$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa File: 833f5f93-724a-3c22-a00b-700ea32b586a.roa (raw, json) Hash identifier: MrE51IT91x+uU8G5L5iGn/0yXjYCv8qCIf0AYmkkfSk= Subject key identifier: 3A:3A:1B:C5:4C:43:D3:7F:25:B7:28:11:7B:B2:17:5A:14:A8:30:00 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584A093A99E679A0BB8F0E26D200 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 63360 IP address blocks: 168.225.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:99:e6:79:a0:bb:8f:0e:26:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=316b3330-0033-4b97-9dce-51b7f645d395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:67:5d:b8:8e:32:d7:dd:6a:73:66:f4:5b: f2:8c:a9:d3:f7:e4:6e:40:d6:93:dd:67:96:ee:6f: 97:4b:04:62:7f:48:bf:0d:c3:cf:7d:ac:5c:d3:ec: 8d:b6:f3:cd:a2:41:38:6d:48:b9:55:73:89:2c:ea: 31:58:d2:fe:9b:35:75:ef:f3:b7:b3:26:76:70:0e: 77:69:fc:08:09:73:87:a7:cd:ed:ac:f2:6f:51:b7: d3:f7:61:20:73:bc:99:70:23:c1:c2:3f:3a:af:5d: b8:cc:fa:c3:39:42:35:5d:7f:dc:45:df:a0:8b:51: e6:45:dd:56:2c:f2:03:aa:88:cb:2c:be:7e:14:24: 0a:fe:02:0e:85:ad:51:45:94:0e:ec:9a:0a:af:1a: 03:bc:60:1a:75:45:36:9c:ed:52:25:9a:b1:69:68: f3:c4:08:3f:27:33:96:b5:81:7c:6e:67:2b:3c:d9: 30:a4:d1:61:1f:31:29:c1:43:e8:6b:d9:56:ef:1e: 2b:cb:dd:e5:99:99:35:c0:38:7e:78:81:43:04:0a: 1e:32:ff:cf:e1:9b:f3:51:de:23:e3:15:ee:00:1a: 00:73:c4:11:4c:56:c6:ad:53:7f:66:ae:a1:52:10: 5c:aa:f3:6c:68:fd:b0:27:53:09:01:17:9a:0b:cb: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3A:1B:C5:4C:43:D3:7F:25:B7:28:11:7B:B2:17:5A:14:A8:30:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:a6:14:0f:a1:09:ea:c7:8e:4a:29:0e:fe:f7:cd:bd:dd: 25:77:ba:ba:d2:2f:7a:c9:e8:f5:c2:10:b4:0f:d3:c3:ec:a0: ec:51:4d:0e:57:02:de:24:8e:d0:1c:2e:01:74:6d:f3:02:a4: 3a:f3:f2:aa:9d:02:d7:15:b8:5c:3e:10:cf:2d:6b:e1:ef:e4: 6f:4b:ce:37:27:0d:b5:e4:f8:12:fc:eb:0a:5b:77:4c:83:11: a6:3f:44:76:f2:bf:69:74:f8:53:96:32:ef:2e:1c:f0:46:bb: a1:7f:59:30:f0:eb:51:c8:39:df:d6:41:ed:70:cd:5a:f4:42: 50:fb:de:74:5e:87:7a:6a:5a:12:88:19:1f:5c:93:87:ca:fc: b7:ea:36:fd:19:db:b5:9f:18:de:15:f9:96:ad:e7:22:d0:f1: 23:05:73:cc:36:9a:d3:62:9e:86:b6:e4:6b:89:8e:47:53:2c: 4e:78:f5:12:89:99:b1:98:c9:44:cf:3e:9d:61:15:f3:b8:c8: 5d:87:68:43:59:07:cf:5d:e5:aa:37:34:1d:81:58:2f:74:b6: 76:4f:40:5c:64:a7:b0:20:d9:12:9c:f3:96:9b:37:5f:41:01: f0:6d:b7:b4:fc:9d:60:93:ea:79:fe:c2:3f:41:b0:77:9b:96: c1:ee:9d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOpnmeaC7jw4m0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk MzE2YjMzMzAtMDAzMy00Yjk3LTlkY2UtNTFiN2Y2NDVkMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqpnXbiOMtfdanNm9FvyjKnT9+RuQNaT3WeW 7m+XSwRif0i/DcPPfaxc0+yNtvPNokE4bUi5VXOJLOoxWNL+mzV17/O3syZ2cA53 afwICXOHp83trPJvUbfT92Egc7yZcCPBwj86r124zPrDOUI1XX/cRd+gi1HmRd1W LPIDqojLLL5+FCQK/gIOha1RRZQO7JoKrxoDvGAadUU2nO1SJZqxaWjzxAg/JzOW tYF8bmcrPNkwpNFhHzEpwUPoa9lW7x4ry93lmZk1wDh+eIFDBAoeMv/P4ZvzUd4j 4xXuABoAc8QRTFbGrVN/Zq6hUhBcqvNsaP2wJ1MJAReaC8tjWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo6G8VMQ9N/JbcoEXuyF1oUqDAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvODMzZjVmOTMtNzI0YS0z YzIyLWEwMGItNzAwZWEzMmI1ODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQvphQPoQnqx45KKQ7+98293SV3urrSL3rJ6PXCELQP08PsoOxRTQ5X At4kjtAcLgF0bfMCpDrz8qqdAtcVuFw+EM8ta+Hv5G9LzjcnDbXk+BL86wpbd0yD EaY/RHbyv2l0+FOWMu8uHPBGu6F/WTDw61HIOd/WQe1wzVr0QlD73nReh3pqWhKI GR9ck4fK/LfqNv0Z27WfGN4V+Zat5yLQ8SMFc8w2mtNinoa25GuJjkdTLE549RKJ mbGYyUTPPp1hFfO4yF2HaENZB89d5ao3NB2BWC90tnZPQFxkp7Ag2RKc85abN19B AfBtt7T8nWCT6nn+wj9BsHeblsHunTI= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:08 2025 by rpki-client