$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa File: f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa (raw, json) Hash identifier: KQZGbU9d6M9MYFa2KjoO6eVd+g0zSUn5QwCsYMduFGE= Subject key identifier: 72:24:49:41:DB:84:2A:95:E5:C8:90:9B:FC:EE:37:86:2E:5E:D4:34 Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F432858495EEEE8AC394A6317A4E8B700 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 398427 IP address blocks: 185.172.188.0/22 maxlen: 22 2602:fd35::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e8:ac:39:4a:63:17:a4:e8:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=8958ebec-3084-4205-bbd0-bc423679c04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:90:54:94:ea:a0:a7:b4:3c:74:ea:9c:61: a0:65:0a:0d:18:68:5d:cb:36:ac:8e:b8:18:f7:b7: c4:30:99:ac:ae:50:5e:6f:9f:85:d1:98:5a:0b:00: be:54:0d:de:34:8d:c3:d2:08:1b:58:3d:44:02:36: 90:14:a5:01:74:38:4e:c1:9e:e2:32:ee:74:ef:97: 32:d0:56:88:86:17:74:36:e2:ae:f2:78:c6:9a:fc: 30:32:1e:6b:15:7e:e7:d2:9f:ce:d3:09:db:9c:2d: e5:d8:d3:bf:23:53:72:e3:a0:00:c1:12:f1:f4:67: 18:e5:d6:26:b3:ac:53:e3:b5:20:5d:de:5b:a2:1b: 10:66:8a:fa:1c:b0:f2:e0:ab:39:17:3e:62:a3:ba: c7:75:c3:0e:22:dc:2e:83:03:b5:6a:09:15:3a:13: 54:3e:9f:19:3e:1c:d0:e0:d5:00:95:09:a3:5b:d4: 4e:12:e5:56:00:e7:45:02:0c:43:be:b4:f1:25:ef: 84:a1:99:33:ff:63:27:d8:52:64:91:93:2c:0d:80: c7:9b:c6:4a:07:b2:5b:fc:63:32:73:c0:fd:2b:39: dc:aa:ee:52:f1:c2:6f:71:00:51:f0:72:bf:1f:7c: ba:80:ed:3c:08:d1:05:32:25:49:d6:1c:4e:58:1b: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:24:49:41:DB:84:2A:95:E5:C8:90:9B:FC:EE:37:86:2E:5E:D4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.172.188.0/22 IPv6: 2602:fd35::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:5e:25:08:d5:aa:c8:7a:95:fd:1a:25:10:d8:7a:e6:82: 7e:e0:b9:10:09:a3:d9:04:59:86:ff:86:b2:78:e5:ef:be:10: c0:17:dc:26:b9:e0:ca:75:db:61:de:ae:fe:99:b4:ff:1f:76: e0:42:ed:ea:72:cc:0e:8c:b2:dd:88:30:9f:c4:eb:84:41:d5: cb:d0:95:2e:a8:fb:42:0d:21:33:20:be:21:5d:4c:70:2a:ec: 61:f7:a4:df:2b:9c:cd:ad:03:62:78:87:1e:e0:9d:75:e4:12: 36:a9:7b:36:3b:82:1f:e4:f0:09:fa:b3:8f:37:2f:d3:86:3d: 3d:74:94:60:39:85:cd:9f:a3:0c:4d:31:4e:1f:87:72:ff:ea: 90:4d:a1:4e:9e:5e:18:88:48:30:3e:42:05:24:7c:69:fa:9e: 9c:a4:82:29:2c:19:c1:1e:ca:6e:1f:fb:7e:f1:00:c6:51:b9: 9e:59:f9:29:b2:a3:c4:6c:e3:e7:ae:c3:1d:2d:4b:ba:8b:b8: 0f:19:c2:01:ad:81:de:b5:c2:3f:c8:1b:c9:18:f1:7d:3d:9d: 5d:63:ff:fc:d6:12:26:60:d9:8b:ac:5a:9e:d4:64:a3:7b:28: d3:c4:a7:67:2e:21:5f:e2:56:e3:8c:5c:b6:b2:a2:b2:8b:d6: 6c:ac:d4:90 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEle7uisOUpjF6TotwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ODk1OGViZWMtMzA4NC00MjA1LWJiZDAtYmM0MjM2NzljMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSWQVJTqoKe0PHTqnGGgZQoNGGhdyzasjrgY 97fEMJmsrlBeb5+F0ZhaCwC+VA3eNI3D0ggbWD1EAjaQFKUBdDhOwZ7iMu5075cy 0FaIhhd0NuKu8njGmvwwMh5rFX7n0p/O0wnbnC3l2NO/I1Ny46AAwRLx9GcY5dYm s6xT47UgXd5bohsQZor6HLDy4Ks5Fz5io7rHdcMOItwugwO1agkVOhNUPp8ZPhzQ 4NUAlQmjW9ROEuVWAOdFAgxDvrTxJe+EoZkz/2Mn2FJkkZMsDYDHm8ZKB7Jb/GMy c8D9Kzncqu5S8cJvcQBR8HK/H3y6gO08CNEFMiVJ1hxOWBs0MwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHIkSUHbhCqV5ciQm/zuN4YuXtQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvZjkyNGVjNDUtN2M0Yi0z Yzk4LTljNDItMmNiMTY4NmRiNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuay8MA4E AgACMAgDBgQmAv01ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRxF4lCNWqyHqV/RolENh65oJ+4LkQCaPZ BFmG/4ayeOXvvhDAF9wmueDKddth3q7+mbT/H3bgQu3qcswOjLLdiDCfxOuEQdXL 0JUuqPtCDSEzIL4hXUxwKuxh96TfK5zNrQNieIce4J115BI2qXs2O4If5PAJ+rOP Ny/Thj09dJRgOYXNn6MMTTFOH4dy/+qQTaFOnl4YiEgwPkIFJHxp+p6cpIIpLBnB HspuH/t+8QDGUbmeWfkpsqPEbOPnrsMdLUu6i7gPGcIBrYHetcI/yBvJGPF9PZ1d Y//81hImYNmLrFqe1GSjeyjTxKdnLiFf4lbjjFy2sqKyi9ZsrNSQ -----END CERTIFICATE-----Generated at Sat Apr 12 18:41:56 2025 by rpki-client