$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa File: fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa (raw, json) Hash identifier: ckORXrPzPdvhBF5buXWpkt3b3XY6KxpG02JpKO85q4Y= Subject key identifier: 98:7F:8E:12:29:AE:8D:1E:C4:B3:BF:01:EA:BD:C5:0F:C8:D2:C6:8B Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584929B2EA5B26319AA7954A3940 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa Signing time: Wed 12 Mar 2025 11:22:28 +0000 ROA not before: Wed 12 Mar 2025 11:22:28 +0000 ROA not after: Tue 10 Jun 2025 11:22:28 +0000 asID: 63360 IP address blocks: 168.225.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:b2:ea:5b:26:31:9a:a7:95:4a:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Mar 12 11:22:28 2025 GMT Not After : Jun 10 11:22:28 2025 GMT Subject: CN=1a22d8fe-4da9-4ea8-95b4-57d955d34bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:44:cc:12:5c:c3:89:49:70:e9:b9:02:0d: 54:f3:6a:73:20:aa:77:28:55:b6:79:38:8a:7d:be: 28:c4:d1:bc:92:2f:0c:48:b0:a5:0e:6c:a9:41:01: f2:d2:a9:7a:0e:e5:f3:63:c2:28:72:31:e2:05:83: 91:0a:26:7e:93:91:d9:14:ee:10:b7:83:d3:da:2f: 02:f4:fa:37:35:ca:38:50:04:80:c2:54:dc:70:60: 5d:03:9e:25:d2:6e:bf:fc:e3:5b:09:da:0b:46:59: 8d:10:c4:d4:52:70:b0:c9:df:2a:1c:99:f4:8e:14: 8d:5e:ce:17:a7:56:77:35:59:11:2e:d0:28:ea:00: f4:9b:84:09:05:65:66:e4:32:37:0b:1d:86:5a:74: f0:b5:74:55:b7:e6:41:e5:fe:11:56:53:94:7c:7c: 92:5a:28:f5:e6:22:ca:3a:5e:ef:a6:df:6e:b2:77: d3:61:3f:44:9d:c3:a8:20:3e:15:60:b4:b8:57:0a: dc:74:9d:82:3a:06:bb:1e:f9:c8:54:6f:09:a0:c0: 4a:f1:81:d4:dc:06:f6:bd:96:3a:8f:fe:70:0d:f8: e5:dd:67:71:2d:24:15:6d:bc:fe:e7:1b:71:5a:ff: 5e:52:6f:a6:37:fb:96:dd:1d:54:e2:30:b8:98:48: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:8E:12:29:AE:8D:1E:C4:B3:BF:01:EA:BD:C5:0F:C8:D2:C6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4c:5c:16:e1:0f:26:cc:75:a8:5a:8e:09:ae:6c:10:97:33: 24:09:2b:79:d8:2a:31:6e:07:95:77:30:34:ca:3c:56:72:5a: 24:b0:0a:a9:39:39:26:da:e4:2c:c7:ca:4f:fd:51:90:d8:5c: fc:e9:77:3a:7a:8e:cf:a5:bb:dd:67:85:02:29:b2:50:d2:a7: 31:d7:53:3c:e1:bc:09:0c:29:5b:d1:d7:7c:14:f7:fa:84:9f: af:b2:b7:a2:51:cc:cc:ec:58:56:11:4c:51:8b:5d:95:28:fd: b5:c2:b2:d7:72:42:83:df:f7:3c:88:17:68:d5:02:0b:f1:d3: 74:81:51:67:50:45:e2:3e:c0:72:c8:9b:de:97:b1:9d:57:cb: ba:cc:b6:c8:6e:ee:6e:01:2f:99:a7:9c:75:a1:10:43:3e:37: cb:1f:1c:b8:da:55:6a:81:ca:b5:8f:a1:3a:30:d9:85:ef:82: 06:05:d9:ed:b0:2e:00:89:6b:5c:71:75:10:88:1e:6e:06:7e: 3c:3a:c2:9f:ab:27:5e:b4:75:78:4e:37:05:34:56:c2:6c:e6: 15:a5:45:4b:a5:bb:30:8b:3a:72:11:df:1c:20:12:a7:61:19: 23:4a:7e:ab:f5:1b:e8:91:60:dc:0b:b3:cf:b4:93:98:88:e0: 0b:c2:e7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkpsupbJjGap5VKOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDMxMjExMjIyOFoXDTI1MDYxMDExMjIyOFowLzEtMCsGA1UEAxMk MWEyMmQ4ZmUtNGRhOS00ZWE4LTk1YjQtNTdkOTU1ZDM0YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJJEzBJcw4lJcOm5Ag1U82pzIKp3KFW2eTiK fb4oxNG8ki8MSLClDmypQQHy0ql6DuXzY8IocjHiBYORCiZ+k5HZFO4Qt4PT2i8C 9Po3Nco4UASAwlTccGBdA54l0m6//ONbCdoLRlmNEMTUUnCwyd8qHJn0jhSNXs4X p1Z3NVkRLtAo6gD0m4QJBWVm5DI3Cx2GWnTwtXRVt+ZB5f4RVlOUfHySWij15iLK Ol7vpt9usnfTYT9EncOoID4VYLS4VwrcdJ2COga7HvnIVG8JoMBK8YHU3Ab2vZY6 j/5wDfjl3WdxLSQVbbz+5xtxWv9eUm+mN/uW3R1U4jC4mEhTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh/jhIpro0exLO/Aeq9xQ/I0saLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZmRkMTNkYWEtMjA5MS0z ZDhkLWFhYWEtODRjMzM0ZWUwZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClMXBbhDybMdahajgmubBCXMyQJK3nYKjFuB5V3MDTKPFZyWiSwCqk5 OSba5CzHyk/9UZDYXPzpdzp6js+lu91nhQIpslDSpzHXUzzhvAkMKVvR13wU9/qE n6+yt6JRzMzsWFYRTFGLXZUo/bXCstdyQoPf9zyIF2jVAgvx03SBUWdQReI+wHLI m96XsZ1Xy7rMtshu7m4BL5mnnHWhEEM+N8sfHLjaVWqByrWPoTow2YXvggYF2e2w LgCJa1xxdRCIHm4Gfjw6wp+rJ160dXhONwU0VsJs5hWlRUuluzCLOnIR3xwgEqdh GSNKfqv1G+iRYNwLs8+0k5iI4AvC51k= -----END CERTIFICATE-----Generated at Sat Apr 12 13:20:02 2025 by rpki-client