$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa File: a92ebafa-35d6-34e6-aa72-020e917be372.roa (raw, json) Hash identifier: Oo9cNX76FB5T5Jyxp7AiOQouGIqP0Q2IxSvxVpar7og= Subject key identifier: E7:DC:E3:96:E3:D0:D2:B6:34:64:7C:2A:B3:09:8A:E7:0F:DB:5C:E7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849A089CC9D52F35F75F3BD9E60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 165.225.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:cc:9d:52:f3:5f:75:f3:bd:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=e39efc6d-a08c-4b13-a419-2d815a38a4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0d:b3:c4:16:ed:8d:0b:d0:3d:e2:1f:de:9e: e8:e9:30:ad:ba:8a:66:58:71:b7:b9:22:ab:15:cf: 69:c2:64:be:50:fa:b6:c4:14:98:16:ed:7f:38:d2: 6e:8a:d6:54:f7:eb:ac:bd:14:89:11:8e:c5:79:97: 18:c1:f9:ff:ea:44:7d:fa:f7:9d:2e:6d:5d:13:5b: a2:8f:b6:fd:d4:7e:86:3f:81:6e:b2:a1:b9:06:e9: 51:57:1a:f6:be:b0:52:b0:5d:21:4a:04:94:cb:d9: c6:24:47:08:3d:d2:29:34:8c:7f:b9:87:66:a3:f5: bf:1c:da:74:b9:e2:55:82:b6:2b:07:c0:2e:07:19: 50:a5:fa:4a:71:33:77:18:59:37:ff:06:42:6b:00: 01:5d:12:57:a2:1b:e0:63:c5:b1:73:cd:d7:ed:d4: 96:f0:fa:9c:c9:48:c5:5e:a5:6d:30:a8:38:26:fd: 49:cf:eb:5b:9e:47:53:1d:de:1e:ad:89:35:04:e7: fd:d0:da:2c:3e:1a:00:4a:3c:ac:0a:c6:b5:9e:ae: 46:8f:52:7c:d4:18:39:f6:5d:d9:9e:15:88:f3:1d: 5b:bf:d7:f2:da:97:b0:c2:0d:3a:ba:ef:5b:eb:95: 79:0b:56:46:8d:73:35:68:fe:58:fb:47:6e:31:ef: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DC:E3:96:E3:D0:D2:B6:34:64:7C:2A:B3:09:8A:E7:0F:DB:5C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d9:77:4f:7d:04:f1:2a:d4:fc:2d:5f:07:e5:3f:86:04:82: b8:22:b6:57:dc:c4:60:ba:bc:01:6e:6a:8b:3b:2c:b9:63:a1: 15:04:8e:b5:db:f6:b6:48:40:b9:0a:8c:a0:f7:cf:9d:66:00: 22:31:68:0f:14:c8:4e:8e:08:9a:5d:a1:c1:0b:be:f4:ce:4f: ab:80:a5:82:44:91:c8:93:e9:9d:05:80:28:a7:b2:95:1e:96: ad:6b:e2:55:67:47:8b:91:f8:af:92:ec:0d:fa:c5:68:a8:da: d9:66:e0:88:4b:0a:e6:ad:02:fd:16:c3:01:71:bf:fc:20:24: 17:c4:73:30:e6:b4:a0:ec:ab:9a:e6:fb:7e:ca:bc:8a:40:fc: 35:2b:53:16:18:ac:37:a8:de:74:47:93:e7:12:57:7e:c9:8b: 14:27:04:ee:6c:f2:c4:ab:27:ce:87:e6:b9:b5:39:56:91:ad: 7f:22:03:f7:f8:03:8c:89:6d:04:e9:93:4a:5b:4a:7f:01:12: 18:53:ce:d4:ad:a3:9d:5a:cf:b3:db:5b:5b:26:ef:b3:11:6d: d8:c5:f2:36:0c:5d:94:78:d1:12:82:8a:78:77:f5:39:c7:0e: 52:f2:66:ee:ad:38:0f:d8:b5:e6:35:47:fe:26:46:6d:03:28: ca:2b:5e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgicydUvNfdfO9nmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZTM5ZWZjNmQtYTA4Yy00YjEzLWE0MTktMmQ4MTVhMzhhNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g2zxBbtjQvQPeIf3p7o6TCtuopmWHG3uSKr Fc9pwmS+UPq2xBSYFu1/ONJuitZU9+usvRSJEY7FeZcYwfn/6kR9+vedLm1dE1ui j7b91H6GP4FusqG5BulRVxr2vrBSsF0hSgSUy9nGJEcIPdIpNIx/uYdmo/W/HNp0 ueJVgrYrB8AuBxlQpfpKcTN3GFk3/wZCawABXRJXohvgY8Wxc83X7dSW8PqcyUjF XqVtMKg4Jv1Jz+tbnkdTHd4erYk1BOf90NosPhoASjysCsa1nq5Gj1J81Bg59l3Z nhWI8x1bv9fy2pewwg06uu9b65V5C1ZGjXM1aP5Y+0duMe9CnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfc45bj0NK2NGR8KrMJiucP21znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTkyZWJhZmEtMzVkNi0z NGU2LWFhNzItMDIwZTkxN2JlMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErZd099BPEq1PwtXwflP4YEgrgitlfcxGC6vAFuaos7LLljoRUEjrXb 9rZIQLkKjKD3z51mACIxaA8UyE6OCJpdocELvvTOT6uApYJEkciT6Z0FgCinspUe lq1r4lVnR4uR+K+S7A36xWio2tlm4IhLCuatAv0WwwFxv/wgJBfEczDmtKDsq5rm +37KvIpA/DUrUxYYrDeo3nRHk+cSV37JixQnBO5s8sSrJ86H5rm1OVaRrX8iA/f4 A4yJbQTpk0pbSn8BEhhTztSto51az7PbW1sm77MRbdjF8jYMXZR40RKCinh39TnH DlLyZu6tOA/YteY1R/4mRm0DKMorXqs= -----END CERTIFICATE-----Generated at Sun Jun 29 09:04:32 2025 by rpki-client