$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa File: 7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa (raw, json) Hash identifier: WPiyM+ZLaWQrXsvYJqoH+01hZlfNktkWhNHta07s9Og= Subject key identifier: 90:98:A8:10:B7:4A:1B:8F:82:5C:B4:E5:94:89:5D:8E:8B:48:25:27 Certificate issuer: /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Certificate serial: 010D0C9F43285848EF6137E8E7525718A592C580 Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 53597 IP address blocks: 162.248.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:37:e8:e7:52:57:18:a5:92:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=411c113d-b609-4c66-811e-c8ccf8bb1c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:30:0d:9e:76:b2:6c:33:6e:e6:00:43:f7: 1e:3c:cc:4b:7b:65:9e:56:df:f7:30:0f:f2:12:9e: 74:da:5e:e4:8c:f6:70:ae:61:53:b4:f2:4a:c2:df: 69:b7:5d:0b:c0:35:9d:28:ad:35:7d:08:1b:74:cb: 75:21:9f:66:01:4b:d1:a4:05:ba:36:85:05:da:be: ed:34:3b:ef:b7:6c:07:a8:05:e9:25:b0:a1:19:77: a7:b1:5e:81:63:bf:d1:f7:ba:53:1d:a2:ee:e3:4c: a2:11:d4:82:06:73:35:ea:d6:5b:63:58:37:15:5b: 7a:c4:3c:cb:1c:6a:d2:ab:5c:30:d5:83:13:a9:81: 20:20:80:57:f2:4f:b3:d4:ea:3b:c5:0b:01:42:c3: 8e:37:f2:a5:0b:b7:94:8b:ac:f3:73:4e:b8:03:15: fb:af:71:92:c5:72:02:7a:23:d4:1a:4c:ea:be:9d: 24:d5:b3:6c:3e:7e:2b:ec:6f:7a:cb:4f:3e:2c:e8: 1c:8e:4f:b7:0b:e6:7f:73:71:85:69:66:aa:99:6e: 3c:49:29:68:93:f2:9f:af:c0:72:5e:a5:5d:3f:4d: b4:79:fc:b4:ce:ee:74:ce:77:6a:5b:37:d8:16:9d: 70:6d:2e:10:1e:c3:05:4b:56:38:81:e7:b9:85:6c: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:98:A8:10:B7:4A:1B:8F:82:5C:B4:E5:94:89:5D:8E:8B:48:25:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/7aa8dc25-01b2-3d54-bdc9-c01f4e032338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl X509v3 Authority Key Identifier: keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer sbgp-ipAddrBlock: critical IPv4: 162.248.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:ad:a7:78:0b:d1:7c:83:d5:8b:9c:48:0c:86:23:4f:b3: 54:60:e3:31:07:1b:a8:6b:a1:a3:cb:e2:83:37:15:ad:fa:74: 58:c0:75:f9:e5:bf:9a:46:c2:d8:7e:d3:c0:3a:e0:c8:a7:c3: 6b:86:5b:11:97:b0:83:43:2d:7f:19:d2:eb:87:f9:a6:9f:34: d2:67:5d:7f:e2:f6:bd:7a:4f:e3:cb:c4:42:36:b4:b4:43:f5: 3c:9a:98:08:84:1a:c7:6d:c5:41:45:6a:58:15:fc:58:f1:2d: 74:e1:7c:ed:25:4f:aa:0e:56:e1:e6:65:8f:b9:73:45:9e:7d: 5f:f0:72:71:81:43:4c:d7:8b:b1:96:3f:04:ad:66:da:29:ec: 4d:0e:ca:4f:a1:e6:9c:c4:f0:d5:91:13:21:13:4d:19:5e:ac: 53:02:71:50:7c:98:36:89:8d:cb:8e:a4:3c:95:6e:7a:d5:50: 06:ff:8e:59:99:b9:06:ee:58:35:b6:28:25:61:5d:b6:b0:c8: 56:32:d0:56:1f:11:d3:1c:d6:db:28:d9:18:86:5b:54:27:15: 7a:0e:27:1d:f2:97:ed:bd:aa:9d:ea:de:42:f9:36:57:cd:27: fc:9f:7d:cf:74:b7:82:2f:14:7d:e9:f0:8b:2e:0a:00:f3:eb: 1b:fb:ab:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTfo51JXGKWSxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2 NGJjMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDExYzExM2QtYjYwOS00YzY2LTgxMWUtYzhjY2Y4YmIxYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0kwDZ52smwzbuYAQ/cePMxLe2WeVt/3MA/y Ep502l7kjPZwrmFTtPJKwt9pt10LwDWdKK01fQgbdMt1IZ9mAUvRpAW6NoUF2r7t NDvvt2wHqAXpJbChGXensV6BY7/R97pTHaLu40yiEdSCBnM16tZbY1g3FVt6xDzL HGrSq1ww1YMTqYEgIIBX8k+z1Oo7xQsBQsOON/KlC7eUi6zzc064AxX7r3GSxXIC eiPUGkzqvp0k1bNsPn4r7G96y08+LOgcjk+3C+Z/c3GFaWaqmW48SSlok/Kfr8By XqVdP020efy0zu50zndqWzfYFp1wbS4QHsMFS1Y4gee5hWxA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCYqBC3ShuPgly05ZSJXY6LSCUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvN2FhOGRjMjUtMDFiMi0z ZDU0LWJkYzktYzAxZjRlMDMyMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4 MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5 NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Orad4C9F8g9WLnEgMhiNPs1Rg4zEHG6hroaPL4oM3Fa36dFjAdfnl v5pGwth+08A64Minw2uGWxGXsINDLX8Z0uuH+aafNNJnXX/i9r16T+PLxEI2tLRD 9TyamAiEGsdtxUFFalgV/FjxLXThfO0lT6oOVuHmZY+5c0WefV/wcnGBQ0zXi7GW PwStZtop7E0Oyk+h5pzE8NWREyETTRlerFMCcVB8mDaJjcuOpDyVbnrVUAb/jlmZ uQbuWDW2KCVhXbawyFYy0FYfEdMc1tso2RiGW1QnFXoOJx3yl+29qp3q3kL5NlfN J/yffc90t4IvFH3p8IsuCgDz6xv7q+Y= -----END CERTIFICATE-----Generated at Sat May 10 10:24:15 2025 by rpki-client