$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa File: a225d617-d65c-3895-8039-5375646dc1b8.roa (raw, json) Hash identifier: SS8xDTFvDrYMa7K3igg2NU9ptg27+w8RtgB7XVkQoqg= Subject key identifier: F3:CD:36:2C:22:B3:B4:24:12:23:84:41:AD:1A:F5:9F:A0:03:74:97 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849CD34C0E57B4F6EE05DDF0A40 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 11164 IP address blocks: 163.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c0:e5:7b:4f:6e:e0:5d:df:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=87c7e6fc-8e78-45b6-8687-cffb00ad5f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c4:bb:fd:b8:95:7c:c2:a2:a4:ad:5b:2b:02: d9:13:5d:47:d8:1f:22:45:34:d9:85:cd:db:b6:38: 16:75:2e:c1:17:c6:fe:50:b8:51:00:56:f9:61:5e: 49:fa:b3:3b:cf:b6:9b:c2:95:61:1a:54:de:65:d7: c6:bd:ff:8c:b0:24:1f:75:82:26:c7:4b:98:0a:8d: ff:4f:51:96:12:69:82:f8:29:72:7c:50:eb:52:ad: f7:7d:94:82:80:b8:9d:2d:11:0c:c6:0f:a0:6f:74: f8:8a:d4:a6:32:7a:2c:7a:c0:80:05:9c:f4:bb:d6: 47:4c:15:02:22:2d:cd:71:31:7e:38:2f:65:6a:7b: 42:64:f9:10:fd:8b:51:ff:a1:f4:91:47:f5:84:a8: a7:ce:a7:1f:a4:a0:e5:07:0d:2b:44:cb:02:89:5e: 55:81:e9:6e:20:52:f9:b2:a3:5f:ed:cc:d9:da:86: 36:ef:41:4f:d6:bd:52:22:d5:e5:87:a0:e1:0a:f3: 84:77:d7:96:21:eb:53:97:0e:38:bf:e4:2b:7b:49: 4b:06:43:7a:c7:42:63:d0:91:1c:54:4d:99:79:f1: fc:8b:34:36:32:02:19:f5:84:f9:5a:83:86:d0:7e: a9:8c:e6:bf:c5:61:6e:48:0a:ef:28:2c:03:44:b6: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:36:2C:22:B3:B4:24:12:23:84:41:AD:1A:F5:9F:A0:03:74:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:5a:a9:f6:39:40:af:8f:35:8c:75:0d:7d:2a:34:f2:50:12: 92:4f:62:4f:80:af:35:fd:ec:06:72:d4:97:42:d8:c2:fa:24: b5:37:81:5d:98:cd:b4:a8:8d:23:17:f4:94:37:1b:37:a0:a0: 2f:fd:54:56:8b:c6:33:2a:01:13:71:db:58:de:c8:17:30:fa: fc:1a:e8:37:b7:58:6b:e8:d8:94:8c:d1:0c:19:69:de:a8:78: 5d:dd:ad:dc:0e:36:89:34:04:f7:7c:85:56:09:77:3e:6a:ff: 51:94:d7:ae:77:4e:54:73:ab:a1:e3:bf:16:70:4f:02:dd:8d: 9a:59:28:0f:e6:30:2a:48:06:b1:85:e8:52:a1:84:1c:d9:01: 7f:fc:ef:6f:e7:ed:35:b1:82:cd:b1:4a:34:79:2b:8c:fd:42: 05:de:6f:ef:5f:2e:03:3d:6d:78:0f:87:32:7c:3b:13:da:ed: d5:83:77:6e:c7:2e:41:0a:16:6d:09:48:e3:3f:d5:4c:4a:01: c1:a1:fa:3e:37:a7:b6:84:83:8f:3c:a2:1a:d9:87:06:23:69: 01:f3:26:ca:e8:16:95:60:4b:59:40:8a:12:70:c1:cd:2c:7d: fc:e3:7b:9b:61:66:47:24:84:82:6b:5f:da:9b:5b:d3:ce:27: dd:a6:2f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMDle09u4F3fCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk ODdjN2U2ZmMtOGU3OC00NWI2LTg2ODctY2ZmYjAwYWQ1ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MS7/biVfMKipK1bKwLZE11H2B8iRTTZhc3b tjgWdS7BF8b+ULhRAFb5YV5J+rM7z7abwpVhGlTeZdfGvf+MsCQfdYImx0uYCo3/ T1GWEmmC+ClyfFDrUq33fZSCgLidLREMxg+gb3T4itSmMnosesCABZz0u9ZHTBUC Ii3NcTF+OC9lantCZPkQ/YtR/6H0kUf1hKinzqcfpKDlBw0rRMsCiV5VgeluIFL5 sqNf7czZ2oY270FP1r1SItXlh6DhCvOEd9eWIetTlw44v+Qre0lLBkN6x0Jj0JEc VE2ZefH8izQ2MgIZ9YT5WoOG0H6pjOa/xWFuSArvKCwDRLaI7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPNNiwis7QkEiOEQa0a9Z+gA3SXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYTIyNWQ2MTctZDY1Yy0z ODk1LTgwMzktNTM3NTY0NmRjMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtaqfY5QK+PNYx1DX0qNPJQEpJPYk+ArzX97AZy1JdC2ML6JLU3gV2Y zbSojSMX9JQ3GzegoC/9VFaLxjMqARNx21jeyBcw+vwa6De3WGvo2JSM0QwZad6o eF3drdwONok0BPd8hVYJdz5q/1GU1653TlRzq6HjvxZwTwLdjZpZKA/mMCpIBrGF 6FKhhBzZAX/872/n7TWxgs2xSjR5K4z9QgXeb+9fLgM9bXgPhzJ8OxPa7dWDd27H LkEKFm0JSOM/1UxKAcGh+j43p7aEg488ohrZhwYjaQHzJsroFpVgS1lAihJwwc0s ffzje5thZkckhIJrX9qbW9POJ92mL9s= -----END CERTIFICATE-----Generated at Mon May 12 01:32:15 2025 by rpki-client