$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa File: 12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa (raw, json) Hash identifier: qFi6/DSYC9+A8n/XmkqN2ywl7+1aeZUQfZkeA5iOHJA= Subject key identifier: A2:88:A2:E6:1D:F5:29:E1:40:47:23:B3:DF:DB:10:74:D8:2E:01:D3 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F43285849E033B387AFDA3C35D094DBB8 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa Signing time: Fri 16 May 2025 20:19:04 +0000 ROA not before: Fri 16 May 2025 20:19:04 +0000 ROA not after: Thu 14 Aug 2025 20:19:04 +0000 asID: 14434 IP address blocks: 162.253.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:33:b3:87:af:da:3c:35:d0:94:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: May 16 20:19:04 2025 GMT Not After : Aug 14 20:19:04 2025 GMT Subject: CN=87eb79e0-0c36-49c6-8329-bb9707922f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:ad:8e:ef:fb:92:d4:16:5a:86:51:7e:98: e6:1e:20:08:94:90:f4:89:b4:6d:d7:4e:66:77:70: 5d:9f:da:cd:a5:1a:c4:bf:e0:25:85:59:dd:fb:b6: cf:40:12:81:a6:0d:fb:5b:b0:cc:7a:35:46:21:b5: e7:86:ee:bb:43:82:cd:67:ab:b4:08:8c:49:7a:da: 25:5c:9a:60:b9:4c:14:24:2a:d8:71:7a:d4:7a:c1: f7:d8:ad:9a:a5:f4:7c:5f:eb:39:64:c1:54:dd:49: 8c:4a:ce:48:68:ef:bd:65:1d:20:f3:7d:9c:7f:22: c8:44:1c:20:c3:56:0b:94:3c:02:a5:35:77:fb:7c: 2a:93:ca:b6:13:1f:f1:de:ea:9c:ec:86:62:7e:57: 12:44:44:2a:d4:72:c4:47:21:46:cd:74:4b:ef:85: 2d:1d:df:5c:3c:04:2f:42:68:e3:42:c5:d5:44:8b: cc:50:05:5a:ec:99:0d:91:bf:0b:a8:e1:03:c9:c6: ca:28:4c:35:15:03:43:41:19:f0:22:ad:ac:a4:21: ce:f3:62:fe:f7:29:c6:7e:a7:86:da:8c:13:aa:d5: f3:cd:4b:a2:e3:fb:d2:e6:87:f4:b8:a7:2a:8b:32: 91:40:fc:ab:0b:c4:76:79:96:3f:1f:b7:45:27:53: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:A2:E6:1D:F5:29:E1:40:47:23:B3:DF:DB:10:74:D8:2E:01:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv4: 162.253.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:db:b8:cd:04:f0:56:65:44:23:c2:6b:4a:b5:4b:76:29:f4: f3:c7:3c:dd:64:06:15:47:8b:21:c0:0f:6c:e7:de:47:05:85: 34:61:5d:d4:2c:ce:d0:c0:3d:20:08:80:05:69:22:5e:5f:07: 98:16:63:c7:4d:90:37:4f:1d:96:25:78:11:cc:29:d8:59:de: 0f:d6:76:4b:3f:eb:84:63:3b:89:bf:77:7d:de:cf:25:c4:14: 81:81:c9:8a:c5:d2:41:af:54:c4:5a:54:0e:0b:4e:41:fb:75: ff:1d:c6:f2:74:3b:2c:8f:3c:c8:77:ca:e1:1a:30:e6:7d:fc: ff:1e:19:4f:b0:85:0f:7e:b9:dd:a1:7c:6b:2f:27:fb:aa:1d: 58:9f:74:23:23:e7:28:07:44:df:8f:24:60:c2:6a:a5:cc:31: 39:fd:fa:bf:a5:c2:94:2f:5d:53:be:4a:e4:29:05:67:91:fc: 7d:ba:1a:b7:e0:37:04:42:f4:7e:6f:e1:5e:e0:89:3d:f2:2d: 89:8c:4f:e4:46:36:ce:54:2d:77:a9:2e:57:66:ca:c4:bb:79: 8a:b2:4a:3a:18:0e:b1:07:a1:cb:18:38:8e:ce:57:84:ba:aa: da:6e:b6:78:9a:75:68:a3:77:2d:cc:69:e4:aa:46:02:bd:0b: 68:e6:df:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEngM7OHr9o8NdCU27gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI1MDUxNjIwMTkwNFoXDTI1MDgxNDIwMTkwNFowLzEtMCsGA1UEAxMk ODdlYjc5ZTAtMGMzNi00OWM2LTgzMjktYmI5NzA3OTIyZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eCtju/7ktQWWoZRfpjmHiAIlJD0ibRt105m d3Bdn9rNpRrEv+AlhVnd+7bPQBKBpg37W7DMejVGIbXnhu67Q4LNZ6u0CIxJetol XJpguUwUJCrYcXrUesH32K2apfR8X+s5ZMFU3UmMSs5IaO+9ZR0g832cfyLIRBwg w1YLlDwCpTV3+3wqk8q2Ex/x3uqc7IZiflcSREQq1HLERyFGzXRL74UtHd9cPAQv QmjjQsXVRIvMUAVa7JkNkb8LqOEDycbKKEw1FQNDQRnwIq2spCHO82L+9ynGfqeG 2owTqtXzzUui4/vS5of0uKcqizKRQPyrC8R2eZY/H7dFJ1P6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKIouYd9SnhQEcjs9/bEHTYLgHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvMTJhMWZkMjctNGE0NC0z ZGY3LTg3ZDYtOWFhYzQ0Y2Y2ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHbuM0E8FZlRCPCa0q1S3Yp9PPHPN1kBhVHiyHAD2zn3kcFhTRhXdQs ztDAPSAIgAVpIl5fB5gWY8dNkDdPHZYleBHMKdhZ3g/Wdks/64RjO4m/d33ezyXE FIGByYrF0kGvVMRaVA4LTkH7df8dxvJ0OyyPPMh3yuEaMOZ9/P8eGU+whQ9+ud2h fGsvJ/uqHVifdCMj5ygHRN+PJGDCaqXMMTn9+r+lwpQvXVO+SuQpBWeR/H26Grfg NwRC9H5v4V7giT3yLYmMT+RGNs5ULXepLldmysS7eYqySjoYDrEHocsYOI7OV4S6 qtputniadWijdy3MaeSqRgK9C2jm318= -----END CERTIFICATE-----Generated at Sat Jul 5 01:19:30 2025 by rpki-client