$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa File: 21ed06dc-3a8a-39a6-8098-04f68740e07c.roa (raw, json) Hash identifier: g9XmwSgctyl9BNctHD0SNQGVeQ3pGoeh8Ah70L1Zcio= Subject key identifier: 41:76:50:B7:41:B8:A3:96:25:1C:D3:B2:BA:8E:18:D6:96:9E:98:9B Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F43285849FE0FFC19C11DCB963F7A7FF0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 11548 IP address blocks: 216.186.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fc:19:c1:1d:cb:96:3f:7a:7f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=e8d05d40-7387-4906-9a56-6c4081898992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4a:a1:da:51:b2:e8:50:62:d7:ac:7a:ad:75: da:32:10:ba:e2:6d:0e:8d:a2:43:15:dd:35:2c:56: f3:4d:77:55:01:d3:19:ff:22:63:32:7f:df:e8:04: ca:d5:ec:5c:ac:85:39:f3:47:9e:9c:01:ce:b3:93: 9b:d0:85:3f:42:95:8f:98:9f:6b:50:ee:00:b3:1a: ab:19:a8:2a:48:ea:d6:3e:6a:84:f6:b5:0c:01:b2: 82:22:04:a7:26:ea:5c:5c:27:09:19:99:54:ae:ab: 6c:cd:b7:91:ee:ff:96:25:a4:ab:1c:66:fd:88:a7: 8b:c3:cc:36:6f:17:8f:c9:4b:db:e6:88:7f:e7:2e: ad:ec:bc:2c:82:d1:3a:37:ad:4c:08:22:84:a7:64: f6:34:cd:09:73:20:8f:35:fb:b7:63:95:62:74:92: 1f:e0:30:02:31:f1:62:f3:d1:ca:61:4a:55:ca:a4: 5a:01:64:c0:04:07:a2:37:b6:d2:e8:46:da:7b:78: a1:ad:09:3f:32:40:ef:f4:c0:bb:70:1e:a8:3f:ca: 20:4d:1c:83:47:7c:9a:80:8c:49:dd:69:5f:ad:d3: 50:ed:42:f8:36:12:63:f2:c0:10:ec:dc:ce:59:0f: 92:46:58:24:84:52:df:49:32:8b:75:9c:64:d9:9b: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:76:50:B7:41:B8:A3:96:25:1C:D3:B2:BA:8E:18:D6:96:9E:98:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 216.186.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:86:73:40:b8:71:63:b1:fc:12:31:6e:bb:61:5f:2e:72:c3: 1e:ff:38:58:f0:d2:3f:f3:fa:0b:3c:54:84:e1:bd:1e:06:e5: 7a:f1:b5:cd:08:cf:63:e3:dc:51:a0:b7:77:f3:f6:bc:aa:18: 33:4e:64:ab:f3:ea:10:e2:8b:ee:09:63:0b:d6:cd:88:41:71: a6:85:80:6b:e6:5a:05:bd:3d:a8:56:cb:ba:12:9b:3c:77:a1: 24:49:c4:a7:b0:de:ce:3c:b3:aa:e2:41:83:6f:be:ff:c3:aa: 69:5a:80:c4:36:2e:f8:9e:fc:c8:2a:bc:52:0c:f0:0e:98:88: a8:3b:66:ac:ac:2c:86:af:25:c8:cb:3f:b3:25:a6:e8:70:84: bb:75:e1:a0:f0:5f:b2:33:64:f3:87:b0:56:a4:d6:16:2a:13: 69:36:a6:18:ae:8c:b1:e9:f5:71:30:e3:8d:23:43:30:5e:3f: 1b:0b:72:01:04:f9:29:80:89:a4:e0:0c:b8:1a:e0:4e:f3:ba: 2c:94:56:7d:fa:63:5d:75:bb:07:f8:5a:c8:2c:aa:d6:5c:8d: af:5a:a0:77:bd:d4:90:bc:19:af:99:8e:79:21:8c:87:49:b6: 5a:3c:9c:ea:b5:a0:3a:b5:83:ec:9c:61:e6:0a:b8:be:a9:e5: 21:ba:c9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/wZwR3Llj96f/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZThkMDVkNDAtNzM4Ny00OTA2LTlhNTYtNmM0MDgxODk4OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEqh2lGy6FBi16x6rXXaMhC64m0OjaJDFd01 LFbzTXdVAdMZ/yJjMn/f6ATK1excrIU580eenAHOs5Ob0IU/QpWPmJ9rUO4Asxqr GagqSOrWPmqE9rUMAbKCIgSnJupcXCcJGZlUrqtszbeR7v+WJaSrHGb9iKeLw8w2 bxePyUvb5oh/5y6t7LwsgtE6N61MCCKEp2T2NM0JcyCPNfu3Y5VidJIf4DACMfFi 89HKYUpVyqRaAWTABAeiN7bS6Ebae3ihrQk/MkDv9MC7cB6oP8ogTRyDR3yagIxJ 3WlfrdNQ7UL4NhJj8sAQ7NzOWQ+SRlgkhFLfSTKLdZxk2ZsM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF2ULdBuKOWJRzTsrqOGNaWnpibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMjFlZDA2ZGMtM2E4YS0z OWE2LTgwOTgtMDRmNjg3NDBlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6Gc0C4cWOx/BIxbrthXy5ywx7/OFjw0j/z+gs8VIThvR4G5Xrxtc0I z2Pj3FGgt3fz9ryqGDNOZKvz6hDii+4JYwvWzYhBcaaFgGvmWgW9PahWy7oSmzx3 oSRJxKew3s48s6riQYNvvv/DqmlagMQ2Lvie/MgqvFIM8A6YiKg7ZqysLIavJcjL P7MlpuhwhLt14aDwX7IzZPOHsFak1hYqE2k2phiujLHp9XEw440jQzBePxsLcgEE +SmAiaTgDLga4E7zuiyUVn36Y111uwf4WsgsqtZcja9aoHe91JC8Ga+ZjnkhjIdJ tlo8nOq1oDq1g+ycYeYKuL6p5SG6yf8= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:39 2025 by rpki-client