$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/84273c2f-7655-3525-9267-d7961e9600da.roa File: 84273c2f-7655-3525-9267-d7961e9600da.roa (raw, json) Hash identifier: KAJd2SNr6Lhr/PYKRkBRnUHeYDf+o+t0J/sFcYs+e7w= Subject key identifier: 29:F6:2E:89:3A:7C:62:F2:E8:07:E3:F2:5A:0F:19:30:4B:34:9E:77 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A4C3B10CD0A1D5674965DB300 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/84273c2f-7655-3525-9267-d7961e9600da.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 162.250.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:10:cd:0a:1d:56:74:96:5d:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=18a8d56c-b398-463b-ac2c-779960771c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:20:12:93:aa:84:d2:cc:2d:aa:0d:a3:a9:8d: 39:e1:44:fb:92:33:4a:bd:07:75:7d:46:8d:9b:5c: 1a:d6:87:9f:46:10:b7:c4:7a:b5:64:a6:f1:69:03: 9b:a7:6c:eb:c3:38:0b:cb:02:15:72:fa:a2:9e:c9: a2:61:d3:c4:d2:c5:d9:65:31:17:89:e1:66:0f:c5: d6:cd:b7:b7:94:71:7d:ff:b6:08:6e:a3:42:e9:36: 71:4f:84:47:b4:28:0c:10:18:ec:76:17:94:81:de: 6d:96:77:5b:92:b4:46:02:8e:98:55:0c:34:bd:3c: 6b:17:3e:f2:8e:16:4c:6f:71:ed:10:a2:b8:82:28: 03:06:a7:12:3e:64:2a:99:7e:f6:2d:90:5e:00:21: 47:47:d9:1a:c9:c6:fc:67:07:7a:a7:05:3d:f4:76: 41:74:23:90:ea:20:70:3c:ff:ba:c8:c1:b3:e2:6a: 4c:8e:23:da:b3:97:56:40:07:47:04:3c:c5:2e:fb: dc:db:62:6c:ba:21:bb:5b:f8:41:c9:c5:db:a7:97: 85:1f:b5:39:0b:a1:a9:81:8a:6d:fc:d2:37:68:6e: 96:42:d8:4b:34:35:99:d3:29:ea:ee:df:b7:66:2d: 62:16:23:25:35:45:6a:63:9b:41:02:6b:64:1d:63: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F6:2E:89:3A:7C:62:F2:E8:07:E3:F2:5A:0F:19:30:4B:34:9E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/84273c2f-7655-3525-9267-d7961e9600da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 162.250.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:12:f4:7a:45:4a:3d:32:c7:0f:0f:6d:31:93:0e:ec:b6:6d: 2a:ad:ec:0f:16:7c:06:0c:d3:06:06:f7:39:be:f0:00:a1:16: fd:c7:6f:a4:51:44:70:ca:a2:d5:3c:5f:8e:aa:70:3d:0a:e3: 62:0d:77:a6:2c:67:4a:bd:f6:ef:6f:75:3c:c3:ae:05:54:77: cc:4f:5b:3c:a4:5c:f0:7e:a5:90:93:08:26:12:c7:fb:6a:aa: f4:ba:5c:98:c1:18:21:34:f9:94:1e:1e:cd:23:2a:8a:ff:d5: 5f:b8:0f:72:0c:94:6b:85:8c:0b:24:7d:6c:94:6f:69:7e:b1: 2a:d2:93:3d:4c:ce:9e:65:58:f0:b3:b5:9a:9d:e6:04:ef:e6: 0e:4d:5d:2b:78:5c:cd:88:d9:79:6a:f6:02:7c:fe:01:62:b2: b1:3f:0f:99:5f:c2:af:38:aa:63:9d:6e:fb:d9:5b:6c:a7:7e: 5b:94:c6:68:5e:67:82:7c:7b:ec:6f:16:38:3b:65:ea:bf:09: e4:e1:f7:78:01:f5:c1:4f:7a:64:32:0f:33:4e:5c:03:b4:ca: 83:8f:1c:81:75:5b:d5:9e:58:ad:4e:2c:cd:5a:6b:d9:30:17: ff:60:0b:6c:cf:5a:b0:75:88:90:be:b3:64:a2:5f:79:77:04: 26:ec:9d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxDNCh1WdJZdswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MThhOGQ1NmMtYjM5OC00NjNiLWFjMmMtNzc5OTYwNzcxYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CASk6qE0swtqg2jqY054UT7kjNKvQd1fUaN m1wa1oefRhC3xHq1ZKbxaQObp2zrwzgLywIVcvqinsmiYdPE0sXZZTEXieFmD8XW zbe3lHF9/7YIbqNC6TZxT4RHtCgMEBjsdheUgd5tlndbkrRGAo6YVQw0vTxrFz7y jhZMb3HtEKK4gigDBqcSPmQqmX72LZBeACFHR9kaycb8Zwd6pwU99HZBdCOQ6iBw PP+6yMGz4mpMjiPas5dWQAdHBDzFLvvc22JsuiG7W/hBycXbp5eFH7U5C6GpgYpt /NI3aG6WQthLNDWZ0ynq7t+3Zi1iFiMlNUVqY5tBAmtkHWNIKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn2Lok6fGLy6Afj8loPGTBLNJ53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODQyNzNjMmYtNzY1NS0z NTI1LTkyNjctZDc5NjFlOTYwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQS9HpFSj0yxw8PbTGTDuy2bSqt7A8WfAYM0wYG9zm+8AChFv3Hb6RR RHDKotU8X46qcD0K42INd6YsZ0q99u9vdTzDrgVUd8xPWzykXPB+pZCTCCYSx/tq qvS6XJjBGCE0+ZQeHs0jKor/1V+4D3IMlGuFjAskfWyUb2l+sSrSkz1Mzp5lWPCz tZqd5gTv5g5NXSt4XM2I2Xlq9gJ8/gFisrE/D5lfwq84qmOdbvvZW2ynfluUxmhe Z4J8e+xvFjg7Zeq/CeTh93gB9cFPemQyDzNOXAO0yoOPHIF1W9WeWK1OLM1aa9kw F/9gC2zPWrB1iJC+s2SiX3l3BCbsnU4= -----END CERTIFICATE-----Generated at Thu Jul 10 15:37:29 2025 by rpki-client