$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa File: f8eaaa80-a751-3137-a927-fda10e9f5161.roa (raw, json) Hash identifier: tn80TWVR/EzSndCbK6CYnEZHPdH3uFHFkfmRrPi66+8= Subject key identifier: 1E:9B:CA:B0:D5:E3:9D:A8:57:6C:F2:95:AA:46:C8:A5:F6:91:CE:56 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F432858499829BE790FF9D903B2A13F80 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 63360 IP address blocks: 168.225.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:be:79:0f:f9:d9:03:b2:a1:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=55262574-b9e2-4d36-9f33-881d8de31e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:29:47:69:75:57:12:12:53:c0:38:cf:a5: 9b:7d:c1:76:bb:fc:31:4f:ef:bf:ba:3f:11:4f:e7: 29:03:d1:e9:56:4b:98:80:68:fd:0b:2c:f3:69:da: 73:96:69:3e:9e:06:54:71:e6:46:21:6e:1a:5c:84: 1a:53:2f:4f:46:cb:75:23:43:09:3b:6c:f8:80:b1: 21:0a:ca:82:1e:ba:1f:d4:3f:2a:aa:4f:2b:a7:ae: 04:0c:c4:af:aa:0c:11:8a:19:8f:bc:59:ca:ef:55: 63:2e:c0:88:4e:44:e5:47:00:d4:94:d4:d8:a8:41: 41:f8:b6:93:50:f3:58:ba:3c:75:77:1c:9e:2b:0b: 79:60:df:85:8b:02:55:d3:f9:7e:15:de:86:68:d0: 72:0b:7b:c5:c5:a2:b4:98:f8:5d:e3:56:45:78:f3: 71:95:ad:cd:9c:c3:d5:47:9c:c1:ab:16:52:08:fc: ca:99:7a:d0:6d:22:01:04:91:5f:56:d5:7d:a8:45: b0:d5:95:cf:00:c9:25:8b:bb:86:bc:a8:c6:cf:dc: 89:20:f3:ae:c9:f2:bb:0e:ba:61:20:ec:7c:99:2c: 02:39:05:ab:d9:79:b3:42:7d:60:a0:53:db:2e:f7: 76:22:e8:5c:15:79:1c:e3:cf:ef:e4:08:3d:c0:c0: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9B:CA:B0:D5:E3:9D:A8:57:6C:F2:95:AA:46:C8:A5:F6:91:CE:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:23:3d:9d:4e:9e:64:ba:1c:75:86:83:a9:90:36:6e:20:70: 0d:3a:2e:39:fb:d5:52:77:bb:3f:c1:c0:ff:af:9e:f9:f8:5a: d6:b1:20:ea:1a:27:c3:61:e4:b7:15:20:04:c8:fb:7f:b3:3e: 06:73:92:79:0f:02:95:74:b8:d2:87:c3:af:51:9c:58:75:c3: a2:a5:e6:98:00:62:f8:95:86:60:a3:08:97:4d:20:81:15:28: ed:de:2b:1f:41:61:45:d2:be:17:e2:eb:08:f8:07:47:e3:51: 1f:ff:ec:58:0f:ce:d3:28:41:cb:31:08:cb:3b:5a:a4:42:05: 7d:64:9a:71:44:74:fb:8a:5d:82:f9:39:c1:83:07:36:89:b7: 0c:93:0b:db:25:a3:2f:dc:9a:09:7d:28:07:93:95:3f:61:b6: b9:e6:b1:21:18:e1:6a:54:46:e3:f7:7f:92:50:88:fb:e7:7e: a2:87:63:8b:46:19:eb:43:6d:b9:24:bc:c9:1d:73:5d:cb:b0: a1:1b:93:65:9d:24:40:c5:be:b6:a4:42:86:b0:70:7d:1b:4e: 0e:e6:0f:3c:b6:b3:c6:68:bd:84:22:c8:9e:87:86:65:1c:a9: c3:22:8f:ee:3f:eb:dd:d3:41:0d:e6:45:1b:f5:be:da:f1:d0: a1:bc:d1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKb55D/nZA7KhP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTUyNjI1NzQtYjllMi00ZDM2LTlmMzMtODgxZDhkZTMxZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz34pR2l1VxISU8A4z6WbfcF2u/wxT++/uj8R T+cpA9HpVkuYgGj9Cyzzadpzlmk+ngZUceZGIW4aXIQaUy9PRst1I0MJO2z4gLEh CsqCHrof1D8qqk8rp64EDMSvqgwRihmPvFnK71VjLsCITkTlRwDUlNTYqEFB+LaT UPNYujx1dxyeKwt5YN+FiwJV0/l+Fd6GaNByC3vFxaK0mPhd41ZFePNxla3NnMPV R5zBqxZSCPzKmXrQbSIBBJFfVtV9qEWw1ZXPAMkli7uGvKjGz9yJIPOuyfK7Drph IOx8mSwCOQWr2XmzQn1goFPbLvd2IuhcFXkc48/v5Ag9wMBfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6byrDV452oV2zylapGyKX2kc5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZjhlYWFhODAtYTc1MS0z MTM3LWE5MjctZmRhMTBlOWY1MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4jPZ1OnmS6HHWGg6mQNm4gcA06Ljn71VJ3uz/BwP+vnvn4WtaxIOoa J8Nh5LcVIATI+3+zPgZzknkPApV0uNKHw69RnFh1w6Kl5pgAYviVhmCjCJdNIIEV KO3eKx9BYUXSvhfi6wj4B0fjUR//7FgPztMoQcsxCMs7WqRCBX1kmnFEdPuKXYL5 OcGDBzaJtwyTC9sloy/cmgl9KAeTlT9htrnmsSEY4WpURuP3f5JQiPvnfqKHY4tG GetDbbkkvMkdc13LsKEbk2WdJEDFvrakQoawcH0bTg7mDzy2s8ZovYQiyJ6HhmUc qcMij+4/693TQQ3mRRv1vtrx0KG80Qk= -----END CERTIFICATE-----Generated at Sun Apr 27 07:24:14 2025 by rpki-client