$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/57468bcd-ede0-389a-8db0-7a2c286d29e4.roa File: 57468bcd-ede0-389a-8db0-7a2c286d29e4.roa (raw, json) Hash identifier: a/Gt+E4Hzqk58w2EN30804AYaKAjDyS0zJaCKQyXCZQ= Subject key identifier: BF:AD:A1:75:86:0D:20:6B:4A:E6:32:5A:C0:B1:CE:A0:DE:0F:35:B5 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F43285848B7A52AFB9A0DB0BF437DC980 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/57468bcd-ede0-389a-8db0-7a2c286d29e4.roa Signing time: Thu 30 Jan 2025 14:52:36 +0000 ROA not before: Thu 30 Jan 2025 14:52:36 +0000 ROA not after: Wed 30 Apr 2025 13:52:36 +0000 asID: 63360 IP address blocks: 168.225.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:a5:2a:fb:9a:0d:b0:bf:43:7d:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Jan 30 14:52:36 2025 GMT Not After : Apr 30 13:52:36 2025 GMT Subject: CN=9296fe90-6427-40f8-b0fc-598cb87241b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:6c:2d:8d:07:dc:29:0b:17:49:45:3d:1f: 0b:34:60:2e:4f:5b:70:42:69:ad:7c:f4:26:56:fc: 2d:7f:29:dd:97:a6:20:fa:a2:30:1c:fd:d3:1c:f5: ab:6f:c6:0e:1d:48:d0:0d:46:23:f2:32:3b:03:51: 7b:1c:7a:d1:e1:62:0e:7d:38:ff:fb:a9:25:c0:a0: 99:85:e7:54:98:91:d0:3d:f2:3c:30:a7:f6:3e:1d: a1:63:47:47:72:81:10:1a:39:bd:a1:15:0b:70:65: 4c:94:61:1b:af:ba:48:d0:a9:e2:bd:b7:ad:ea:47: e4:82:24:44:18:01:b0:17:86:86:b7:47:19:48:90: 56:91:9b:39:3e:e3:33:95:a2:36:c7:e9:de:cb:e0: 92:87:ad:32:e3:28:fb:23:0e:4b:6c:ab:22:1e:5d: 80:6a:6a:cd:76:7f:5b:38:66:2c:b6:d9:18:77:4d: f6:e9:ae:c7:9a:86:a9:09:64:66:ff:c5:d1:0d:ac: 54:73:2a:ad:df:3d:c2:13:4f:30:2b:c6:2a:c2:43: ed:17:b0:a6:7b:3e:0f:a3:d1:4a:25:8b:f5:64:94: a6:60:cf:f6:88:ad:93:f8:ac:45:d1:1e:58:b3:91: a8:32:b2:22:2f:5b:65:f2:93:f9:31:67:d1:87:f6: 24:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:A1:75:86:0D:20:6B:4A:E6:32:5A:C0:B1:CE:A0:DE:0F:35:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/57468bcd-ede0-389a-8db0-7a2c286d29e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:70:74:ad:58:14:34:a5:da:47:8e:ea:8c:c0:52:00:4c:5c: bb:29:f1:bf:49:33:75:b2:1b:14:75:58:2f:16:ba:31:29:45: 32:2b:08:70:b8:75:f8:50:23:28:b6:09:f2:f2:d9:39:8b:f9: 3f:e7:2b:cb:dc:e8:6a:43:1e:03:c1:8e:25:10:e4:c0:d5:32: 96:2a:d9:a7:2d:8a:a8:e9:53:b1:f2:f2:55:b2:b8:3e:4a:e5: 3f:52:1b:24:fd:ce:fa:13:cd:3b:d6:b0:9d:fa:cf:75:f4:fd: f4:80:5a:80:06:6e:5c:59:01:2a:b1:c2:b2:00:94:38:c8:32: a2:ed:6d:ac:e4:01:08:c2:2c:4b:47:c5:fa:7e:ae:a9:e2:29: 5a:65:01:b1:85:b2:f4:95:1b:41:4c:82:42:1e:70:5c:62:ad: 57:a8:ba:86:c2:b4:b8:da:d0:42:c3:8e:32:d5:2b:c9:3d:37: 95:f9:d8:1e:3a:fa:dd:37:35:cc:be:0b:48:58:92:18:ec:cb: 3d:79:cb:27:d9:b7:4b:b7:85:5f:5b:29:9e:0f:a2:0a:aa:3c: bf:64:fa:fe:78:f9:fd:dd:3b:c4:44:b4:53:a9:35:e9:d7:0a: 67:ac:bf:8c:2d:88:97:43:c8:8f:1b:2f:4e:23:4d:d0:c5:69: a7:93:55:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3pSr7mg2wv0N9yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDEzMDE0NTIzNloXDTI1MDQzMDEzNTIzNlowLzEtMCsGA1UEAxMk OTI5NmZlOTAtNjQyNy00MGY4LWIwZmMtNTk4Y2I4NzI0MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftsLY0H3CkLF0lFPR8LNGAuT1twQmmtfPQm Vvwtfyndl6Yg+qIwHP3THPWrb8YOHUjQDUYj8jI7A1F7HHrR4WIOfTj/+6klwKCZ hedUmJHQPfI8MKf2Ph2hY0dHcoEQGjm9oRULcGVMlGEbr7pI0Knivbet6kfkgiRE GAGwF4aGt0cZSJBWkZs5PuMzlaI2x+ney+CSh60y4yj7Iw5LbKsiHl2AamrNdn9b OGYsttkYd0326a7HmoapCWRm/8XRDaxUcyqt3z3CE08wK8YqwkPtF7Cmez4Po9FK JYv1ZJSmYM/2iK2T+KxF0R5Ys5GoMrIiL1tl8pP5MWfRh/YkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+toXWGDSBrSuYyWsCxzqDeDzW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvNTc0NjhiY2QtZWRlMC0z ODlhLThkYjAtN2EyYzI4NmQyOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdwdK1YFDSl2keO6ozAUgBMXLsp8b9JM3WyGxR1WC8WujEpRTIrCHC4 dfhQIyi2CfLy2TmL+T/nK8vc6GpDHgPBjiUQ5MDVMpYq2actiqjpU7Hy8lWyuD5K 5T9SGyT9zvoTzTvWsJ36z3X0/fSAWoAGblxZASqxwrIAlDjIMqLtbazkAQjCLEtH xfp+rqniKVplAbGFsvSVG0FMgkIecFxirVeouobCtLja0ELDjjLVK8k9N5X52B46 +t03Ncy+C0hYkhjsyz15yyfZt0u3hV9bKZ4PogqqPL9k+v54+f3dO8REtFOpNenX Cmesv4wtiJdDyI8bL04jTdDFaaeTVbA= -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:23 2025 by rpki-client