$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa File: f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa (raw, json) Hash identifier: PfzQZR20R+BOGJnp6TdBi3aDq1GPvXekRsl2kvxURKo= Subject key identifier: F1:DB:4C:9D:7E:6C:CF:E5:36:9A:E2:29:26:B2:AC:7E:83:4B:28:A7 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F432858496A1991096FA1DCD7A7EB54C0 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 63360 IP address blocks: 168.225.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:91:09:6f:a1:dc:d7:a7:eb:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=2e2596ac-f199-4053-8d6d-a890edaf3ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:15:08:33:39:1d:e3:af:83:6d:c1:0a:a2: c0:8f:6b:3a:3f:cd:42:ee:85:3c:00:ae:ae:f9:bb: e4:9e:29:9b:08:b1:03:67:e0:72:31:f1:23:74:11: 1a:14:4c:85:47:f1:b5:3d:89:7d:bb:26:0a:2e:60: bc:00:05:c4:c9:96:78:c2:24:ba:63:4b:7f:f8:6d: 21:91:cb:12:30:da:38:5c:bd:2b:fb:05:43:81:e5: af:3e:ab:77:d5:28:c9:3b:0e:db:79:86:e0:8a:55: b9:21:1b:87:f2:3d:f6:a2:0d:88:9a:3a:2d:71:d5: 64:85:77:4e:2c:f6:b2:95:2c:0a:b1:e3:fb:81:b2: cc:79:f9:8d:fe:08:ca:0c:74:77:5b:9d:86:83:7a: 4c:b2:82:7b:da:8e:d9:9e:81:6a:91:b7:82:92:7f: 59:e4:fa:bb:eb:ac:51:b9:d1:d0:17:7d:df:c0:3b: 79:45:36:8a:bb:28:c1:f9:a9:b2:e0:62:bb:a3:ac: 41:fd:85:72:1f:4f:62:32:21:5b:b2:b7:50:bb:2e: a6:42:3e:60:da:c2:7d:27:1f:0e:57:0f:37:21:7f: 3e:2f:18:12:d2:f3:08:6c:ea:f9:37:f9:89:8b:9e: 49:bb:53:ce:7b:f7:5a:ee:8a:65:dc:86:79:28:e3: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:4C:9D:7E:6C:CF:E5:36:9A:E2:29:26:B2:AC:7E:83:4B:28:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:86:81:ce:84:4d:6a:11:9d:41:7a:70:e6:1b:b1:60:ab:a3: ab:1e:61:ee:e3:d1:f2:bd:81:44:2f:51:59:49:5f:5c:c0:35: be:4b:07:64:54:af:69:fd:ed:95:e0:c4:e9:3e:f7:6e:c5:5d: 1b:39:39:07:df:09:6c:18:22:6e:92:c7:69:d5:2a:c7:43:67: f5:35:88:d2:1a:4b:0f:9a:1b:a0:bf:4e:46:66:43:7f:10:b5: 0b:30:3f:95:fb:55:15:a1:b6:68:03:90:af:08:a4:3a:71:9f: 99:e4:5c:ab:6e:0f:34:da:c3:2e:9b:64:e8:96:ea:de:5c:8f: f9:42:98:e4:b4:2a:3f:c9:f7:75:0d:d0:3e:35:94:f5:b1:7c: ae:f8:af:51:19:d0:10:bd:89:28:80:cb:a7:a1:2c:07:24:64: 6a:90:86:20:57:8d:6b:06:cb:3b:c0:f6:5b:42:4a:33:6c:54: 9f:51:a9:9b:e9:02:d3:a2:a2:fd:04:b1:fe:ac:f9:3b:8d:14: c3:fa:84:91:dc:e8:bd:25:4b:76:66:db:b1:8f:5c:98:89:b9: db:33:a9:7c:51:f9:8b:f4:a1:56:7a:76:d5:d1:5d:32:f7:d7: 05:61:2f:fe:af:ae:2b:f2:35:bd:cf:21:95:cf:79:0c:da:ae: 3b:bf:41:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZEJb6Hc16frVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MmUyNTk2YWMtZjE5OS00MDUzLThkNmQtYTg5MGVkYWYzZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh4VCDM5HeOvg23BCqLAj2s6P81C7oU8AK6u +bvknimbCLEDZ+ByMfEjdBEaFEyFR/G1PYl9uyYKLmC8AAXEyZZ4wiS6Y0t/+G0h kcsSMNo4XL0r+wVDgeWvPqt31SjJOw7beYbgilW5IRuH8j32og2ImjotcdVkhXdO LPaylSwKseP7gbLMefmN/gjKDHR3W52Gg3pMsoJ72o7ZnoFqkbeCkn9Z5Pq766xR udHQF33fwDt5RTaKuyjB+amy4GK7o6xB/YVyH09iMiFbsrdQuy6mQj5g2sJ9Jx8O Vw83IX8+LxgS0vMIbOr5N/mJi55Ju1POe/da7opl3IZ5KOOxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHbTJ1+bM/lNpriKSayrH6DSyinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZjdjNjQzMjAtZDRkNy0z MTYzLThhN2UtNGFiNmZlZDZhZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaGgc6ETWoRnUF6cOYbsWCro6seYe7j0fK9gUQvUVlJX1zANb5LB2RU r2n97ZXgxOk+927FXRs5OQffCWwYIm6Sx2nVKsdDZ/U1iNIaSw+aG6C/TkZmQ38Q tQswP5X7VRWhtmgDkK8IpDpxn5nkXKtuDzTawy6bZOiW6t5cj/lCmOS0Kj/J93UN 0D41lPWxfK74r1EZ0BC9iSiAy6ehLAckZGqQhiBXjWsGyzvA9ltCSjNsVJ9RqZvp AtOiov0Esf6s+TuNFMP6hJHc6L0lS3Zm27GPXJiJudszqXxR+Yv0oVZ6dtXRXTL3 1wVhL/6vrivyNb3PIZXPeQzarju/QcE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:08 2025 by rpki-client