$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa File: 33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa (raw, json) Hash identifier: v7L0dnXllsD8pn4PPOKCfpFZIc0GbIIFTq5Lu+So+Dg= Subject key identifier: 15:08:FB:AE:4F:E3:5A:C1:DE:93:8A:93:00:72:93:C7:18:50:EA:78 Certificate issuer: /CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Certificate serial: 010D0C9F43285849F2E52F1ABA242B5546011880 Authority key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 25593 IP address blocks: 162.208.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2f:1a:ba:24:2b:55:46:01:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=d2a01563-0a24-41b7-8968-de8ecace3223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:85:65:35:b8:af:1b:a2:e3:02:70:78:64: f6:ad:39:19:ab:85:7a:f9:8b:80:d7:a6:64:77:8c: fe:24:a6:98:87:c5:09:53:0d:f3:59:90:e2:a2:79: 73:28:c8:1e:67:13:4a:f6:7f:87:b3:f9:5d:22:b0: 44:23:ba:24:22:5f:13:53:24:2f:4a:63:ce:8e:b7: b8:d3:71:2d:64:25:e4:ce:fd:28:ff:db:2a:b0:3d: 90:8e:cc:f2:ba:e4:f9:88:21:fc:ff:cd:fa:42:85: 4e:66:cd:17:ee:68:c7:90:15:85:a5:20:89:76:13: 46:22:a0:ae:da:00:49:55:8a:b3:04:42:95:5b:8d: 41:2f:de:ea:2c:11:d6:29:f2:1a:a9:33:ab:e0:98: ae:e4:cf:56:87:31:e3:78:88:ff:34:a4:f5:af:c0: 9c:ba:52:dd:8f:8d:0c:f1:05:b2:52:eb:97:59:29: b1:3a:4c:b3:9a:56:d5:0e:e4:ff:9e:84:8c:0c:a8: 9e:24:f4:21:2a:e5:ea:e8:3e:66:0d:2e:47:51:41: 15:a6:ce:38:41:13:99:b8:f2:e0:ea:67:88:7f:09: bd:0e:be:f5:06:88:e1:40:06:d0:c0:93:62:b8:93: c7:9a:a9:e8:fa:11:39:cb:43:b5:c3:dd:e4:5a:94: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:08:FB:AE:4F:E3:5A:C1:DE:93:8A:93:00:72:93:C7:18:50:EA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl X509v3 Authority Key Identifier: keyid:16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer sbgp-ipAddrBlock: critical IPv4: 162.208.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:28:8e:71:b3:13:e0:1e:19:c5:2d:1e:57:d0:3a:a8:49:7f: 7b:32:a8:ed:0a:3b:54:6f:df:2f:d6:1d:bd:17:83:77:e4:da: 9a:87:b2:cc:a2:05:63:f3:0f:09:a4:fd:92:80:05:e4:a1:33: 82:ee:aa:68:bf:df:e4:46:fe:06:92:89:d4:51:c8:93:57:c0: 27:bf:27:4a:a1:58:04:b7:21:17:5a:0e:93:f9:52:15:a4:69: 60:b9:54:ee:56:58:29:5a:66:87:55:cb:57:3d:79:08:34:21: 8c:84:7b:33:e4:51:5e:7f:4c:f7:f1:01:a5:a6:1e:67:4a:06: d3:5d:59:9a:05:93:63:75:e2:3c:bd:b4:be:19:55:f5:da:40: c3:22:7b:b9:46:bb:cd:27:a0:c5:b5:25:47:6c:6e:bc:4a:92: 6d:94:3e:75:fd:66:85:0d:4c:61:ce:bf:64:c6:99:3a:29:d2: 83:d7:01:2b:81:cf:85:9c:9b:2d:da:4f:a8:a9:67:81:06:be: 16:61:e7:47:45:1d:ce:01:7d:73:6d:5e:97:72:f1:4d:32:e2: c4:76:63:ff:da:c6:f5:b2:5d:1b:41:07:57:70:a2:ef:6d:69: 7b:15:b0:05:d6:4f:24:01:56:58:c3:70:52:32:0d:55:8b:99: 94:fb:c2:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5S8auiQrVUYBGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljNTJmYWItNTliMC00NmY4LTg1MWQtNjY0NGFhZjFl YWE3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDJhMDE1NjMtMGEyNC00MWI3LTg5NjgtZGU4ZWNhY2UzMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBiFZTW4rxui4wJweGT2rTkZq4V6+YuA16Zk d4z+JKaYh8UJUw3zWZDionlzKMgeZxNK9n+Hs/ldIrBEI7okIl8TUyQvSmPOjre4 03EtZCXkzv0o/9sqsD2QjszyuuT5iCH8/836QoVOZs0X7mjHkBWFpSCJdhNGIqCu 2gBJVYqzBEKVW41BL97qLBHWKfIaqTOr4Jiu5M9WhzHjeIj/NKT1r8CculLdj40M 8QWyUuuXWSmxOkyzmlbVDuT/noSMDKieJPQhKuXq6D5mDS5HUUEVps44QROZuPLg 6meIfwm9Dr71BojhQAbQwJNiuJPHmqno+hE5y0O1w93kWpR5SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUI+65P41rB3pOKkwByk8cYUOp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1 MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFmMWVhYTcvMzMwMTVmMWEtYWU5Ni0z OGM0LWI3MDItMGYwYjdmYzAyMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjljNTJmYWItNTliMC00NmY4LTg1 MWQtNjY0NGFhZjFlYWE3LzI5YzUyZmFiLTU5YjAtNDZmOC04NTFkLTY2NDRhYWYx ZWFhNy5jcmwwHwYDVR0jBBgwFoAUFpHzdeIouJ10XDVbqRIusocl/vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0 YWFmMWVhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUojnGzE+AeGcUtHlfQOqhJf3syqO0KO1Rv3y/WHb0Xg3fk2pqHssyi BWPzDwmk/ZKABeShM4Luqmi/3+RG/gaSidRRyJNXwCe/J0qhWAS3IRdaDpP5UhWk aWC5VO5WWClaZodVy1c9eQg0IYyEezPkUV5/TPfxAaWmHmdKBtNdWZoFk2N14jy9 tL4ZVfXaQMMie7lGu80noMW1JUdsbrxKkm2UPnX9ZoUNTGHOv2TGmTop0oPXASuB z4Wcmy3aT6ipZ4EGvhZh50dFHc4BfXNtXpdy8U0y4sR2Y//axvWyXRtBB1dwou9t aXsVsAXWTyQBVljDcFIyDVWLmZT7wvU= -----END CERTIFICATE-----Generated at Wed Jun 11 02:40:44 2025 by rpki-client