$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa File: ced604c6-99bb-30aa-8483-52ecd57799da.roa (raw, json) Hash identifier: hUyA3s7S/CAzfynvmkZehRcbIfXG7ofZ2CZeOBazSs0= Subject key identifier: D0:27:BF:1E:BE:94:41:51:50:A2:58:88:07:42:B0:9C:16:A1:0D:EC Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584950F966E641A89BB2C2077080 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 16276 IP address blocks: 206.168.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:66:e6:41:a8:9b:b2:c2:07:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=ce159b5b-cdb0-48a1-917a-0fbd08dec49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:88:47:32:ff:15:01:f1:ed:b2:3b:c2:fe: ce:5c:76:a6:2a:f4:7d:12:32:78:2a:f9:d9:cc:93: 5c:d6:e1:c2:c9:d6:a4:d9:6f:e2:3c:55:44:0e:c2: 5f:28:44:17:23:2b:a0:eb:dd:67:7c:27:b3:6f:3c: d3:21:94:26:a2:06:9a:49:31:3a:00:10:e8:7a:30: 4e:ef:db:ea:96:e1:61:28:4e:f9:06:6b:b2:a7:ce: 49:4a:19:cb:3a:4a:74:b8:2f:c7:ec:fb:1c:1b:36: 14:45:7d:a9:8b:9f:44:d1:d5:09:59:74:73:2b:16: 26:ca:86:00:f3:7b:62:7f:be:1b:0d:09:80:a2:0a: 27:2d:4d:22:e3:cb:16:2e:1d:13:8b:f2:77:c6:88: ef:df:76:bd:11:00:05:ec:f0:cd:8b:a1:8e:40:61: 16:46:60:3b:e1:0d:de:2f:31:5f:ec:2f:e5:a5:96: 3e:49:f9:1d:09:be:b7:bf:54:79:13:7d:f1:58:02: c6:32:4d:f4:6c:05:1c:aa:e8:1d:1d:6b:e8:0a:a7: 7e:ef:49:93:30:f7:3a:34:57:a5:3e:ad:a5:34:a2: dd:1b:a4:29:ac:d6:0d:ec:7e:51:d0:1c:1b:b3:bf: b3:cf:36:20:41:fa:04:e7:19:99:22:9e:88:59:95: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:27:BF:1E:BE:94:41:51:50:A2:58:88:07:42:B0:9C:16:A1:0D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 206.168.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:25:77:5b:61:a4:33:9d:58:ac:cb:a1:bb:e2:e1:92:13:69: 44:5a:08:60:76:7c:99:bd:a1:b2:a8:23:44:cc:75:00:fb:92: 34:58:69:06:8b:d4:47:e8:0b:5e:0e:de:6f:52:52:0b:04:68: ee:ee:07:9e:4d:6d:1c:a6:7e:50:13:15:20:f5:5e:11:71:57: 76:80:0b:18:16:86:fe:1f:1a:b3:25:6e:02:7d:25:90:1d:e4: 9a:b9:af:1d:fd:55:63:91:67:b2:6c:19:12:76:4b:4b:ae:47: f1:ba:e7:7f:b0:3a:19:bf:be:b3:78:a3:21:c6:a4:0f:3d:96: 30:ab:bb:0a:d6:4c:59:0c:18:6c:37:3f:78:e4:d8:0a:bb:10: 59:93:74:ce:af:7f:5c:f1:15:e1:9c:2b:f3:45:4e:2f:97:01: 53:16:16:1f:97:ba:8e:fe:34:bb:9a:8b:37:20:14:95:3a:b2: 37:84:9c:d4:33:60:58:4b:57:74:b8:9b:d9:9e:82:83:3e:a0: cb:73:b0:1c:b4:74:8d:24:cb:c2:1a:f2:03:39:eb:de:f6:24: a8:c6:8c:78:a5:6e:61:57:75:97:50:54:83:84:8c:12:fe:0d: ff:fb:a6:8d:9a:6d:38:97:91:d5:49:ff:fe:cb:cf:f5:3b:ec: 5e:ad:e1:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WbmQaibssIHcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk Y2UxNTliNWItY2RiMC00OGExLTkxN2EtMGZiZDA4ZGVjNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbqIRzL/FQHx7bI7wv7OXHamKvR9EjJ4KvnZ zJNc1uHCydak2W/iPFVEDsJfKEQXIyug691nfCezbzzTIZQmogaaSTE6ABDoejBO 79vqluFhKE75Bmuyp85JShnLOkp0uC/H7PscGzYURX2pi59E0dUJWXRzKxYmyoYA 83tif74bDQmAogonLU0i48sWLh0Ti/J3xojv33a9EQAF7PDNi6GOQGEWRmA74Q3e LzFf7C/lpZY+SfkdCb63v1R5E33xWALGMk30bAUcqugdHWvoCqd+70mTMPc6NFel Pq2lNKLdG6QprNYN7H5R0Bwbs7+zzzYgQfoE5xmZIp6IWZXlZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAnvx6+lEFRUKJYiAdCsJwWoQ3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvY2VkNjA0YzYtOTliYi0z MGFhLTg0ODMtNTJlY2Q1Nzc5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqivMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIld1thpDOdWKzLobvi4ZITaURaCGB2fJm9obKoI0TMdQD7kjRYaQaL 1EfoC14O3m9SUgsEaO7uB55NbRymflATFSD1XhFxV3aACxgWhv4fGrMlbgJ9JZAd 5Jq5rx39VWORZ7JsGRJ2S0uuR/G653+wOhm/vrN4oyHGpA89ljCruwrWTFkMGGw3 P3jk2Aq7EFmTdM6vf1zxFeGcK/NFTi+XAVMWFh+Xuo7+NLuaizcgFJU6sjeEnNQz YFhLV3S4m9megoM+oMtzsBy0dI0ky8Ia8gM56972JKjGjHilbmFXdZdQVIOEjBL+ Df/7po2abTiXkdVJ//7Lz/U77F6t4TE= -----END CERTIFICATE-----Generated at Wed Apr 9 09:22:05 2025 by rpki-client