$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa File: 7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa (raw, json) Hash identifier: Ub6lHzisLHy6Flc+KLDlcm7y9ddXIYGz2YhQdvr3Wy0= Subject key identifier: 4C:70:3A:59:A1:66:BF:DB:A7:31:66:98:35:81:5A:E9:74:98:FF:57 Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Certificate serial: 010D0C9F43285849D85F83B6ABADCDD3A1B7CA80 Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 25945 IP address blocks: 162.253.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:83:b6:ab:ad:cd:d3:a1:b7:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=05fbb50c-2a97-4813-817d-4b2ad5f7fc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:ab:22:1a:3e:5c:ea:cb:85:ca:45:85:13: d6:d3:d6:fa:0b:f7:cf:03:5f:cb:a9:6d:6f:b9:07: 72:76:d5:20:6b:42:6f:a2:30:da:2c:0f:5e:d8:97: 03:68:a6:8d:dc:04:7d:94:6a:f2:5b:9e:5b:40:1d: 0a:72:3d:4f:22:84:46:16:93:5a:c0:0b:64:e7:58: 6a:43:5c:d4:da:90:2c:3a:f4:96:b6:6e:e1:b1:29: c9:71:65:f6:92:05:2a:27:53:37:c1:79:eb:0b:4a: a5:09:bc:4c:c2:34:87:41:f4:93:9c:db:e0:db:11: 69:de:3d:50:42:86:4d:e1:fa:d2:ba:60:06:68:af: d1:5b:08:83:65:7e:5d:d0:30:23:ad:7f:3e:ea:df: 92:84:b2:23:99:27:26:34:f9:a0:bc:a4:db:db:ad: 70:29:d9:76:41:49:2e:a0:ef:7d:f2:e5:7c:89:7f: e0:f5:b8:c6:09:d5:62:25:5f:66:15:71:74:fb:92: fd:b7:86:76:99:87:9f:d1:f9:01:55:74:0f:75:85: d4:c7:e5:8c:21:62:a9:e7:81:7a:b5:bd:f1:0a:48: 67:33:ae:2a:29:41:7a:e7:69:8f:ba:92:9f:f8:bc: 68:96:f8:7c:85:f7:7f:f8:b6:9a:24:83:10:c8:32: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:70:3A:59:A1:66:BF:DB:A7:31:66:98:35:81:5A:E9:74:98:FF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl X509v3 Authority Key Identifier: keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer sbgp-ipAddrBlock: critical IPv4: 162.253.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b7:c4:c2:19:c4:59:1e:6f:c7:b1:33:a0:ec:9d:04:af:08: 96:47:8f:d6:9a:44:f9:3f:ba:b2:a4:2c:d9:c2:51:0d:b6:25: 0e:21:73:d4:4e:d0:0a:65:29:60:21:e9:1c:ed:06:0e:dd:cd: 2b:16:ed:46:f9:ce:4f:c0:60:22:41:96:ba:c2:07:c6:b7:fb: dd:e3:3d:cf:e4:44:81:c0:dc:a5:a1:69:ad:e7:ca:15:f4:ab: 35:30:f0:c6:5b:95:39:09:7f:87:ca:d7:c5:0a:86:3d:d7:0d: bf:c7:1c:18:bc:82:4a:56:f3:22:16:2c:78:03:8b:ad:78:58: b6:8c:7f:bc:27:57:cc:42:3b:eb:a8:eb:1f:3b:4d:0f:dd:33: f8:6e:f8:1a:61:1a:5a:10:1d:11:2d:dd:80:71:cd:ca:ba:b1: f0:62:1d:a3:87:8c:cf:02:8c:12:c0:66:9b:04:8b:0f:60:c2: d0:17:11:18:8e:84:34:29:8f:1c:11:89:df:c4:cc:e1:9a:10: 2c:35:c1:f8:59:0a:aa:2e:3e:c4:9b:b9:6d:e1:12:be:ce:c7: 68:79:b8:13:03:42:38:bf:ea:ae:0b:ba:db:c2:9d:b2:61:7d: 9c:1c:4f:b5:88:af:7b:00:cf:d9:81:12:b9:b6:52:d3:b8:07: ad:37:ee:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4O2q63N06G3yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy ZDVhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MDVmYmI1MGMtMmE5Ny00ODEzLTgxN2QtNGIyYWQ1ZjdmYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16arIho+XOrLhcpFhRPW09b6C/fPA1/LqW1v uQdydtUga0JvojDaLA9e2JcDaKaN3AR9lGryW55bQB0Kcj1PIoRGFpNawAtk51hq Q1zU2pAsOvSWtm7hsSnJcWX2kgUqJ1M3wXnrC0qlCbxMwjSHQfSTnNvg2xFp3j1Q QoZN4frSumAGaK/RWwiDZX5d0DAjrX8+6t+ShLIjmScmNPmgvKTb261wKdl2QUku oO998uV8iX/g9bjGCdViJV9mFXF0+5L9t4Z2mYef0fkBVXQPdYXUx+WMIWKp54F6 tb3xCkhnM64qKUF652mPupKf+Lxolvh8hfd/+LaaJIMQyDKXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExwOlmhZr/bpzFmmDWBWul0mP9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvN2IyZmRiY2YtZTE0ZC0z YTc4LWI0ZjUtNTMyZTczZjA3YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4 MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3 M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW3xMIZxFkeb8exM6DsnQSvCJZHj9aaRPk/urKkLNnCUQ22JQ4hc9RO 0AplKWAh6RztBg7dzSsW7Ub5zk/AYCJBlrrCB8a3+93jPc/kRIHA3KWhaa3nyhX0 qzUw8MZblTkJf4fK18UKhj3XDb/HHBi8gkpW8yIWLHgDi614WLaMf7wnV8xCO+uo 6x87TQ/dM/hu+BphGloQHREt3YBxzcq6sfBiHaOHjM8CjBLAZpsEiw9gwtAXERiO hDQpjxwRid/EzOGaECw1wfhZCqouPsSbuW3hEr7Ox2h5uBMDQji/6q4LutvCnbJh fZwcT7WIr3sAz9mBErm2UtO4B6037ms= -----END CERTIFICATE-----Generated at Mon Jun 16 00:43:29 2025 by rpki-client