$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f1216f56-a946-332d-9301-0ec19f5f4842.roa File: f1216f56-a946-332d-9301-0ec19f5f4842.roa (raw, json) Hash identifier: 4C0VNJ+Dp7KaEp4TX6rz08bVDwzthUZCrAP0qKR6rUM= Subject key identifier: 2B:2F:A3:E2:41:E4:8C:08:EA:DE:0A:18:1F:B4:63:40:3A:98:38:72 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849E959FF1E939C6DE05C37B5C0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f1216f56-a946-332d-9301-0ec19f5f4842.roa Signing time: Tue 20 May 2025 02:58:30 +0000 ROA not before: Tue 20 May 2025 02:58:30 +0000 ROA not after: Mon 18 Aug 2025 02:58:30 +0000 asID: 11164 IP address blocks: 163.253.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:59:ff:1e:93:9c:6d:e0:5c:37:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 20 02:58:30 2025 GMT Not After : Aug 18 02:58:30 2025 GMT Subject: CN=390fbf69-52d9-43f7-a8ea-6457e022583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:78:c1:79:06:50:2f:0c:13:36:84:05:ce: 90:84:62:90:0e:9f:86:b3:f3:86:86:64:8c:1b:f7: 65:0e:64:39:5e:55:d1:7b:d2:ed:b5:71:27:13:ce: 17:e7:70:3e:57:84:97:3b:96:0a:0c:0f:e4:d6:1e: ed:84:d8:66:f2:e8:d6:e3:44:a6:c1:83:d9:0f:da: 3f:88:5d:06:46:9a:6c:94:de:e2:d7:e5:cd:9f:85: e1:66:0d:a5:a7:8e:8f:62:62:30:15:81:e4:d6:7e: 7b:c3:14:64:43:33:09:65:95:64:48:ec:b8:17:63: 7a:eb:1c:bb:ac:c9:db:8f:bb:45:7b:2a:fa:71:ad: 11:ca:a6:ec:6b:74:06:00:c8:ae:e5:87:e9:3f:57: b4:a2:dc:94:46:91:2f:fe:c3:2a:1f:57:57:4f:e8: bc:b2:8c:1d:cc:55:a7:f6:d3:cb:a9:ba:a2:c7:da: d8:53:b2:a3:94:5b:76:10:4c:2b:fc:4f:04:bf:7d: aa:1b:ce:ec:b6:56:1e:2a:1d:9e:e4:ff:e6:cf:76: 35:31:7a:51:d1:33:bf:fc:62:71:18:fb:5c:4c:97: b1:42:75:71:98:e0:22:05:24:77:1e:13:08:4b:7e: 6b:4d:9f:60:e5:c5:ea:eb:71:18:ae:9e:e9:53:26: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:A3:E2:41:E4:8C:08:EA:DE:0A:18:1F:B4:63:40:3A:98:38:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f1216f56-a946-332d-9301-0ec19f5f4842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:46:db:0d:c0:f4:48:a1:ab:1b:ac:09:f3:49:44:71:35:7b: 35:7f:d8:2a:08:1e:71:90:6b:a6:cd:64:75:b6:a2:3c:50:7d: 60:a2:46:6f:b9:ae:5c:67:ff:84:98:f8:4a:93:8d:e5:e9:23: 11:0b:51:8b:1d:f5:16:29:da:4a:52:80:13:11:ee:ac:68:c7: dc:1b:35:2c:33:57:85:d1:6a:d1:70:f6:e9:80:ee:24:55:63: ed:39:d8:f3:06:3e:5e:78:d3:48:ff:b4:bb:9d:b3:20:32:d9: 49:41:7b:2b:65:13:af:c3:a5:e8:63:e4:b6:3d:ad:02:c8:f0: 67:60:b0:2d:7c:d9:84:c3:5a:c8:2f:c4:f6:19:04:58:1c:7c: c4:f8:f2:e6:71:da:87:9c:ab:74:b3:cb:42:12:23:b1:dd:86: ed:d1:5f:83:89:d2:26:b4:9d:e8:4f:76:0b:cd:42:dd:93:f7: 8a:e6:e6:87:ff:23:d4:9f:55:40:da:07:9d:4e:9d:f7:30:f4: b3:c0:48:15:e8:02:53:79:ec:09:6b:9e:75:9a:4c:f3:55:93: c3:07:1a:df:f3:8b:da:85:48:be:61:9e:a3:54:4f:ac:a4:fc: 76:6b:96:49:f2:9c:ab:0c:b7:06:ce:70:0f:7e:33:57:7c:a2: 4e:9d:57:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpWf8ek5xt4Fw3tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUyMDAyNTgzMFoXDTI1MDgxODAyNTgzMFowLzEtMCsGA1UEAxMk MzkwZmJmNjktNTJkOS00M2Y3LWE4ZWEtNjQ1N2UwMjI1ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDR4wXkGUC8MEzaEBc6QhGKQDp+Gs/OGhmSM G/dlDmQ5XlXRe9LttXEnE84X53A+V4SXO5YKDA/k1h7thNhm8ujW40SmwYPZD9o/ iF0GRppslN7i1+XNn4XhZg2lp46PYmIwFYHk1n57wxRkQzMJZZVkSOy4F2N66xy7 rMnbj7tFeyr6ca0Ryqbsa3QGAMiu5YfpP1e0otyURpEv/sMqH1dXT+i8sowdzFWn 9tPLqbqix9rYU7KjlFt2EEwr/E8Ev32qG87stlYeKh2e5P/mz3Y1MXpR0TO//GJx GPtcTJexQnVxmOAiBSR3HhMIS35rTZ9g5cXq63EYrp7pUyYsDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsvo+JB5IwI6t4KGB+0Y0A6mDhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZjEyMTZmNTYtYTk0Ni0z MzJkLTkzMDEtMGVjMTlmNWY0ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJG2w3A9EihqxusCfNJRHE1ezV/2CoIHnGQa6bNZHW2ojxQfWCiRm+5 rlxn/4SY+EqTjeXpIxELUYsd9RYp2kpSgBMR7qxox9wbNSwzV4XRatFw9umA7iRV Y+052PMGPl5400j/tLudsyAy2UlBeytlE6/Dpehj5LY9rQLI8GdgsC182YTDWsgv xPYZBFgcfMT48uZx2oecq3Szy0ISI7Hdhu3RX4OJ0ia0nehPdgvNQt2T94rm5of/ I9SfVUDaB51Onfcw9LPASBXoAlN57AlrnnWaTPNVk8MHGt/zi9qFSL5hnqNUT6yk /HZrlknynKsMtwbOcA9+M1d8ok6dV7E= -----END CERTIFICATE-----Generated at Sat Jun 7 17:24:24 2025 by rpki-client