$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: 6qvRICt54BDexb7BUOJk2uHEGqnHjRR1yoxgfVF7q8w= Subject key identifier: CC:E5:5D:8C:6F:62:D5:4D:2F:E1:3B:A3:00:8C:24:98:82:D7:AF:CD Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285849A4BA4AB2A1454635052E34F0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4a:b2:a1:45:46:35:05:2e:34:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b240d589-dcf9-48e5-be52-940952aec585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:34:f5:f5:3c:50:e2:59:7d:8d:1d:0d:23: d4:0b:93:7b:43:8a:5a:3d:00:c4:8b:7d:62:0b:47: 5e:43:d4:e4:e5:c1:9c:17:1c:8a:70:63:8f:5d:24: cb:5b:72:c8:aa:2d:e2:78:53:2e:9d:b9:d2:59:1e: ed:7d:14:b1:20:3e:16:ec:4b:fb:09:25:f3:8a:f2: bc:80:ce:b5:9d:c9:1b:6b:59:5a:40:68:20:e8:c9: dd:13:84:2b:fa:fb:df:5e:dd:21:aa:ef:d9:59:7e: 24:12:3f:6d:e4:c3:86:f0:ad:4a:90:3b:38:60:14: fb:7c:f3:6d:99:6d:23:39:14:05:e2:5c:28:cd:74: 67:15:be:b9:ac:9d:b2:b9:e1:f7:24:f5:a2:11:0b: bc:fa:42:c1:04:52:9a:cc:7f:71:91:ce:bc:ba:35: 80:db:f3:8a:72:15:1f:90:63:2a:09:cf:7e:5a:41: 9d:d2:78:99:d3:22:c8:b3:d6:4b:35:3e:a5:37:3f: 6d:09:6c:4c:d1:91:c8:da:3c:d7:7f:a9:41:e3:1f: 6b:8f:9d:5d:14:e8:67:90:72:7a:bd:b1:0f:85:4f: b8:14:ff:6a:42:3c:a0:3e:5f:f5:7c:4b:b3:83:95: 35:63:1c:26:2c:3e:7b:05:58:e0:5b:91:e3:42:64: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:5D:8C:6F:62:D5:4D:2F:E1:3B:A3:00:8C:24:98:82:D7:AF:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9c:18:4d:d8:e5:39:ec:92:57:eb:f1:5e:23:cb:72:7f:07: 6a:3d:b6:b0:b0:0f:0a:e8:06:96:cb:fe:ae:67:7b:64:b3:bc: 61:60:c0:49:75:a2:a3:7f:1f:72:3c:fd:24:f2:05:c6:fb:18: 98:1c:bc:bd:09:50:ef:c7:c7:08:45:0a:39:4b:d0:fe:81:ea: 99:d0:3a:02:f4:ea:40:10:85:8d:78:48:b3:a1:aa:85:47:13: 35:f5:6d:0c:af:62:33:de:1d:3c:5b:c5:ad:10:9a:0e:3b:83: bf:0c:f9:0c:21:1d:9f:71:88:74:16:19:be:57:ca:4e:59:61: e4:7f:05:3a:93:25:d2:65:fe:e6:b8:c4:0b:f9:8a:2a:df:9a: 8f:8f:77:c8:95:88:0e:9a:61:77:14:9e:78:da:e8:b6:d9:13: 4d:00:a1:78:8f:03:bf:89:2a:11:28:07:53:39:9c:e6:a9:a2: 3e:ad:42:05:16:85:2f:b2:49:2c:35:aa:c5:c0:81:ad:db:bd: f4:1d:65:d3:8c:d8:43:a3:7e:32:dc:cc:77:86:56:ac:c8:7c: 9b:79:63:92:74:bf:4d:97:7f:ee:a0:a7:2f:58:a3:87:7f:15: 7d:df:d9:0e:5a:17:1d:3d:77:19:01:84:ec:60:7e:95:c9:6a: 41:37:83:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukqyoUVGNQUuNPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjI0MGQ1ODktZGNmOS00OGU1LWJlNTItOTQwOTUyYWVjNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAs09fU8UOJZfY0dDSPUC5N7Q4paPQDEi31i C0deQ9Tk5cGcFxyKcGOPXSTLW3LIqi3ieFMunbnSWR7tfRSxID4W7Ev7CSXzivK8 gM61nckba1laQGgg6MndE4Qr+vvfXt0hqu/ZWX4kEj9t5MOG8K1KkDs4YBT7fPNt mW0jORQF4lwozXRnFb65rJ2yueH3JPWiEQu8+kLBBFKazH9xkc68ujWA2/OKchUf kGMqCc9+WkGd0niZ0yLIs9ZLNT6lNz9tCWxM0ZHI2jzXf6lB4x9rj51dFOhnkHJ6 vbEPhU+4FP9qQjygPl/1fEuzg5U1YxwmLD57BVjgW5HjQmSVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzlXYxvYtVNL+E7owCMJJiC16/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKcGE3Y5Tnsklfr8V4jy3J/B2o9trCwDwroBpbL/q5ne2SzvGFgwEl1 oqN/H3I8/STyBcb7GJgcvL0JUO/HxwhFCjlL0P6B6pnQOgL06kAQhY14SLOhqoVH EzX1bQyvYjPeHTxbxa0Qmg47g78M+QwhHZ9xiHQWGb5Xyk5ZYeR/BTqTJdJl/ua4 xAv5iirfmo+Pd8iViA6aYXcUnnja6LbZE00AoXiPA7+JKhEoB1M5nOapoj6tQgUW hS+ySSw1qsXAga3bvfQdZdOM2EOjfjLczHeGVqzIfJt5Y5J0v02Xf+6gpy9Yo4d/ FX3f2Q5aFx09dxkBhOxgfpXJakE3g3w= -----END CERTIFICATE-----Generated at Sun May 11 07:56:38 2025 by rpki-client