$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa File: 632ed596-c745-3b4c-bcc9-794802c128a8.roa (raw, json) Hash identifier: pc2CA5n9loSJRxfT/do/A+1h2WP8/wVQVe03mnkyMC4= Subject key identifier: F4:7A:5E:F2:6F:41:82:BB:27:3A:0F:DB:87:58:F8:B7:88:F1:81:82 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A0A9FD045953523F6F22E4E80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa Signing time: Sun 01 Jun 2025 01:00:49 +0000 ROA not before: Sun 01 Jun 2025 01:00:49 +0000 ROA not after: Sat 30 Aug 2025 01:00:49 +0000 asID: 16433 IP address blocks: 167.224.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:9f:d0:45:95:35:23:f6:f2:2e:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 1 01:00:49 2025 GMT Not After : Aug 30 01:00:49 2025 GMT Subject: CN=bef7243a-6e68-4d80-bdb1-3c91f96aa628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:4b:d1:03:61:2d:ec:e5:a1:be:18:1b:66: b7:80:35:6c:c0:5f:54:e2:02:36:06:f9:ea:d8:3a: cc:54:e0:c3:0e:ea:a4:dc:14:81:d8:c3:4c:e1:fa: 21:1d:fb:5c:0b:f1:4c:e3:cb:f1:96:8d:d4:f8:78: 17:be:38:fb:76:9e:a6:56:71:17:28:99:09:55:d0: ac:68:fc:cf:07:5d:c5:94:34:be:bb:47:4b:dc:23: 6f:0a:bd:bc:b6:7e:28:3e:00:e4:85:42:b3:87:40: e2:98:2c:18:5d:ec:07:9e:20:06:41:6d:0b:9e:49: 5a:db:3e:96:00:76:3b:80:74:ea:44:a6:39:5d:54: 6b:46:8f:63:4d:6e:06:70:6d:f4:49:b3:88:46:66: 60:95:ac:29:42:0f:c5:4b:f3:29:93:81:a5:d2:f2: 2b:19:2a:dd:3a:60:6f:13:79:f9:2c:f1:4e:e4:ca: 8d:d0:60:eb:59:7e:50:9c:b7:40:b4:68:f8:b1:4b: d8:89:b9:57:72:10:2d:1c:54:f3:25:5b:76:dd:82: c9:fa:5e:e0:e6:b6:ef:67:51:c8:cf:52:cf:f2:af: 55:45:66:42:88:f5:77:3d:12:87:b9:4c:9d:04:4d: d1:5d:80:a9:1e:28:ab:66:4c:7d:40:ca:16:be:e9: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7A:5E:F2:6F:41:82:BB:27:3A:0F:DB:87:58:F8:B7:88:F1:81:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 167.224.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:61:50:bd:cf:62:23:b5:88:6b:7c:01:9c:4d:22:6d:b2:45: 77:f6:77:fd:7d:ee:b1:45:dc:a9:70:bd:4e:9a:1a:ff:0f:22: 7d:53:89:fd:dd:e9:a5:d6:56:c7:aa:5d:0a:ee:78:11:13:18: 62:32:db:a2:a1:81:4c:e2:e1:09:9a:ff:01:c6:e2:1b:80:2a: 86:19:d3:03:c1:d2:f7:e4:58:87:bc:61:a1:88:10:6b:66:40: b6:90:72:f0:ef:ec:8b:ab:b4:e8:21:97:d1:a7:99:90:bb:79: 2b:78:19:ae:da:1f:41:08:2d:d9:f1:e7:14:57:7f:c5:ed:f6: fe:dc:14:c1:18:7d:93:26:02:aa:2e:0c:d7:af:f5:70:10:59: ba:c5:bf:d6:1c:53:cd:88:ee:a8:17:09:64:37:b3:d8:28:e7: e7:09:6c:b6:0f:0b:d9:a3:4f:06:6f:5f:4a:e1:00:1e:64:d5: e3:c0:db:c6:ac:3e:d3:b0:10:c6:0e:fb:79:7f:0f:13:df:76: 0f:50:76:cf:92:c5:a2:69:e3:b3:18:fd:29:13:5d:91:7a:19: 03:26:85:f1:67:de:07:83:38:9f:e1:0f:0a:24:9f:19:d7:08: 71:ba:58:6c:f6:d3:53:fa:64:eb:c1:73:0d:0d:3f:d6:38:7f: 11:0c:03:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoKn9BFlTUj9vIuToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk YmVmNzI0M2EtNmU2OC00ZDgwLWJkYjEtM2M5MWY5NmFhNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv9L0QNhLezlob4YG2a3gDVswF9U4gI2Bvnq 2DrMVODDDuqk3BSB2MNM4fohHftcC/FM48vxlo3U+HgXvjj7dp6mVnEXKJkJVdCs aPzPB13FlDS+u0dL3CNvCr28tn4oPgDkhUKzh0DimCwYXewHniAGQW0Lnkla2z6W AHY7gHTqRKY5XVRrRo9jTW4GcG30SbOIRmZglawpQg/FS/Mpk4Gl0vIrGSrdOmBv E3n5LPFO5MqN0GDrWX5QnLdAtGj4sUvYiblXchAtHFTzJVt23YLJ+l7g5rbvZ1HI z1LP8q9VRWZCiPV3PRKHuUydBE3RXYCpHiirZkx9QMoWvumrLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR6XvJvQYK7JzoP24dY+LeI8YGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNjMyZWQ1OTYtYzc0NS0z YjRjLWJjYzktNzk0ODAyYzEyOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp+A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdhUL3PYiO1iGt8AZxNIm2yRXf2d/197rFF3KlwvU6aGv8PIn1Tif3d 6aXWVseqXQrueBETGGIy26KhgUzi4Qma/wHG4huAKoYZ0wPB0vfkWIe8YaGIEGtm QLaQcvDv7IurtOghl9GnmZC7eSt4Ga7aH0EILdnx5xRXf8Xt9v7cFMEYfZMmAqou DNev9XAQWbrFv9YcU82I7qgXCWQ3s9go5+cJbLYPC9mjTwZvX0rhAB5k1ePA28as PtOwEMYO+3l/DxPfdg9Qds+SxaJp47MY/SkTXZF6GQMmhfFn3geDOJ/hDwoknxnX CHG6WGz201P6ZOvBcw0NP9Y4fxEMA1M= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:40 2025 by rpki-client