$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa File: 29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa (raw, json) Hash identifier: CBjAY0io3hGpG0E2JhFKuY3R2/8oUDwBQByPnWZX9HA= Subject key identifier: B3:FD:1A:50:D4:6A:55:A7:62:C9:5F:89:E6:4E:2E:80:C2:17:F5:CB Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584A00DAC23310DA99857B850380 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 13741 IP address blocks: 65.181.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c2:33:10:da:99:85:7b:85:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=1845cbac-9144-40f8-af3f-13b33e1d1ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:15:b3:ab:a7:e4:39:2b:6c:1b:cc:71:a3: 86:5b:b3:46:21:c1:6e:c6:a6:06:ce:f0:1b:22:36: 2a:7d:de:b5:63:27:e7:4c:98:2e:49:5d:f9:e3:3a: 77:eb:86:35:62:bc:41:2a:33:19:b8:b5:c5:ac:5d: d3:2b:ae:2c:e6:b2:f2:c2:b1:4d:b4:fb:ee:47:b0: 74:39:63:e6:35:30:79:3d:e4:77:59:a7:5b:1e:fb: 9a:84:f4:c0:40:39:00:54:4d:46:68:82:c3:91:6c: 64:d4:84:15:08:b5:99:8a:20:95:8d:a5:15:2f:cd: a7:a7:98:76:89:3f:3b:8c:a1:c2:0b:56:23:e5:80: 23:75:e4:ca:46:25:fa:17:43:e8:e7:fd:7c:bc:b9: 8e:65:06:1f:3e:20:2b:9f:e2:09:48:36:c5:e2:71: b3:43:19:98:8b:c1:fb:67:0d:33:b6:41:dc:95:34: cb:d9:46:c6:44:15:80:92:dc:89:66:a2:de:68:2a: c0:e2:5f:d0:1b:ed:d7:21:21:15:96:c7:1a:ce:ea: 07:4a:e8:12:ff:21:19:e0:9b:44:3c:79:db:36:74: db:b9:0f:3d:d3:d3:9f:d1:68:ec:60:23:99:54:0d: 09:24:76:19:40:b4:c0:3a:22:80:a9:e2:e4:2c:ec: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FD:1A:50:D4:6A:55:A7:62:C9:5F:89:E6:4E:2E:80:C2:17:F5:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f3:82:8b:e9:48:f5:d4:7b:ca:03:ef:8c:83:1c:b5:51:73: 92:a2:57:ed:c1:94:d9:fb:a1:12:af:c2:29:4b:c8:2e:aa:30: 77:e1:6f:b5:0b:be:9d:b3:0a:ec:85:2f:39:a5:17:cd:f8:68: cc:91:1a:9f:67:3c:12:38:b4:0a:34:06:f7:74:a4:39:4b:d4: 52:d5:55:94:4d:3e:18:63:71:34:0a:dc:f6:d0:67:56:98:44: 3a:a5:d1:42:6a:3d:ee:0d:1a:b2:c8:82:0b:0e:e8:5a:bf:fe: 47:63:d3:09:7e:be:2e:af:9c:08:38:ad:a6:ef:84:36:03:0d: b4:75:39:92:8e:8f:a4:29:53:b0:9b:c1:9f:49:10:c4:5d:41: 85:63:17:0b:c6:8d:8d:b5:fa:d3:71:84:2e:f8:49:5a:77:ce: 19:e8:73:be:e4:e2:c3:27:81:ed:7f:43:df:e1:9d:32:09:30: b0:f1:87:f3:61:e3:ba:4d:fd:50:15:6d:46:28:06:5c:cc:ff: fd:f2:28:06:7d:18:71:3d:41:c6:90:d9:5e:29:15:c3:d5:68: 67:f5:8c:83:bf:37:ca:e1:50:4e:55:1b:f7:52:07:69:d7:f7: 75:be:f9:9d:bb:2e:3d:cc:80:8c:c3:b4:83:5a:3a:53:09:8b: 61:5e:f3:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sIzENqZhXuFA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MTg0NWNiYWMtOTE0NC00MGY4LWFmM2YtMTNiMzNlMWQxYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLoVs6un5DkrbBvMcaOGW7NGIcFuxqYGzvAb IjYqfd61YyfnTJguSV354zp364Y1YrxBKjMZuLXFrF3TK64s5rLywrFNtPvuR7B0 OWPmNTB5PeR3WadbHvuahPTAQDkAVE1GaILDkWxk1IQVCLWZiiCVjaUVL82np5h2 iT87jKHCC1Yj5YAjdeTKRiX6F0Po5/18vLmOZQYfPiArn+IJSDbF4nGzQxmYi8H7 Zw0ztkHclTTL2UbGRBWAktyJZqLeaCrA4l/QG+3XISEVlscazuoHSugS/yEZ4JtE PHnbNnTbuQ8909Of0WjsYCOZVA0JJHYZQLTAOiKAqeLkLOyOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP9GlDUalWnYslfieZOLoDCF/XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMjllMGE0Y2UtYzJlMy0z MDU2LTkwODktN2Q0OWFkMmFmMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQbWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3zgovpSPXUe8oD74yDHLVRc5KiV+3BlNn7oRKvwilLyC6qMHfhb7UL vp2zCuyFLzmlF834aMyRGp9nPBI4tAo0Bvd0pDlL1FLVVZRNPhhjcTQK3PbQZ1aY RDql0UJqPe4NGrLIggsO6Fq//kdj0wl+vi6vnAg4rabvhDYDDbR1OZKOj6QpU7Cb wZ9JEMRdQYVjFwvGjY21+tNxhC74SVp3zhnoc77k4sMnge1/Q9/hnTIJMLDxh/Nh 47pN/VAVbUYoBlzM//3yKAZ9GHE9QcaQ2V4pFcPVaGf1jIO/N8rhUE5VG/dSB2nX 93W++Z27Lj3MgIzDtINaOlMJi2Fe82w= -----END CERTIFICATE-----Generated at Sun Jun 8 18:45:11 2025 by rpki-client