$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2b5716e5-347d-3e1a-aa5a-a864182857e3.roa File: 2b5716e5-347d-3e1a-aa5a-a864182857e3.roa (raw, json) Hash identifier: YnTcPfgKspoXBOe3z4Gc36TlkOh30o5CusFCp2WAf0A= Subject key identifier: 49:15:2B:A0:40:62:B2:84:14:54:09:C3:CD:75:A0:10:39:CD:12:D8 Certificate issuer: /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f Certificate serial: 010D0C9F4328584A42757CC387B6258D31D67580 Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2b5716e5-347d-3e1a-aa5a-a864182857e3.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 395267 IP address blocks: 162.27.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:7c:c3:87:b6:25:8d:31:d6:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=a251f1a5-c733-4048-b0ee-6bc96d21e9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:b3:64:1c:98:92:20:c3:95:31:cf:dc:e9: d0:9d:c1:1c:fc:e0:00:c5:23:08:cc:6f:38:54:11: eb:be:3d:b2:07:72:ba:90:0a:62:4a:e8:95:32:6c: 2a:c3:e6:2c:89:a8:e2:52:31:0e:70:cd:ac:32:0c: b0:7b:42:0a:78:1e:75:26:39:a0:04:83:5b:e8:3e: 42:7e:44:f8:37:1d:f3:37:97:3f:c9:7d:6b:38:bf: bc:55:15:1a:67:a2:30:69:d2:06:ab:e9:21:2b:29: b0:57:22:32:41:4d:fe:6d:9f:ad:2b:ce:08:7f:b0: 62:43:60:45:5d:e4:56:1a:66:4b:c7:22:a3:a4:59: 0f:f7:06:8b:df:b6:ac:ee:06:68:09:85:52:e2:db: 0f:5e:7f:bc:7d:50:dd:46:fd:45:4f:d7:57:a1:f4: 55:10:dc:f7:e1:8e:c8:e1:7c:fe:61:b7:33:1b:d5: d9:46:48:5d:b5:0c:04:3c:47:c5:45:27:66:4d:47: 71:1b:a8:8a:5d:a4:71:b3:9b:72:3a:12:42:d9:e6: 0c:40:20:3a:5c:4a:3d:26:f3:95:77:53:94:0e:2c: 0d:ce:69:cd:d1:43:4c:47:32:4e:d5:6f:cb:91:30: fa:f0:73:fa:f4:e7:40:e6:9d:54:5f:14:b5:bf:18: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:15:2B:A0:40:62:B2:84:14:54:09:C3:CD:75:A0:10:39:CD:12:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2b5716e5-347d-3e1a-aa5a-a864182857e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl X509v3 Authority Key Identifier: keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer sbgp-ipAddrBlock: critical IPv4: 162.27.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7a:eb:3a:e8:93:1c:2a:98:07:04:0b:d0:cc:96:5f:ee:ae: e1:b6:fc:51:16:1d:5e:48:1c:08:fd:cc:e2:3b:c5:dc:a4:c1: 45:0b:47:b9:1a:2f:fb:94:25:dc:17:b7:0f:03:32:45:29:17: 82:55:4a:29:a6:40:6d:58:7b:5f:40:8a:46:d4:75:08:85:3c: 8f:d2:99:91:ca:bc:ff:26:66:80:d6:5d:9f:4d:37:4c:b0:c0: 80:95:64:1b:9e:6c:68:c1:5b:a7:82:6b:1f:db:4d:ec:41:5f: 13:79:2f:86:09:14:ec:66:09:86:fa:18:07:f9:80:34:cc:3f: 23:12:66:ab:1c:22:06:fd:c1:b2:f0:7f:f6:69:35:82:ea:c2: fa:35:b6:e0:73:dc:3a:2b:00:48:7e:02:a8:be:45:01:03:be: fd:1c:b3:6d:7b:91:fe:80:1f:a4:ad:48:82:0e:de:ab:25:cd: 4e:3a:ff:64:dc:78:8c:56:67:b5:d8:69:30:91:07:40:e5:04: 43:ac:8c:32:e9:7f:81:8a:d5:8d:04:4f:55:44:f6:86:de:8c: 7b:bb:a5:39:41:e8:af:98:6b:52:fc:fe:d6:0f:ed:d0:68:1f: 4b:81:56:7d:b3:ed:6d:d4:08:ea:56:7d:07:15:5e:f0:53:47: a4:4a:14:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdXzDh7YljTHWdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGY2MjItZTFhNS00ZGIzLWFkNDMtOWI1NGE0NTg2 ZTRmMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk YTI1MWYxYTUtYzczMy00MDQ4LWIwZWUtNmJjOTZkMjFlOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiWzZByYkiDDlTHP3OnQncEc/OAAxSMIzG84 VBHrvj2yB3K6kApiSuiVMmwqw+YsiajiUjEOcM2sMgywe0IKeB51JjmgBINb6D5C fkT4Nx3zN5c/yX1rOL+8VRUaZ6IwadIGq+khKymwVyIyQU3+bZ+tK84If7BiQ2BF XeRWGmZLxyKjpFkP9waL37as7gZoCYVS4tsPXn+8fVDdRv1FT9dXofRVENz34Y7I 4Xz+YbczG9XZRkhdtQwEPEfFRSdmTUdxG6iKXaRxs5tyOhJC2eYMQCA6XEo9JvOV d1OUDiwNzmnN0UNMRzJO1W/LkTD68HP69OdA5p1UXxS1vxjUrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkVK6BAYrKEFFQJw811oBA5zRLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMzJk ZjYyMi1lMWE1LTRkYjMtYWQ0My05YjU0YTQ1ODZlNGYvMmI1NzE2ZTUtMzQ3ZC0z ZTFhLWFhNWEtYTg2NDE4Mjg1N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjMyZGY2MjItZTFhNS00ZGIzLWFk NDMtOWI1NGE0NTg2ZTRmL2IzMmRmNjIyLWUxYTUtNGRiMy1hZDQzLTliNTRhNDU4 NmU0Zi5jcmwwHwYDVR0jBBgwFoAUsWW8JemcAimo4u+j1acfJrjoPQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMzJkZjYyMi1lMWE1LTRkYjMtYWQ0My05YjU0 YTQ1ODZlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAohvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl66zrokxwqmAcEC9DMll/uruG2/FEWHV5IHAj9zOI7xdykwUULR7ka L/uUJdwXtw8DMkUpF4JVSimmQG1Ye19AikbUdQiFPI/SmZHKvP8mZoDWXZ9NN0yw wICVZBuebGjBW6eCax/bTexBXxN5L4YJFOxmCYb6GAf5gDTMPyMSZqscIgb9wbLw f/ZpNYLqwvo1tuBz3DorAEh+Aqi+RQEDvv0cs217kf6AH6StSIIO3qslzU46/2Tc eIxWZ7XYaTCRB0DlBEOsjDLpf4GK1Y0ET1VE9obejHu7pTlB6K+Ya1L8/tYP7dBo H0uBVn2z7W3UCOpWfQcVXvBTR6RKFHU= -----END CERTIFICATE-----Generated at Wed Jul 9 03:30:32 2025 by rpki-client