$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa File: 242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa (raw, json) Hash identifier: 66TiOekZeM1x4pOghIzaw/9Bwd37jj0SBEiOcMgvzUc= Subject key identifier: FE:64:82:7E:31:5D:E9:E3:2C:22:18:4F:46:21:38:1C:41:19:C1:8E Certificate issuer: /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Certificate serial: 010D0C9F43285849C0A4E18FC00ADF58315CC880 Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 53334 IP address blocks: 162.252.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e1:8f:c0:0a:df:58:31:5c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=b82a30bb-3e24-46c0-ad1b-fe57be89fc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:70:98:93:80:56:61:0f:06:24:e7:81:12: 43:a9:3c:a5:9f:f2:a1:52:fe:c1:9d:b2:d2:55:8c: 2a:e3:8e:22:22:0a:96:32:14:10:76:86:57:4e:b8: a2:ed:47:8c:e2:56:f4:b5:44:3f:7f:ae:2e:31:d0: a1:e3:69:bf:99:fb:3a:24:ee:22:dd:8b:f8:1b:ef: 46:ae:e9:72:9b:d8:fe:18:bd:08:5d:98:65:f3:b2: dd:56:a3:26:f5:a1:c8:8e:a9:b8:64:dc:39:73:6a: 8b:fa:7a:7b:d2:19:80:45:ef:79:8c:87:51:d5:f7: 05:cb:d5:fa:a2:52:a0:18:c5:a4:c6:6d:40:bc:34: 0f:2d:1c:0e:4a:72:2d:4b:60:81:07:1b:39:df:f6: 85:0d:4f:6c:93:93:4b:4a:8a:74:8a:6e:1e:69:f1: 06:4e:88:3d:9d:ea:8d:f1:b3:9b:f5:cd:c7:44:86: d7:56:49:8a:fa:e0:96:30:99:79:64:b6:b6:9f:f3: be:e2:46:13:09:64:19:26:d1:c6:21:1a:37:55:58: 30:8e:00:76:fc:f0:f8:bd:2b:ee:ae:3d:bc:7f:cc: 9e:55:67:ef:3a:18:71:cc:09:de:a2:f3:89:89:d0: fc:6a:6b:b2:97:00:50:3c:7d:b7:f2:65:9a:75:f3: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:64:82:7E:31:5D:E9:E3:2C:22:18:4F:46:21:38:1C:41:19:C1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl X509v3 Authority Key Identifier: keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer sbgp-ipAddrBlock: critical IPv4: 162.252.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:2f:7d:18:b6:5c:14:65:5a:e1:97:e3:bd:fa:f3:e1:95:40: c2:8a:f1:7a:f7:99:eb:e3:fc:a1:c3:09:e6:dc:b4:66:f0:e6: 26:e7:13:9a:68:0a:67:97:77:52:32:0c:34:7e:20:42:ab:6f: 97:b4:ac:f8:76:05:8c:a9:06:57:83:f0:aa:b5:21:66:00:10: 2c:59:f8:d3:41:7a:a4:bf:62:dc:6d:d9:b5:7b:03:38:0f:d7: 92:68:6f:9d:07:91:2d:ac:19:89:f9:e2:4c:9f:5a:0d:4a:5d: ad:39:40:a5:77:54:ae:a0:7f:c2:fa:94:75:97:93:ca:bb:fb: 26:11:11:03:0b:b4:c9:e9:15:2e:d1:2d:9d:86:8b:8a:c7:36: ae:66:17:ca:d3:8e:6a:c1:10:6c:cf:64:68:c4:89:ce:db:df: 30:51:14:13:4d:ca:7d:30:62:3d:fa:7a:e5:c4:28:b9:e0:ec: c5:2b:03:13:e7:f1:e4:69:f7:72:26:74:af:28:54:e3:38:ca: be:c1:d5:b4:f3:c1:6a:86:de:90:5e:99:c5:8b:ac:70:89:5b: f5:e9:09:33:6d:41:01:c5:6b:9c:e2:a0:f0:f2:42:bf:3f:e2: fe:2b:b2:7e:80:9f:e0:64:9d:a3:08:73:fc:5e:bc:1e:80:96: a5:43:86:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOGPwArfWDFcyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj OGQ0MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YjgyYTMwYmItM2UyNC00NmMwLWFkMWItZmU1N2JlODlmYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvpwmJOAVmEPBiTngRJDqTyln/KhUv7BnbLS VYwq444iIgqWMhQQdoZXTrii7UeM4lb0tUQ/f64uMdCh42m/mfs6JO4i3Yv4G+9G rulym9j+GL0IXZhl87LdVqMm9aHIjqm4ZNw5c2qL+np70hmARe95jIdR1fcFy9X6 olKgGMWkxm1AvDQPLRwOSnItS2CBBxs53/aFDU9sk5NLSop0im4eafEGTog9neqN 8bOb9c3HRIbXVkmK+uCWMJl5ZLa2n/O+4kYTCWQZJtHGIRo3VVgwjgB2/PD4vSvu rj28f8yeVWfvOhhxzAneovOJidD8amuylwBQPH238mWadfOjBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5kgn4xXenjLCIYT0YhOBxBGcGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvMjQyMDE1YTctMmZjYy0z NWNkLTgxYTEtNjlmNjhmNTRmNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4 YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0 NGZmOGM4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQvfRi2XBRlWuGX47368+GVQMKK8Xr3mevj/KHDCebctGbw5ibnE5po CmeXd1IyDDR+IEKrb5e0rPh2BYypBleD8Kq1IWYAECxZ+NNBeqS/Ytxt2bV7AzgP 15Job50HkS2sGYn54kyfWg1KXa05QKV3VK6gf8L6lHWXk8q7+yYREQMLtMnpFS7R LZ2Gi4rHNq5mF8rTjmrBEGzPZGjEic7b3zBRFBNNyn0wYj36euXEKLng7MUrAxPn 8eRp93ImdK8oVOM4yr7B1bTzwWqG3pBemcWLrHCJW/XpCTNtQQHFa5zioPDyQr8/ 4v4rsn6An+BknaMIc/xevB6AlqVDhnM= -----END CERTIFICATE-----Generated at Sat May 10 19:21:01 2025 by rpki-client