$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa File: 1eef2e2c-6325-3083-a2ca-8378929a914b.roa (raw, json) Hash identifier: o1wl8cNDgW8l3/3go69G2zymLG6dJSpf7qim+C3Co+c= Subject key identifier: 5E:2A:34:32:D6:EA:BA:77:04:22:9D:3C:C2:26:12:7B:65:DD:52:F5 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F43285849CBCF9CA40AB86BFB6FF921C0 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 26512 IP address blocks: 162.221.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9c:a4:0a:b8:6b:fb:6f:f9:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=07f85c3d-fd42-4f9e-a515-e44fc95bc0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:a2:75:5d:70:5e:a9:a4:27:48:07:9c:64: 90:70:78:c6:7b:b8:be:6f:ac:8c:3c:e8:31:db:7f: 73:a4:cd:ed:b2:b4:c6:65:79:37:cd:6e:ad:b2:a5: 8b:08:57:ca:67:62:da:7a:4b:5c:7b:68:ac:3f:9c: d0:66:06:e2:7f:31:e7:1d:bd:c5:fb:51:d9:66:88: d4:dc:37:c8:6e:8d:c9:66:38:65:7e:58:47:26:6b: 5d:0b:e1:52:90:b0:63:4e:bf:9e:89:9a:33:39:85: 4c:b1:95:34:a8:1d:f0:d2:d7:d9:a4:f8:a2:d4:e4: 92:dc:83:9f:6f:4d:f5:21:41:11:c7:55:00:98:4d: e0:17:4a:d1:97:f1:6b:9b:bf:c8:bc:00:a2:2f:38: ec:30:d6:4e:e3:ce:0d:e2:56:e5:7d:62:f2:e1:c3: 87:8c:23:ff:5c:61:d3:99:e6:a5:c5:91:29:ab:d3: f2:48:dc:14:f6:7e:0d:b9:91:05:ac:63:c2:cf:e4: c7:ba:63:a4:62:11:5d:19:26:38:24:a7:b6:9e:74: c3:35:71:77:9a:4a:58:17:7c:98:10:47:81:2f:41: 8d:1f:08:49:f5:59:a1:70:7e:c5:3c:5a:90:00:24: 50:e7:09:06:b1:8a:52:d0:23:ae:49:ff:75:f4:4b: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:34:32:D6:EA:BA:77:04:22:9D:3C:C2:26:12:7B:65:DD:52:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 162.221.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9f:c5:62:23:4b:d8:8b:50:89:05:58:7d:9d:cf:3e:2b:cf: a7:5b:15:19:a3:3b:14:a7:ed:d3:20:0a:5b:24:1b:6a:2a:24: 8d:47:05:b8:84:12:eb:ba:d2:e8:8d:5b:01:1e:72:9f:f6:57: d5:67:d9:98:c8:69:fe:e6:7d:03:9d:8e:46:c6:7a:e8:14:64: 2c:f9:c1:d5:76:f9:9b:6e:32:9a:ad:76:5c:13:b9:a3:05:c6: 68:ca:5e:a1:2e:ee:0f:2f:a9:bf:6e:1e:0e:34:7a:d5:a7:ee: 16:25:0d:81:a9:5a:4f:02:30:f6:60:e4:63:f3:0f:26:38:3a: 7b:73:d2:4a:05:5d:62:5f:c4:38:6c:2b:ec:e4:ff:a3:2f:1d: 43:ea:8d:a2:f7:69:68:fe:5f:ba:c3:a3:d6:7b:48:52:e9:b1: 14:f7:69:cc:da:10:3e:f8:7f:bf:fb:f7:56:59:5d:92:6e:0c: 13:3a:22:6e:ca:e5:f3:04:15:87:ef:2a:b2:35:0b:79:ca:a9: 05:24:de:53:38:36:00:38:22:d6:1a:78:06:aa:b7:d0:10:0f: b7:c8:6d:55:39:f5:cc:26:dc:71:e5:ef:e8:c4:f5:d2:f8:cd: 08:29:53:cf:04:b2:b9:3b:60:64:d1:ef:43:f1:ba:1e:73:48: 89:b0:04:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5ykCrhr+2/5IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MDdmODVjM2QtZmQ0Mi00ZjllLWE1MTUtZTQ0ZmM5NWJjMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2idV1wXqmkJ0gHnGSQcHjGe7i+b6yMPOgx 239zpM3tsrTGZXk3zW6tsqWLCFfKZ2Laektce2isP5zQZgbifzHnHb3F+1HZZojU 3DfIbo3JZjhlflhHJmtdC+FSkLBjTr+eiZozOYVMsZU0qB3w0tfZpPii1OSS3IOf b031IUERx1UAmE3gF0rRl/Frm7/IvACiLzjsMNZO484N4lblfWLy4cOHjCP/XGHT mealxZEpq9PySNwU9n4NuZEFrGPCz+THumOkYhFdGSY4JKe2nnTDNXF3mkpYF3yY EEeBL0GNHwhJ9VmhcH7FPFqQACRQ5wkGsYpS0COuSf919Euz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4qNDLW6rp3BCKdPMImEntl3VL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvMWVlZjJlMmMtNjMyNS0z MDgzLWEyY2EtODM3ODkyOWE5MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6fxWIjS9iLUIkFWH2dzz4rz6dbFRmjOxSn7dMgClskG2oqJI1HBbiE Euu60uiNWwEecp/2V9Vn2ZjIaf7mfQOdjkbGeugUZCz5wdV2+ZtuMpqtdlwTuaMF xmjKXqEu7g8vqb9uHg40etWn7hYlDYGpWk8CMPZg5GPzDyY4Ontz0koFXWJfxDhs K+zk/6MvHUPqjaL3aWj+X7rDo9Z7SFLpsRT3aczaED74f7/791ZZXZJuDBM6Im7K 5fMEFYfvKrI1C3nKqQUk3lM4NgA4ItYaeAaqt9AQD7fIbVU59cwm3HHl7+jE9dL4 zQgpU88Esrk7YGTR70Pxuh5zSImwBIM= -----END CERTIFICATE-----Generated at Sun May 11 14:40:06 2025 by rpki-client