$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa File: 7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa (raw, json) Hash identifier: a/Qq5MZxBhV2jZaKk4YGGjNKtlTa6yBZ/kQbocz+gmg= Subject key identifier: 9C:9A:08:7F:29:61:74:A5:E3:A7:E8:BC:89:56:BD:64:A7:85:F7:A7 Certificate issuer: /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Certificate serial: 010D0C9F43285849CE9A53CE696A3327B9119520 Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 53597 IP address blocks: 162.248.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:53:ce:69:6a:33:27:b9:11:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=87eda9c2-405f-4bd7-a26e-c65ddd4f06d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:da:a2:73:57:ce:97:1e:12:6f:a3:7b:72: 78:9d:6d:73:00:d6:d9:c8:5e:3b:b8:d8:e7:54:98: 5c:39:c9:f3:49:46:12:ec:27:a5:87:e1:47:81:32: e7:de:65:36:c1:d5:a7:bc:76:47:fb:a1:79:7c:2a: 0a:d3:b3:f7:20:a5:51:ea:66:3c:df:db:ec:b2:eb: 6f:04:99:b3:58:b6:f8:d4:db:6d:58:83:cb:49:ac: bb:fc:63:08:0d:f0:a1:5e:3d:e3:1a:b0:16:25:f2: ee:59:45:d3:22:f5:2a:c8:6b:f8:c0:6b:56:28:6f: 5e:53:7d:fb:af:bc:dc:63:09:b2:36:a9:e4:7f:88: c2:11:4e:4b:36:cb:0a:93:06:87:01:c0:a1:1b:44: b1:04:8a:22:95:71:3b:d6:bd:f6:14:d3:2d:40:5d: ee:7c:b6:41:c1:82:14:c9:d0:8e:77:04:40:e2:71: a5:73:21:70:4b:26:db:14:c6:3e:22:2d:c4:45:5f: 9c:65:95:be:90:e1:d9:6b:e7:4e:ce:74:79:28:74: 32:b7:75:85:a4:a8:04:03:36:1e:77:72:d0:e1:a3: 43:79:06:78:86:eb:11:27:d3:9e:d0:41:51:71:36: 62:6c:e2:fd:bc:f7:14:92:36:48:28:bf:a2:10:9b: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9A:08:7F:29:61:74:A5:E3:A7:E8:BC:89:56:BD:64:A7:85:F7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl X509v3 Authority Key Identifier: keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer sbgp-ipAddrBlock: critical IPv4: 162.248.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2e:03:50:3a:aa:93:bf:6c:0f:22:17:66:19:e2:b5:75:80: 70:a4:b7:44:df:a1:d0:25:46:71:0a:6b:b6:37:32:a1:ba:65: 83:8d:ef:93:ed:8c:d4:ec:92:2f:78:13:1e:00:6c:a7:17:0e: 6e:57:dd:0c:25:86:d6:eb:9d:ef:03:66:68:14:b2:d2:f8:b3: 24:a1:40:52:70:7d:4c:34:3d:ad:c2:b7:93:d6:de:27:6f:9f: a7:9b:11:69:35:5e:3c:29:54:41:9b:a0:7b:05:d0:64:27:a6: e4:0c:f9:4b:ba:07:6a:b0:b8:6d:67:de:cf:ff:d5:57:8c:ea: 1b:6f:eb:00:5e:01:fc:05:1f:2d:9f:c1:70:d3:f6:50:d9:8b: 05:b5:cb:98:38:62:15:c9:6b:2c:82:25:25:2e:b2:ef:df:4f: 6f:f5:31:1a:d2:ce:e1:c8:d2:e6:a6:02:ba:ae:2f:56:10:a6: de:b1:87:e7:fc:70:ae:30:17:6c:8f:e2:7e:a6:58:ba:1e:22: 10:17:9c:7d:23:db:3a:ab:0b:86:f1:74:b1:2f:33:cf:86:0c: c5:00:77:13:1c:ce:34:bf:f4:5e:0c:a1:72:92:c6:34:db:fc: 0b:ad:57:ed:d5:12:31:36:3c:a3:10:4c:db:1b:f6:1b:73:02: 0f:49:87:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlPOaWozJ7kRlSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2 NGJjMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODdlZGE5YzItNDA1Zi00YmQ3LWEyNmUtYzY1ZGRkNGYwNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDHaonNXzpceEm+je3J4nW1zANbZyF47uNjn VJhcOcnzSUYS7Celh+FHgTLn3mU2wdWnvHZH+6F5fCoK07P3IKVR6mY839vssutv BJmzWLb41NttWIPLSay7/GMIDfChXj3jGrAWJfLuWUXTIvUqyGv4wGtWKG9eU337 r7zcYwmyNqnkf4jCEU5LNssKkwaHAcChG0SxBIoilXE71r32FNMtQF3ufLZBwYIU ydCOdwRA4nGlcyFwSybbFMY+Ii3ERV+cZZW+kOHZa+dOznR5KHQyt3WFpKgEAzYe d3LQ4aNDeQZ4husRJ9Oe0EFRcTZibOL9vPcUkjZIKL+iEJslkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyaCH8pYXSl46fovIlWvWSnhfenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvN2FhOGRjMjUtMDFiMi0z ZDU0LWJkYzktYzAxZjRlMDMyMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4 MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5 NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIguA1A6qpO/bA8iF2YZ4rV1gHCkt0TfodAlRnEKa7Y3MqG6ZYON75Pt jNTski94Ex4AbKcXDm5X3Qwlhtbrne8DZmgUstL4syShQFJwfUw0Pa3Ct5PW3idv n6ebEWk1XjwpVEGboHsF0GQnpuQM+Uu6B2qwuG1n3s//1VeM6htv6wBeAfwFHy2f wXDT9lDZiwW1y5g4YhXJayyCJSUusu/fT2/1MRrSzuHI0uamArquL1YQpt6xh+f8 cK4wF2yP4n6mWLoeIhAXnH0j2zqrC4bxdLEvM8+GDMUAdxMczjS/9F4MoXKSxjTb /AutV+3VEjE2PKMQTNsb9htzAg9Jhxc= -----END CERTIFICATE-----Generated at Mon Jun 16 07:02:53 2025 by rpki-client