$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa File: feab4e24-c427-3262-ae07-c36619833029.roa (raw, json) Hash identifier: uJz5M5rSUqFbxUVWocGLvwgOVw+IoGY/47C0hRcJaRE= Subject key identifier: F1:AB:5C:83:93:DF:CB:90:DB:26:A6:AD:00:7F:4B:C2:A2:D2:35:9F Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584A43DAFB443D67022887004CC0 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 46841 IP address blocks: 162.218.240.0/21 maxlen: 24 162.251.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fb:44:3d:67:02:28:87:00:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=a22e4a53-8925-4d92-86a3-39acbc40cf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:77:91:ae:13:78:73:52:0a:33:3a:01:6c: 27:e0:a7:a7:0d:84:0a:46:6d:19:5e:30:3e:ee:89: 08:dd:67:97:59:47:85:8a:56:c1:34:8d:78:81:ca: d4:15:73:7f:d5:f8:93:6e:9c:da:88:ab:02:61:fc: dc:65:4f:bc:12:47:54:f3:e8:4b:f9:20:32:14:2d: 1f:4c:82:1a:0e:52:ad:ca:ee:2b:4f:2c:ba:e2:36: c3:8e:74:71:d9:ca:fc:c0:9e:a7:a9:9d:2e:73:ca: e7:65:14:80:b1:f3:28:2e:c5:0d:4a:71:81:e4:6d: 05:cd:24:26:5a:d2:cc:a9:62:89:f9:fa:c8:bb:b9: 81:e6:9d:20:c7:4a:83:7d:e9:2e:89:fe:23:a3:f8: 18:47:e4:3e:16:57:be:68:53:6e:a2:94:2a:aa:1b: 89:ba:d3:4d:2e:eb:da:af:52:7e:85:0d:c2:2b:17: 3d:10:b3:13:0d:c2:9f:38:b9:50:05:5c:52:a9:62: c2:10:86:d1:a6:af:86:39:b5:ca:23:31:01:c3:16: ef:3b:5b:01:b5:bc:62:26:ec:2b:29:e7:75:30:3a: dd:74:92:ff:15:c9:f9:31:5a:80:16:c1:e2:c1:d5: 86:7e:78:ac:b0:f0:15:87:62:4d:5a:57:62:c6:f0: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AB:5C:83:93:DF:CB:90:DB:26:A6:AD:00:7F:4B:C2:A2:D2:35:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: 162.218.240.0/21 162.251.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:79:c8:50:31:5f:d3:76:96:d6:ba:47:05:2e:7b:2b:db:b6: 9d:e2:51:41:2c:82:57:e5:c3:3c:5b:9d:cc:0a:c8:32:09:29: bd:bd:ee:4b:b6:50:01:14:f9:6c:b0:10:ec:9f:a3:ca:e6:80: 17:d6:9e:1d:37:95:85:1c:4a:35:4b:0b:6a:01:a2:5b:ce:91: 65:47:68:52:63:67:2f:c4:e2:da:82:9a:6d:bd:2b:1c:4c:3e: ef:c6:6d:24:c8:e9:6a:56:09:c9:55:86:c5:c1:3c:7f:e9:2f: c7:9d:88:3c:43:73:ad:4d:36:c6:d0:70:45:ed:37:73:72:b1: de:35:32:37:44:68:21:09:3e:02:c6:c6:64:a7:c4:73:93:c9: f8:e9:85:db:fc:77:a0:7f:c2:e8:54:46:89:d1:7f:d9:cc:73: 6b:da:b8:6f:21:37:a5:53:25:cd:76:bf:bb:a9:2e:63:7b:07: 10:01:09:8f:4a:cf:98:2e:29:e5:78:99:1d:15:26:eb:53:2d: cd:b5:34:d0:5f:5e:7b:05:ce:f2:c6:8f:1d:12:42:79:3a:91: 60:08:3c:5e:cf:78:90:70:be:d9:f1:1c:e8:81:5e:23:46:71: 78:f5:47:7d:e5:88:0b:2e:2b:f9:db:dc:f0:e6:e6:f5:19:4a: 04:5b:1e:0c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpD2vtEPWcCKIcATMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YTIyZTRhNTMtODkyNS00ZDkyLTg2YTMtMzlhY2JjNDBjZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFZ3ka4TeHNSCjM6AWwn4KenDYQKRm0ZXjA+ 7okI3WeXWUeFilbBNI14gcrUFXN/1fiTbpzaiKsCYfzcZU+8EkdU8+hL+SAyFC0f TIIaDlKtyu4rTyy64jbDjnRx2cr8wJ6nqZ0uc8rnZRSAsfMoLsUNSnGB5G0FzSQm WtLMqWKJ+frIu7mB5p0gx0qDfekuif4jo/gYR+Q+Fle+aFNuopQqqhuJutNNLuva r1J+hQ3CKxc9ELMTDcKfOLlQBVxSqWLCEIbRpq+GObXKIzEBwxbvO1sBtbxiJuwr Ked1MDrddJL/Fcn5MVqAFsHiwdWGfnissPAVh2JNWldixvDEyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPGrXIOT38uQ2yamrQB/S8Ki0jWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvZmVhYjRlMjQtYzQyNy0z MjYyLWFlMDctYzM2NjE5ODMzMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDotrwAwQD ovsAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJN5yFAxX9N2lta6RwUueyvbtp3iUUEsglflwzxbncwKyDIJ Kb297ku2UAEU+WywEOyfo8rmgBfWnh03lYUcSjVLC2oBolvOkWVHaFJjZy/E4tqC mm29KxxMPu/GbSTI6WpWCclVhsXBPH/pL8ediDxDc61NNsbQcEXtN3Nysd41MjdE aCEJPgLGxmSnxHOTyfjphdv8d6B/wuhURonRf9nMc2vauG8hN6VTJc12v7upLmN7 BxABCY9Kz5guKeV4mR0VJutTLc21NNBfXnsFzvLGjx0SQnk6kWAIPF7PeJBwvtnx HOiBXiNGcXj1R33liAsuK/nb3PDm5vUZSgRbHgw= -----END CERTIFICATE-----Generated at Mon Jun 30 15:50:23 2025 by rpki-client