$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa File: 52f23f50-50ed-3124-8040-864858a28df3.roa (raw, json) Hash identifier: 7fLgDZcw1Npa6n1GElv13wEH3DgcYXeDj7IbGLtaS6o= Subject key identifier: 6A:54:F1:8B:E7:60:06:08:46:7F:DA:F1:28:4F:20:48:A4:B5:FA:8F Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F43285849CE9A3BA3FA10EB71B4F12EC0 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 192.190.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3b:a3:fa:10:eb:71:b4:f1:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d809d862-034b-450f-b600-f86ae1514470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:6d:ae:cd:9f:e1:f3:36:e0:d0:c0:7d:f7: 3a:fe:97:ae:df:4a:27:ad:dc:1f:2c:87:8f:42:f6: d9:10:2b:12:3f:04:68:bd:b5:1e:1e:76:d0:49:f0: 60:64:45:ea:20:c0:4c:e6:69:57:09:31:8c:ab:5e: 5f:d6:b8:91:21:e6:ff:56:3a:a3:91:c8:aa:5a:70: f4:28:18:fe:81:73:97:1a:51:6f:34:b7:59:b2:51: 24:b4:cb:e2:f9:80:8c:1b:9f:ba:b7:26:51:78:64: c2:0f:11:a9:d8:aa:08:6f:26:51:d5:09:15:03:e3: cc:6c:2f:2c:92:63:41:a0:44:f6:d3:72:21:5c:cd: 53:47:c3:c9:2a:2c:a4:b5:c4:fa:f4:4c:86:31:0e: 01:3c:f7:6b:32:59:8b:37:13:ac:e0:8a:84:46:a5: bd:12:48:9f:b4:fc:87:bf:06:03:61:8d:c9:87:08: c4:d2:c2:d4:22:08:3b:68:66:60:36:6d:96:ca:0a: ad:c0:ef:5c:39:89:aa:33:3c:4b:2a:09:59:c4:bd: c8:3e:c1:02:cd:f8:b3:5a:67:86:6e:85:ee:9e:e7: 06:54:6a:7e:64:76:56:ac:c4:74:b1:17:a5:08:e4: 44:7a:a4:3c:28:72:3e:3e:c8:9a:59:1e:09:fe:ac: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:F1:8B:E7:60:06:08:46:7F:DA:F1:28:4F:20:48:A4:B5:FA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f2:64:ec:27:ac:e1:c8:53:28:3c:2e:7a:e7:72:54:ef:51: 18:eb:a7:32:e3:2a:e8:a0:1f:fe:25:3b:79:bf:a3:b2:07:69: 68:5d:72:7c:3b:52:16:51:83:27:d0:9a:aa:eb:2f:ff:8e:98: 44:0b:13:cf:a9:21:ec:b5:67:96:37:2f:5e:4c:63:d4:78:fd: 76:91:d3:c1:77:e8:5e:0a:88:ba:fb:d3:a0:b7:4e:0b:6d:64: 45:c8:ed:d6:71:ca:7c:42:c9:af:3b:71:9c:cf:f0:a4:75:42: 7b:f4:93:dd:b8:fb:af:ce:8d:ca:89:cf:0e:6f:ac:98:d7:9d: 9d:16:83:59:bb:c6:76:ce:9a:ac:30:1c:5c:49:6f:21:33:c8: 5e:b0:73:1e:c8:af:92:7d:f9:07:9c:0a:de:11:38:e9:ea:e0: db:a6:e6:c6:e8:f5:58:74:ac:cd:58:af:e9:23:d8:f3:da:a1: 38:6e:6a:02:a6:26:e3:32:c0:8c:3f:1a:f4:57:59:45:3b:63: 1f:80:51:8e:f8:cf:86:f6:e3:7b:d7:2e:fc:be:9d:a4:fa:54: ff:f4:c1:2e:ad:9c:bb:3a:c0:1e:ce:38:ff:bd:08:84:1d:a2: 13:82:d3:3e:62:15:7e:69:19:2c:41:de:bd:89:ca:2b:40:32: 83:20:6e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjuj+hDrcbTxLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDgwOWQ4NjItMDM0Yi00NTBmLWI2MDAtZjg2YWUxNTE0NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKRtrs2f4fM24NDAffc6/peu30onrdwfLIeP QvbZECsSPwRovbUeHnbQSfBgZEXqIMBM5mlXCTGMq15f1riRIeb/VjqjkciqWnD0 KBj+gXOXGlFvNLdZslEktMvi+YCMG5+6tyZReGTCDxGp2KoIbyZR1QkVA+PMbC8s kmNBoET203IhXM1TR8PJKiyktcT69EyGMQ4BPPdrMlmLNxOs4IqERqW9EkiftPyH vwYDYY3JhwjE0sLUIgg7aGZgNm2WygqtwO9cOYmqMzxLKglZxL3IPsECzfizWmeG boXunucGVGp+ZHZWrMR0sRelCOREeqQ8KHI+PsiaWR4J/qybaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpU8YvnYAYIRn/a8ShPIEiktfqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNTJmMjNmNTAtNTBlZC0z MTI0LTgwNDAtODY0ODU4YTI4ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/yZOwnrOHIUyg8LnrnclTvURjrpzLjKuigH/4lO3m/o7IHaWhdcnw7 UhZRgyfQmqrrL/+OmEQLE8+pIey1Z5Y3L15MY9R4/XaR08F36F4KiLr706C3Tgtt ZEXI7dZxynxCya87cZzP8KR1Qnv0k924+6/OjcqJzw5vrJjXnZ0Wg1m7xnbOmqww HFxJbyEzyF6wcx7Ir5J9+QecCt4ROOnq4Num5sbo9Vh0rM1Yr+kj2PPaoThuagKm JuMywIw/GvRXWUU7Yx+AUY74z4b243vXLvy+naT6VP/0wS6tnLs6wB7OOP+9CIQd ohOC0z5iFX5pGSxB3r2JyitAMoMgbjc= -----END CERTIFICATE-----Generated at Fri Jun 6 04:44:02 2025 by rpki-client