$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa File: 3925ee21-557f-30f9-94cf-08e3240595ed.roa (raw, json) Hash identifier: I8hwZewnEErlQgIl0hKDIDG0lXNU89PkVKO/XD/5lCs= Subject key identifier: 02:49:D8:17:1D:B1:56:C7:FD:38:83:17:61:0B:D0:74:4C:53:D3:71 Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F43285849F2E51B270D390AD0B0140A80 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 48678 IP address blocks: 192.101.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:1b:27:0d:39:0a:d0:b0:14:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=668b95ce-53c0-4610-8f17-b745b31e0aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:79:f5:06:50:26:e1:73:85:10:1e:68:03: 2c:59:8e:1b:b6:95:11:77:7d:11:10:0b:dc:7e:72: 92:83:d2:d7:1a:06:99:4b:66:a7:96:9f:97:a7:95: 04:32:81:51:18:7f:b6:f4:2a:53:28:74:60:ed:81: 6b:b8:bc:03:91:3f:93:7d:11:f9:87:4a:41:39:48: c2:f7:68:8d:99:78:31:d1:0b:a1:22:32:ad:98:73: 78:fe:25:b1:e0:60:98:5c:b4:d8:5d:68:bb:81:38: 43:33:1f:c5:d5:49:1c:e0:28:df:a6:8c:ac:80:5a: 4c:50:f4:cf:3b:54:cc:de:37:65:8e:ef:32:14:a6: 2d:44:d6:f8:9e:cf:9b:2b:8f:a1:85:b5:10:29:a9: 2e:84:4b:03:2f:5f:36:34:1d:a4:5c:c6:c3:48:f0: f1:69:65:25:7a:b2:c0:28:45:66:c2:b5:37:b6:48: f1:ce:55:41:e8:18:41:1e:87:b7:d2:f8:03:e3:ca: 11:34:fc:a4:61:11:a9:21:54:17:68:ea:05:b8:81: ba:18:dc:a9:1a:97:85:3f:b3:e4:4b:33:05:be:bb: 01:c3:8c:18:a8:dd:e7:0b:07:d8:25:62:75:5a:4c: 7d:99:2b:db:96:d4:9c:cb:33:f1:1d:fb:39:84:75: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:49:D8:17:1D:B1:56:C7:FD:38:83:17:61:0B:D0:74:4C:53:D3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fc:d8:a7:6f:df:09:c9:ad:4e:47:a3:96:da:b1:58:18:ae: 05:0b:7d:4a:18:5b:37:73:1f:a1:f4:f4:58:57:62:49:63:35: c5:b3:76:e6:b7:98:1d:cb:c3:a0:5e:a5:a9:75:e3:c9:bf:c1: 4b:49:db:b2:0a:e9:8c:ad:a0:94:ac:93:26:8d:92:48:f1:0c: 59:e7:de:08:6f:ec:2c:2c:54:b5:37:59:b1:b2:01:67:94:0a: ff:dd:35:90:54:f2:5d:da:88:0b:18:26:03:2a:a1:99:fa:25: 8f:1c:57:d3:cb:6b:4b:43:af:d5:5b:5d:0e:e4:c4:0c:e7:ce: c3:ca:a9:ef:80:c2:e7:86:0b:33:53:9c:f7:8a:76:c7:2a:1b: 65:dc:66:ca:4b:11:45:c0:80:1c:5a:7e:99:55:68:6a:14:32: 44:a3:eb:30:4e:4f:60:1d:13:eb:cd:72:93:f9:82:e8:51:74: 64:71:63:f3:c4:1a:e5:1e:21:74:a4:18:2f:f6:3f:26:3b:96: 47:78:fa:2e:d3:41:bc:ef:6c:e7:63:a3:e5:db:bf:90:28:cf: 53:4b:f0:76:4a:a4:40:70:e8:b9:24:c7:9b:23:fb:c8:68:16: 03:6c:6e:5a:ec:bd:e8:1e:d6:23:3c:1a:cc:ac:fb:cf:25:1d: 2c:59:de:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5RsnDTkK0LAUCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjY4Yjk1Y2UtNTNjMC00NjEwLThmMTctYjc0NWIzMWUwYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7559QZQJuFzhRAeaAMsWY4btpURd30REAvc fnKSg9LXGgaZS2anlp+Xp5UEMoFRGH+29CpTKHRg7YFruLwDkT+TfRH5h0pBOUjC 92iNmXgx0QuhIjKtmHN4/iWx4GCYXLTYXWi7gThDMx/F1Ukc4CjfpoysgFpMUPTP O1TM3jdlju8yFKYtRNb4ns+bK4+hhbUQKakuhEsDL182NB2kXMbDSPDxaWUlerLA KEVmwrU3tkjxzlVB6BhBHoe30vgD48oRNPykYRGpIVQXaOoFuIG6GNypGpeFP7Pk SzMFvrsBw4wYqN3nCwfYJWJ1Wkx9mSvbltScyzPxHfs5hHVG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJJ2BcdsVbH/TiDF2EL0HRMU9NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvMzkyNWVlMjEtNTU3Zi0z MGY5LTk0Y2YtMDhlMzI0MDU5NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj82Kdv3wnJrU5Ho5basVgYrgULfUoYWzdzH6H09FhXYkljNcWzdua3 mB3Lw6Bepal148m/wUtJ27IK6YytoJSskyaNkkjxDFnn3ghv7CwsVLU3WbGyAWeU Cv/dNZBU8l3aiAsYJgMqoZn6JY8cV9PLa0tDr9VbXQ7kxAznzsPKqe+AwueGCzNT nPeKdscqG2XcZspLEUXAgBxafplVaGoUMkSj6zBOT2AdE+vNcpP5guhRdGRxY/PE GuUeIXSkGC/2PyY7lkd4+i7TQbzvbOdjo+Xbv5Aoz1NL8HZKpEBw6Lkkx5sj+8ho FgNsblrsvege1iM8Gsys+88lHSxZ3sI= -----END CERTIFICATE-----Generated at Fri Jun 6 12:35:17 2025 by rpki-client