$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3ea86db-b535-330e-bdb1-8169612f7759.roa File: c3ea86db-b535-330e-bdb1-8169612f7759.roa (raw, json) Hash identifier: 5ILS4VzCNTHa2uA10YlzbGeIf2F4HrymUh76zoL5GB0= Subject key identifier: 14:54:8A:EE:F0:B6:63:7B:78:D5:6F:65:CB:AA:C9:34:09:5C:0D:5C Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849244E88C8D70BC2C90BC29F00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3ea86db-b535-330e-bdb1-8169612f7759.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 25899 IP address blocks: 63.251.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:88:c8:d7:0b:c2:c9:0b:c2:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=cdb680ad-790f-4c72-ba89-d3a9a78c068f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:2d:5a:5c:34:d4:40:d0:e1:c2:1b:62:b3: 23:4b:98:67:7b:f8:a3:46:6c:39:50:92:45:a6:ef: f9:ba:bc:2c:e4:69:8d:1d:ae:30:55:58:fb:c6:c2: 37:f7:a5:cd:c4:96:74:82:f4:f6:ba:f3:43:e4:0c: df:e7:1e:7b:50:93:51:6a:39:cb:ce:01:cc:10:c1: 86:84:65:82:fc:4e:a5:aa:df:59:ef:b5:76:32:df: c7:9f:b9:0d:76:4b:40:52:36:4f:df:60:f7:31:c0: bc:13:66:c9:19:f1:c0:51:5b:6e:15:6c:fe:a3:78: 32:3d:da:63:bb:26:1c:cc:de:3c:73:aa:fd:be:8f: ef:99:5f:24:0f:aa:12:e4:45:71:28:12:43:00:3a: a7:6f:b9:17:c5:b1:69:81:90:c1:76:c0:9e:6d:55: af:b2:00:24:99:8c:b9:61:9c:b7:bd:1d:26:ff:d2: 23:e5:5a:5a:fa:b7:62:8a:82:ae:31:c5:a1:14:a8: 03:58:96:1e:9d:23:2a:0d:e8:c6:e9:84:86:7b:78: f4:c7:d0:4e:fe:a6:59:f8:59:6f:4f:0f:dc:94:6f: 0c:7a:9b:dc:8f:d9:fb:d9:20:2e:9c:f3:66:35:d9: 37:14:c5:fe:3d:29:40:e3:3d:13:ae:a1:31:ff:20: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:54:8A:EE:F0:B6:63:7B:78:D5:6F:65:CB:AA:C9:34:09:5C:0D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3ea86db-b535-330e-bdb1-8169612f7759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 63.251.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:32:e3:1c:f6:d8:1e:8b:64:c6:a7:83:e7:32:49:c0:5f:eb: 49:04:c7:ab:40:58:05:1a:9c:23:ed:99:51:8d:f4:0a:37:31: 08:87:df:ea:d5:b0:f7:fb:c1:46:e9:84:e3:80:ae:94:69:43: 4d:a6:bd:78:2c:bf:cc:62:91:97:0d:d6:35:e4:be:d8:e2:22: 0f:14:10:e1:bc:63:1e:f0:eb:e0:96:2b:9d:4e:7d:cd:a4:a9: cb:f6:a3:70:e0:81:4b:67:bb:58:a9:25:95:a0:4e:b8:63:a9: 87:c3:22:ec:66:66:61:29:c9:c5:25:96:83:1e:54:4d:62:3a: 0f:17:d4:22:7d:62:17:cb:ac:f6:c5:89:26:01:66:ee:e7:6d: 9b:2b:9c:0b:66:64:52:01:da:e0:95:d0:95:1e:e6:54:e3:a7: 5e:fc:78:a9:6c:c1:e5:5f:92:0e:1f:7b:74:34:22:64:41:72: 5d:a3:21:54:30:45:71:5a:c9:cb:2f:e7:9e:e4:e6:25:55:3e: f8:96:14:99:4b:98:16:6e:40:db:f2:61:08:54:be:61:4b:c5: 64:a0:07:af:6a:98:23:43:73:08:41:57:1e:08:13:ae:ee:01: e7:c6:97:0d:d1:e8:83:13:06:ff:39:d1:88:52:6d:1d:18:ac: 95:41:48:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTojI1wvCyQvCnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk Y2RiNjgwYWQtNzkwZi00YzcyLWJhODktZDNhOWE3OGMwNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl8tWlw01EDQ4cIbYrMjS5hne/ijRmw5UJJF pu/5urws5GmNHa4wVVj7xsI396XNxJZ0gvT2uvND5Azf5x57UJNRajnLzgHMEMGG hGWC/E6lqt9Z77V2Mt/Hn7kNdktAUjZP32D3McC8E2bJGfHAUVtuFWz+o3gyPdpj uyYczN48c6r9vo/vmV8kD6oS5EVxKBJDADqnb7kXxbFpgZDBdsCebVWvsgAkmYy5 YZy3vR0m/9Ij5Vpa+rdiioKuMcWhFKgDWJYenSMqDejG6YSGe3j0x9BO/qZZ+Flv Tw/clG8Mepvcj9n72SAunPNmNdk3FMX+PSlA4z0TrqEx/yB+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRUiu7wtmN7eNVvZcuqyTQJXA1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYzNlYTg2ZGItYjUzNS0z MzBlLWJkYjEtODE2OTYxMmY3NzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/vlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0y4xz22B6LZMang+cyScBf60kEx6tAWAUanCPtmVGN9Ao3MQiH3+rV sPf7wUbphOOArpRpQ02mvXgsv8xikZcN1jXkvtjiIg8UEOG8Yx7w6+CWK51Ofc2k qcv2o3DggUtnu1ipJZWgTrhjqYfDIuxmZmEpycUlloMeVE1iOg8X1CJ9YhfLrPbF iSYBZu7nbZsrnAtmZFIB2uCV0JUe5lTjp178eKlsweVfkg4fe3Q0ImRBcl2jIVQw RXFaycsv557k5iVVPviWFJlLmBZuQNvyYQhUvmFLxWSgB69qmCNDcwhBVx4IE67u AefGlw3R6IMTBv850YhSbR0YrJVBSCw= -----END CERTIFICATE-----Generated at Tue Apr 8 13:11:53 2025 by rpki-client