$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa File: 21b9adff-addc-30b8-a15d-804492bd9627.roa (raw, json) Hash identifier: VFlS0vqcsHhj+mHAz1kUktfC4fXaW5l5TPapSutTXzk= Subject key identifier: E5:6C:8F:0C:7D:41:2C:FB:F7:06:D6:5B:2E:B6:EF:FD:85:B0:4D:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858494B641E4146EBBF6D1CADCFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 0 IP address blocks: 192.81.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1e:41:46:eb:bf:6d:1c:ad:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=d7b9cb98-56b6-4350-9c3d-7d02dd99d3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:c0:51:7e:7d:93:1f:c7:a3:d1:a4:a9:df: 16:ea:d5:b0:e9:5c:68:45:e4:6f:14:ef:60:4f:b8: 6a:0d:b6:e2:f8:2e:65:46:c4:71:6a:06:9c:1f:22: 24:30:ef:73:a5:ac:2b:7c:4e:f3:6e:40:94:9f:9b: e4:df:c9:c2:e9:59:ec:91:11:1c:9f:23:0a:7b:f6: 77:80:89:13:56:52:ae:6e:ec:81:b9:fd:45:e0:a3: ea:ae:d0:96:7b:3e:09:0c:59:b0:ad:9d:b7:09:70: 1e:02:4a:93:30:0a:e4:7d:b6:29:ae:6c:36:f4:3b: ff:b7:41:30:77:eb:f4:5f:41:65:94:0f:d1:e9:20: 2c:f2:ee:57:51:43:be:51:1d:84:92:1d:9c:bb:67: 7d:36:07:38:49:62:39:38:b6:ed:6c:d6:cd:af:9d: 93:83:1c:d8:e0:97:94:9c:cd:a8:5b:0b:2e:39:c6: eb:3f:88:d2:1a:6c:de:51:d0:90:31:e6:2a:3b:11: 62:bb:46:0e:25:62:dd:9d:73:ad:82:25:f9:3d:a3: 03:15:77:a5:3d:19:ac:de:35:19:6d:04:d5:5b:01: 6b:83:72:ce:01:d3:6e:fb:1e:3a:75:86:d6:64:1c: 29:c2:ce:70:c1:eb:d5:a7:9c:9d:98:cf:12:05:d4: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6C:8F:0C:7D:41:2C:FB:F7:06:D6:5B:2E:B6:EF:FD:85:B0:4D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:60:92:fb:7e:74:07:e0:d4:be:d3:f0:dd:2f:65:5f:a7:4c: 93:07:2f:c7:87:ac:f9:d5:dd:8b:50:30:d0:39:91:ed:8e:a3: aa:c0:11:41:aa:d9:2e:f2:a1:9e:24:ef:d4:3c:03:e3:60:11: df:b1:f1:9c:4a:87:ca:c9:51:e2:97:f6:c4:0a:5c:6f:ad:be: 01:63:46:34:ab:d6:6f:1a:4d:5c:24:74:da:27:37:20:65:a3: 63:b1:5d:71:53:ca:44:4a:d9:8e:05:10:b3:2b:54:1b:57:d3: db:d3:21:89:14:dd:f1:4f:5b:e8:44:ea:ed:e7:97:60:29:7f: 7e:94:4d:82:39:05:01:93:b7:b2:68:9a:52:25:6c:34:10:06: 83:ba:32:c7:b5:48:fd:a4:f6:2a:c9:28:42:b6:78:81:49:fa: 5c:e2:d9:2c:51:df:e8:e0:6b:bf:e6:8b:c4:be:6b:08:14:e3: bb:9a:95:22:1a:4c:f6:88:b3:39:4b:24:69:59:80:79:30:22: 76:36:89:65:c3:e3:7c:4e:3f:a1:a1:df:6e:24:2a:b7:b3:21: 1d:4e:22:ff:6a:8e:e3:80:6e:85:7b:ea:6b:f4:ae:05:d0:3b: 3f:7b:a8:55:a7:87:a6:73:4b:c6:ce:30:6a:ba:d1:1b:98:e8: e0:dc:81:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB5BRuu/bRytz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDdiOWNiOTgtNTZiNi00MzUwLTljM2QtN2QwMmRkOTlkM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqenAUX59kx/Ho9Gkqd8W6tWw6VxoReRvFO9g T7hqDbbi+C5lRsRxagacHyIkMO9zpawrfE7zbkCUn5vk38nC6VnskREcnyMKe/Z3 gIkTVlKubuyBuf1F4KPqrtCWez4JDFmwrZ23CXAeAkqTMArkfbYprmw29Dv/t0Ew d+v0X0FllA/R6SAs8u5XUUO+UR2Ekh2cu2d9Ngc4SWI5OLbtbNbNr52TgxzY4JeU nM2oWwsuOcbrP4jSGmzeUdCQMeYqOxFiu0YOJWLdnXOtgiX5PaMDFXelPRms3jUZ bQTVWwFrg3LOAdNu+x46dYbWZBwpws5wwevVp5ydmM8SBdQfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVsjwx9QSz79wbWWy627/2FsE0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFiOWFkZmYtYWRkYy0z MGI4LWExNWQtODA0NDkyYmQ5NjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVgkvt+dAfg1L7T8N0vZV+nTJMHL8eHrPnV3YtQMNA5ke2Oo6rAEUGq 2S7yoZ4k79Q8A+NgEd+x8ZxKh8rJUeKX9sQKXG+tvgFjRjSr1m8aTVwkdNonNyBl o2OxXXFTykRK2Y4FELMrVBtX09vTIYkU3fFPW+hE6u3nl2Apf36UTYI5BQGTt7Jo mlIlbDQQBoO6Mse1SP2k9irJKEK2eIFJ+lzi2SxR3+jga7/mi8S+awgU47ualSIa TPaIszlLJGlZgHkwInY2iWXD43xOP6Gh324kKrezIR1OIv9qjuOAboV76mv0rgXQ Oz97qFWnh6ZzS8bOMGq60RuY6ODcga0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:43 2025 by rpki-client