$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa File: 1c0a76cd-a848-347a-8534-bb81117de2e4.roa (raw, json) Hash identifier: 8JpTaOmy4uQeaV3dXzAq99aGShZ02Sb1xLBdfReYem4= Subject key identifier: A2:D9:10:2E:3A:4C:A0:C3:85:40:2B:7B:0F:B7:9E:94:CB:77:2F:06 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584929BB4C202026B386FF21E2A0 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa Signing time: Wed 12 Mar 2025 11:39:21 +0000 ROA not before: Wed 12 Mar 2025 11:39:21 +0000 ROA not after: Tue 10 Jun 2025 11:39:21 +0000 asID: 63360 IP address blocks: 168.225.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:bb:4c:20:20:26:b3:86:ff:21:e2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Mar 12 11:39:21 2025 GMT Not After : Jun 10 11:39:21 2025 GMT Subject: CN=2c5acc28-c9cb-40cf-aaf5-1188059e07d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:36:e1:9b:e5:61:fb:2f:2a:32:0a:cf:6e: 36:48:d7:f9:f4:09:85:68:fb:56:e2:50:ad:df:3a: 99:fd:7f:c4:8b:65:f6:6a:b6:87:8c:9a:10:ad:2c: 0f:40:ef:71:80:9e:3e:43:99:9b:e9:0c:df:f9:10: f2:98:da:8e:b3:45:52:91:cd:d8:f6:a9:14:aa:54: 23:5a:42:7c:02:d3:2c:f5:e7:c2:4e:b2:e0:64:c5: f3:73:6b:90:81:b5:76:38:b3:7d:d6:2a:07:dd:7c: fe:a2:b0:91:d9:cd:84:0d:54:61:a2:8f:76:08:92: 42:97:46:70:62:1d:0a:44:ed:39:1c:79:64:f9:a5: e5:e5:08:57:d4:26:20:d8:a9:07:6c:64:db:79:66: 59:97:43:19:8d:53:a0:ab:1a:e1:62:92:a5:c5:5d: 01:19:2e:7f:f6:d6:e4:c7:41:c7:70:e2:05:d5:10: e8:58:44:64:3b:9d:e2:79:1b:39:a7:5a:14:6a:1d: 15:70:20:38:46:54:1c:4d:ba:41:0a:9f:08:5a:e5: 05:1e:20:bc:08:22:e5:c5:66:e0:90:b9:84:f4:05: 62:83:eb:cc:90:59:4a:0f:5d:7a:5a:be:24:5e:8d: 10:cd:cf:65:b8:50:3f:a0:4d:49:d0:b0:6e:cf:e1: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D9:10:2E:3A:4C:A0:C3:85:40:2B:7B:0F:B7:9E:94:CB:77:2F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ea:d5:38:44:37:99:75:24:c8:20:b0:88:b0:e0:e3:28:de: c1:f9:fd:b4:5a:63:af:15:d3:75:ee:23:df:bc:36:40:9f:d4: 6f:32:0a:53:fa:25:4a:52:6b:e9:1e:5f:63:ca:75:3c:a9:0d: 54:6f:35:df:55:16:74:5f:28:fb:b6:bf:aa:6e:50:bc:59:38: 1e:39:3f:a1:5e:2f:99:35:b7:b3:81:4c:4e:97:d2:05:7f:ac: 58:7f:51:be:0a:19:97:04:24:3b:c6:14:ab:cd:01:6e:6d:11: b5:2c:43:b9:7e:e4:e6:a6:9e:cf:f8:88:e9:a2:af:af:95:bd: 9a:7d:ad:d4:a0:7e:4f:f9:ce:1f:23:86:09:22:01:d9:7f:19: 3c:cc:b5:57:1d:b4:df:cd:5e:34:54:50:83:9a:06:65:2a:6c: 6a:23:2c:32:ec:08:db:e3:f2:01:f8:2a:da:0f:96:42:a1:dd: 7b:5b:2f:66:66:ca:0b:d0:45:87:e4:ab:84:a9:49:5f:5e:30: ea:92:81:ba:5f:1c:64:97:15:7d:d2:e1:a6:15:e2:e0:ae:00: 5b:99:21:e1:bd:81:2d:07:a5:6c:79:b4:ba:0a:04:a2:c0:cc: 27:f2:7f:ed:db:2e:a7:ab:63:08:c0:66:d0:2a:f2:b8:63:10: a3:c0:c4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkpu0wgICazhv8h4qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDMxMjExMzkyMVoXDTI1MDYxMDExMzkyMVowLzEtMCsGA1UEAxMk MmM1YWNjMjgtYzljYi00MGNmLWFhZjUtMTE4ODA1OWUwN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDo24ZvlYfsvKjIKz242SNf59AmFaPtW4lCt 3zqZ/X/Ei2X2araHjJoQrSwPQO9xgJ4+Q5mb6Qzf+RDymNqOs0VSkc3Y9qkUqlQj WkJ8AtMs9efCTrLgZMXzc2uQgbV2OLN91ioH3Xz+orCR2c2EDVRhoo92CJJCl0Zw Yh0KRO05HHlk+aXl5QhX1CYg2KkHbGTbeWZZl0MZjVOgqxrhYpKlxV0BGS5/9tbk x0HHcOIF1RDoWERkO53ieRs5p1oUah0VcCA4RlQcTbpBCp8IWuUFHiC8CCLlxWbg kLmE9AVig+vMkFlKD116Wr4kXo0Qzc9luFA/oE1J0LBuz+HWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLZEC46TKDDhUArew+3npTLdy8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMWMwYTc2Y2QtYTg0OC0z NDdhLTg1MzQtYmI4MTExN2RlMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzq1ThEN5l1JMggsIiw4OMo3sH5/bRaY68V03XuI9+8NkCf1G8yClP6 JUpSa+keX2PKdTypDVRvNd9VFnRfKPu2v6puULxZOB45P6FeL5k1t7OBTE6X0gV/ rFh/Ub4KGZcEJDvGFKvNAW5tEbUsQ7l+5Oamns/4iOmir6+VvZp9rdSgfk/5zh8j hgkiAdl/GTzMtVcdtN/NXjRUUIOaBmUqbGojLDLsCNvj8gH4KtoPlkKh3XtbL2Zm ygvQRYfkq4SpSV9eMOqSgbpfHGSXFX3S4aYV4uCuAFuZIeG9gS0HpWx5tLoKBKLA zCfyf+3bLqerYwjAZtAq8rhjEKPAxIk= -----END CERTIFICATE-----Generated at Sat Apr 12 12:59:14 2025 by rpki-client