$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa File: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json) Hash identifier: 1Y0+fCTZSSpNzSFUgssWRx79731sQnPxbQVIPg48NAA= Subject key identifier: D7:ED:B5:80:65:4E:C7:13:ED:2B:60:FE:8A:A2:BF:BB:A5:53:A5:70 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F43285849F9DFBEC5E5838F740A7AC6C0 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 18855 IP address blocks: 160.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:be:c5:e5:83:8f:74:0a:7a:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=e02db5e7-2db9-477c-bdf7-e78e3e2b4a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:fc:6f:77:69:fa:57:32:7d:7c:ed:3f:86: 85:31:c3:e5:86:85:63:6e:b0:8f:62:48:83:21:4b: ed:23:23:f8:90:ee:7b:a3:73:1c:82:cb:13:e0:74: 4e:99:77:43:57:e2:3a:ad:1b:51:4b:78:1b:08:70: 7f:b9:20:f6:ec:d3:e6:35:dc:c0:46:9f:f4:66:bb: dc:03:ba:d1:c9:a3:7c:55:31:d7:b5:d0:d6:b3:3c: 8e:c5:3e:b0:51:91:f3:16:7f:6b:c6:e3:86:a7:c3: 7f:d2:09:b8:91:be:2f:53:1e:e0:bf:48:54:e1:5d: 54:d8:8d:ce:5a:a5:d1:6b:a6:2e:bb:d5:b5:af:3d: 08:e2:30:b9:c1:6b:a6:02:ba:fb:46:28:fd:bd:ca: b5:a8:a9:67:bc:1a:56:a1:e6:47:fa:22:b4:3b:62: 64:22:01:02:14:24:8c:6f:0b:69:be:ea:1f:7d:80: a2:44:39:e2:ec:5b:7d:de:8e:26:ff:44:3b:e3:dd: ac:58:af:08:a2:6b:86:00:70:a9:e8:c3:fe:2f:62: e4:6b:6c:ec:43:54:bb:af:d1:a7:04:37:b8:c1:6c: a7:7d:93:4a:96:31:09:a7:80:46:04:71:1b:88:fe: 9c:03:d6:1a:2f:4c:b9:39:ab:aa:bd:23:32:b7:91: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:ED:B5:80:65:4E:C7:13:ED:2B:60:FE:8A:A2:BF:BB:A5:53:A5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 160.223.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cf:39:33:ee:60:8c:cf:9a:59:e6:d6:e0:2b:0f:e2:e8:a1: d3:d4:38:5f:ec:67:30:52:8f:2f:b2:d9:ca:f9:57:a3:d4:ef: 0c:00:ae:48:a1:a6:36:c1:f8:ea:8d:85:e1:a2:da:44:14:1f: 83:f2:6c:37:a2:99:ff:f8:14:9b:e7:10:60:bb:fb:91:d7:2c: 4a:3b:21:d7:16:3e:13:23:86:5c:eb:f0:d6:3c:c3:0c:9d:54: dc:54:3e:8b:12:1a:3d:23:08:ef:3e:6e:22:e5:05:7c:b5:85: 6d:20:3e:07:9c:2c:6f:d6:74:c1:f0:de:41:e1:d2:4b:67:2f: f0:5f:b6:99:1b:63:3c:18:91:bd:12:b2:e7:c5:c1:cb:a0:7e: 08:03:68:e4:c0:2e:84:53:3c:d2:4d:00:ec:94:92:f3:ed:bd: 40:05:8b:fe:93:34:bc:e3:87:3d:81:ec:1e:9b:0c:12:8b:7d: ed:6b:e2:d3:cb:e1:70:1c:16:4f:fa:d0:bd:18:31:cc:3b:1d: e6:4b:88:9f:a7:0d:57:69:37:b1:62:ec:89:dc:74:fc:fd:43: e9:53:9f:70:9f:08:d1:11:4e:d8:a0:81:63:4e:cd:a2:22:1b: 14:08:e4:60:d1:07:8e:4c:28:d6:d0:c0:62:6c:ef:65:75:96: 86:9c:b9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn5377F5YOPdAp6xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk ZTAyZGI1ZTctMmRiOS00NzdjLWJkZjctZTc4ZTNlMmI0YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmL8b3dp+lcyfXztP4aFMcPlhoVjbrCPYkiD IUvtIyP4kO57o3McgssT4HROmXdDV+I6rRtRS3gbCHB/uSD27NPmNdzARp/0Zrvc A7rRyaN8VTHXtdDWszyOxT6wUZHzFn9rxuOGp8N/0gm4kb4vUx7gv0hU4V1U2I3O WqXRa6Yuu9W1rz0I4jC5wWumArr7Rij9vcq1qKlnvBpWoeZH+iK0O2JkIgECFCSM bwtpvuoffYCiRDni7Ft93o4m/0Q7492sWK8IomuGAHCp6MP+L2Lka2zsQ1S7r9Gn BDe4wWynfZNKljEJp4BGBHEbiP6cA9YaL0y5OauqvSMyt5Hy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfttYBlTscT7Stg/oqiv7ulU6VwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvOGE0NjhlNDctOGE2ZS0z Zjk2LWIwMmUtYTM0MzRmMTI0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjPOTPuYIzPmlnm1uArD+LoodPUOF/sZzBSjy+y2cr5V6PU7wwArkih pjbB+OqNheGi2kQUH4PybDeimf/4FJvnEGC7+5HXLEo7IdcWPhMjhlzr8NY8wwyd VNxUPosSGj0jCO8+biLlBXy1hW0gPgecLG/WdMHw3kHh0ktnL/BftpkbYzwYkb0S sufFwcugfggDaOTALoRTPNJNAOyUkvPtvUAFi/6TNLzjhz2B7B6bDBKLfe1r4tPL 4XAcFk/60L0YMcw7HeZLiJ+nDVdpN7Fi7IncdPz9Q+lTn3CfCNERTtiggWNOzaIi GxQI5GDRB45MKNbQwGJs72V1loacuW0= -----END CERTIFICATE-----Generated at Wed Jun 18 14:21:11 2025 by rpki-client