb12.roa (raw, json) Hash identifier: RuFz5onvBhpdfk7MfDvFomtxsqBtQ6Hi3Sn/JLNkAu8= Subject key identifier: 77:69:F3:38:39:8C:97:6C:69:4A:FA:03:66:50:F9:82:95:71:80:73 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F43285849A784C446065837A9D31D9100 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 168.225.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c4:46:06:58:37:a9:d3:1d:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2a9a1a1c-3196-459a-abc1-2bd573402d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:3b:6a:b9:d4:19:cf:73:91:c9:70:74:c7: 44:97:02:92:bd:21:46:7b:3c:37:8c:66:51:20:eb: 38:49:d5:a7:37:20:f4:d7:74:be:7f:7c:4f:91:69: 90:90:38:4d:fc:23:51:31:6b:91:77:fd:94:70:79: b7:62:9c:87:02:b2:34:34:8c:13:75:e2:bd:e5:24: 80:af:ce:e5:ea:fa:6a:aa:bd:00:33:ce:b0:8d:46: b0:ae:75:85:41:2f:9d:ee:dc:39:a4:1d:6a:b1:31: 5f:f7:40:0e:b4:2d:30:8e:8d:22:2b:47:3f:dd:22: 5a:ad:b5:42:85:58:10:f7:cd:3a:07:e4:a9:94:72: 1d:75:35:d0:d4:12:d3:97:79:65:c9:c3:87:ad:00: 5e:80:64:ec:47:17:19:74:46:57:99:1c:3a:6e:42: 07:04:51:4c:b1:f3:27:50:ee:ee:4d:11:f2:78:a3: 0a:4d:d7:8f:ae:6c:75:13:8e:82:fd:82:4a:04:06: 04:9a:a8:dd:8b:b7:01:dd:93:ac:7f:94:19:26:72: 75:9b:a7:c6:a5:54:ef:b3:01:dc:66:7e:1a:67:b3: dd:e5:d7:7e:30:c3:bd:1d:61:dd:7a:c4:06:b4:3e: 64:ea:9f:03:58:50:ce:88:6b:88:c9:16:87:45:62: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:69:F3:38:39:8C:97:6C:69:4A:FA:03:66:50:F9:82:95:71:80:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e7:7e:55:17:c6:14:79:7f:9f:57:d8:6d:97:1f:58:4d:18: 11:4b:78:2f:78:c0:d8:59:33:e4:87:24:d0:9d:5a:c4:8a:94: 5a:06:46:04:d6:2f:0f:87:b3:8f:e7:ef:77:c2:21:f0:8d:f6: f7:ac:46:60:82:84:4a:6f:f6:0f:db:91:0e:4d:29:e8:4b:75: e9:27:b2:44:96:a2:eb:06:fb:fe:d9:b5:ac:30:6b:b4:d2:8a: 02:19:2a:07:5f:ad:78:7a:ec:ea:3c:3d:43:19:1a:d0:5d:06: f9:b7:4a:ce:48:d2:ce:53:5e:5b:9b:5f:9e:05:72:fd:26:fa: fa:16:32:71:39:e4:a1:19:20:61:83:69:e5:0a:c4:9b:f0:fa: e9:3f:0e:99:89:03:a8:8c:80:00:6e:87:a3:26:16:eb:ac:ba: ca:d6:7c:ee:1c:f6:7b:21:14:8f:72:92:8f:9c:9e:96:7c:df: ae:7e:82:99:fc:71:35:59:e1:e3:84:70:ea:e3:dd:66:7f:f0: 44:73:5d:3a:2e:cf:e7:2d:c9:09:96:5a:ac:03:81:06:6b:50: 9a:63:5f:8a:c5:ce:99:30:f2:b9:35:24:ab:a7:f1:44:dd:89: 37:da:e1:1e:97:ae:59:31:2b:bb:e5:d1:04:a6:22:6f:f2:9a: 38:dc:4d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMRGBlg3qdMdkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmE5YTFhMWMtMzE5Ni00NTlhLWFiYzEtMmJkNTczNDAyZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEg7arnUGc9zkclwdMdElwKSvSFGezw3jGZR IOs4SdWnNyD013S+f3xPkWmQkDhN/CNRMWuRd/2UcHm3YpyHArI0NIwTdeK95SSA r87l6vpqqr0AM86wjUawrnWFQS+d7tw5pB1qsTFf90AOtC0wjo0iK0c/3SJarbVC hVgQ9806B+SplHIddTXQ1BLTl3llycOHrQBegGTsRxcZdEZXmRw6bkIHBFFMsfMn UO7uTRHyeKMKTdePrmx1E46C/YJKBAYEmqjdi7cB3ZOsf5QZJnJ1m6fGpVTvswHc Zn4aZ7Pd5dd+MMO9HWHdesQGtD5k6p8DWFDOiGuIyRaHRWI14wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdp8zg5jJdsaUr6A2ZQ+YKVcYBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZDg4M2JhZTctMzA2Ny0z NGQyLWI2MTItZDRiMTdiMTdmYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/nflUXxhR5f59X2G2XH1hNGBFLeC94wNhZM+SHJNCdWsSKlFoGRgTW Lw+Hs4/n73fCIfCN9vesRmCChEpv9g/bkQ5NKehLdeknskSWousG+/7Ztawwa7TS igIZKgdfrXh67Oo8PUMZGtBdBvm3Ss5I0s5TXlubX54Fcv0m+voWMnE55KEZIGGD aeUKxJvw+uk/DpmJA6iMgABuh6MmFuususrWfO4c9nshFI9yko+cnpZ8365+gpn8 cTVZ4eOEcOrj3WZ/8ERzXTouz+ctyQmWWqwDgQZrUJpjX4rFzpkw8rk1JKun8UTd iTfa4R6XrlkxK7vl0QSmIm/ymjjcTUo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:37 2025 by rpki-client