$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa File: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (raw, json) Hash identifier: vlOCZIntP4/vEZqNU1F/KEOqk/+wxFh0MRroKdGpr9Q= Subject key identifier: 52:27:58:4F:2B:BF:91:08:1A:F1:45:81:7D:95:E5:A7:5C:39:7C:06 Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F43285849F7152028A3378B74A34C4C60 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 2734 IP address blocks: 162.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:20:28:a3:37:8b:74:a3:4c:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=143d77a4-3ec0-40c3-993e-f6ba0688eb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:db:56:99:9b:a9:21:3b:51:4b:e1:bc:e0: fa:5c:54:25:cd:02:a0:b8:a8:b5:9f:f0:6d:21:14: ef:e7:a4:7c:ac:d4:83:fe:f2:23:df:65:df:71:6c: fe:69:48:98:56:87:f6:f8:48:6f:dc:bb:a6:e1:c0: 67:1f:3f:bb:cb:07:57:00:be:11:b6:66:62:82:fb: 4c:f2:f2:cb:9a:79:5c:d2:94:b9:ae:59:fc:86:71: b4:ac:18:8f:9b:fe:f3:ef:20:12:ef:96:43:2f:42: 40:9b:7b:e7:22:2c:d3:ff:45:27:ee:13:bd:89:ae: 29:a7:d3:4a:12:9e:fc:35:c0:f9:66:43:49:93:c0: 1a:9d:4a:99:58:aa:05:50:a2:eb:e9:78:52:b7:5a: 90:d9:6a:d1:2d:d6:82:2e:77:77:df:89:14:b7:8a: 3c:c3:92:65:52:f9:74:95:09:db:8d:8b:5a:11:da: c0:dc:e8:04:62:b3:57:46:6c:a1:ae:81:78:ee:ab: ca:2a:55:ed:1d:5d:1d:65:6a:94:c0:b6:26:6e:81: 76:36:15:34:f5:e3:36:b5:cd:66:9b:89:bf:83:d2: 00:c6:5f:9d:ee:b4:2f:c7:ca:5f:f9:e3:e1:0b:2c: 0b:a2:f2:4d:37:50:d2:31:9b:4d:44:2f:98:95:41: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:58:4F:2B:BF:91:08:1A:F1:45:81:7D:95:E5:A7:5C:39:7C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4b:b6:a5:a7:7f:4b:76:34:c0:2e:75:c1:5f:15:fb:e7:15: 01:99:e7:f6:c2:27:51:ea:76:f2:69:6e:2f:66:45:6a:56:ef: 3b:8f:59:b6:f9:bb:53:de:c9:90:81:16:63:0f:9f:ba:64:ee: 75:0a:94:d0:fd:e5:73:a9:3f:10:58:91:39:0e:b3:75:cb:bc: 3d:58:d3:a7:45:f6:e4:ed:2f:de:c1:be:99:9d:ab:85:d8:2e: e0:1e:dd:d6:ce:73:9f:8a:e6:90:47:54:fb:9e:94:ad:44:53: 93:3a:3e:32:e0:80:d0:80:21:06:87:e6:30:7e:82:b3:d0:cc: b4:af:a3:c9:70:60:b2:fc:72:34:4e:1c:fd:05:4f:6b:d5:c0: 64:47:45:b8:8c:ca:e2:e5:72:5a:7b:c1:32:e5:83:07:c2:f0: 81:b1:ae:a1:dd:21:87:4c:80:67:54:22:0c:c0:6f:51:ac:c1: 4f:b8:28:34:26:51:c9:ea:2b:1d:30:02:ea:a9:4b:75:eb:b3: 14:20:4e:41:b2:f1:57:b5:b1:45:b8:e2:0f:0b:37:60:ef:56: 41:f5:ea:b1:d6:84:37:ca:95:52:fc:e0:04:0b:00:03:f4:27: 26:8a:db:87:99:ac:66:ca:b1:0a:cd:e8:41:37:3e:eb:9c:fc: 60:4e:6d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSAoozeLdKNMTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MTQzZDc3YTQtM2VjMC00MGMzLTk5M2UtZjZiYTA2ODhlYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJLbVpmbqSE7UUvhvOD6XFQlzQKguKi1n/Bt IRTv56R8rNSD/vIj32XfcWz+aUiYVof2+Ehv3Lum4cBnHz+7ywdXAL4RtmZigvtM 8vLLmnlc0pS5rln8hnG0rBiPm/7z7yAS75ZDL0JAm3vnIizT/0Un7hO9ia4pp9NK Ep78NcD5ZkNJk8AanUqZWKoFUKLr6XhSt1qQ2WrRLdaCLnd334kUt4o8w5JlUvl0 lQnbjYtaEdrA3OgEYrNXRmyhroF47qvKKlXtHV0dZWqUwLYmboF2NhU09eM2tc1m m4m/g9IAxl+d7rQvx8pf+ePhCywLovJNN1DSMZtNRC+YlUGOFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFInWE8rv5EIGvFFgX2V5adcOXwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvOTRiNTk4Y2EtNjUwYi0z YjkyLTg5YTMtZTA4NDhjMGNkOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJLtqWnf0t2NMAudcFfFfvnFQGZ5/bCJ1HqdvJpbi9mRWpW7zuPWbb5 u1PeyZCBFmMPn7pk7nUKlND95XOpPxBYkTkOs3XLvD1Y06dF9uTtL97Bvpmdq4XY LuAe3dbOc5+K5pBHVPuelK1EU5M6PjLggNCAIQaH5jB+grPQzLSvo8lwYLL8cjRO HP0FT2vVwGRHRbiMyuLlclp7wTLlgwfC8IGxrqHdIYdMgGdUIgzAb1GswU+4KDQm UcnqKx0wAuqpS3XrsxQgTkGy8Ve1sUW44g8LN2DvVkH16rHWhDfKlVL84AQLAAP0 JyaK24eZrGbKsQrN6EE3Puuc/GBObZo= -----END CERTIFICATE-----Generated at Mon Jun 30 18:20:21 2025 by rpki-client