$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa File: a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa (raw, json) Hash identifier: kTSuEsN6vS73ZD/YjzWL75fIMyzDro3RXS5Y3gBlMJQ= Subject key identifier: 11:BD:25:54:7C:4B:AD:8B:60:08:2C:C7:7B:04:16:94:E0:B5:F9:7A Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584A146559CD24DB2A70B27FC5B4 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 18434 IP address blocks: 216.189.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:59:cd:24:db:2a:70:b2:7f:c5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=5720f394-dedb-4215-9463-519defa17c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:be:f4:73:8a:f1:f2:98:56:94:e2:dc:7e: ee:c5:79:61:9c:db:3c:82:08:7b:5b:a9:72:98:af: ab:c0:78:87:fa:a1:4c:a2:4e:52:09:bd:82:d7:ab: e9:99:a8:ee:9a:4b:4f:d6:21:fb:cf:31:d7:a4:1b: 88:21:b3:ec:77:7c:81:32:ba:97:bc:e9:bf:de:4a: 3b:98:27:76:fe:df:6b:f4:05:c9:51:8b:21:cd:ce: c0:2a:c9:b9:75:9a:7a:32:f8:18:38:18:e1:3b:ee: 4d:c7:df:dc:d4:6e:2a:ee:ca:19:af:2c:9a:ce:a1: c3:39:73:49:b8:f1:c3:45:bf:07:7d:28:41:27:c4: eb:11:82:95:32:b0:94:ea:d9:52:b6:f3:1f:45:f3: 37:bb:e9:e6:bd:f8:dd:a5:05:56:89:96:d0:bf:32: 80:6e:d3:3e:04:09:e7:84:94:e7:80:55:f0:81:c4: 57:60:44:12:48:ba:6e:fe:97:5f:6c:a7:18:1d:fd: 5b:05:9b:99:2d:a4:e7:62:16:2c:ce:56:3d:32:c8: af:31:ab:6c:99:c3:d3:9a:7e:e1:30:84:82:7d:9a: a6:60:8d:cd:53:96:c0:90:37:1b:56:b8:03:4b:db: 52:13:0a:c9:1d:79:84:de:6c:ce:ea:9c:1c:d3:ea: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BD:25:54:7C:4B:AD:8B:60:08:2C:C7:7B:04:16:94:E0:B5:F9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 216.189.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9f:c4:25:2c:0d:86:16:83:49:91:52:81:6b:7d:d3:be:22: 93:7a:60:7f:0c:c0:e4:40:5b:15:f4:bf:8f:6e:24:a9:c4:97: a8:b1:06:4d:17:73:44:0a:65:fd:58:d7:0e:a3:e2:64:42:64: 49:9c:63:09:a8:43:18:bd:00:c0:30:f3:5e:a2:ac:51:48:62: cd:8c:a5:a8:d0:24:43:37:6e:5e:83:c0:2b:6a:8d:e4:46:fc: d7:76:3a:60:ce:d8:f4:6b:64:5d:75:fd:0c:6e:14:69:59:91: 3b:c8:ae:fa:56:f7:3f:45:bc:7b:6e:b6:98:18:99:10:58:a0: 48:49:3c:34:1d:d6:79:78:bb:ae:98:a9:63:ce:12:37:ba:53: 55:96:58:bb:f5:24:8e:b6:15:d1:80:60:8e:45:ae:64:dc:5f: 75:e3:31:47:9b:7a:c0:af:2e:40:5b:2c:de:ac:32:15:45:74: 56:da:6b:e5:ea:c5:e0:6b:06:b3:d7:73:2c:62:74:8f:c8:4b: ae:55:45:66:14:53:94:a4:fb:e3:da:cd:42:ac:c8:bb:08:b2: 09:72:2f:13:df:53:41:98:51:63:91:7c:ea:16:f5:84:10:1b: 57:b2:0f:57:86:f3:2e:a0:a3:90:7e:7f:7f:1f:e6:d7:d1:17: d1:09:e4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZVnNJNsqcLJ/xbQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTcyMGYzOTQtZGVkYi00MjE1LTk0NjMtNTE5ZGVmYTE3YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4e+9HOK8fKYVpTi3H7uxXlhnNs8ggh7W6ly mK+rwHiH+qFMok5SCb2C16vpmajumktP1iH7zzHXpBuIIbPsd3yBMrqXvOm/3ko7 mCd2/t9r9AXJUYshzc7AKsm5dZp6MvgYOBjhO+5Nx9/c1G4q7soZryyazqHDOXNJ uPHDRb8HfShBJ8TrEYKVMrCU6tlStvMfRfM3u+nmvfjdpQVWiZbQvzKAbtM+BAnn hJTngFXwgcRXYEQSSLpu/pdfbKcYHf1bBZuZLaTnYhYszlY9MsivMatsmcPTmn7h MISCfZqmYI3NU5bAkDcbVrgDS9tSEwrJHXmE3mzO6pwc0+pkoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG9JVR8S62LYAgsx3sEFpTgtfl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYTFmMmRlZDAtMTljNS0z YTk3LTk1M2ItMmVhMTI2ZGExYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOfxCUsDYYWg0mRUoFrfdO+IpN6YH8MwORAWxX0v49uJKnEl6ixBk0X c0QKZf1Y1w6j4mRCZEmcYwmoQxi9AMAw816irFFIYs2MpajQJEM3bl6DwCtqjeRG /Nd2OmDO2PRrZF11/QxuFGlZkTvIrvpW9z9FvHtutpgYmRBYoEhJPDQd1nl4u66Y qWPOEje6U1WWWLv1JI62FdGAYI5FrmTcX3XjMUebesCvLkBbLN6sMhVFdFbaa+Xq xeBrBrPXcyxidI/IS65VRWYUU5Sk++PazUKsyLsIsglyLxPfU0GYUWORfOoW9YQQ G1eyD1eG8y6go5B+f38f5tfRF9EJ5Bg= -----END CERTIFICATE-----Generated at Sun Jun 8 09:05:11 2025 by rpki-client