$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8231aed5-b897-322e-bd30-ddeb62472bb3.roa File: 8231aed5-b897-322e-bd30-ddeb62472bb3.roa (raw, json) Hash identifier: 4NMdOJfNRrrzEVhJEqCkK8mfWuwrXW1QqkLC5a3ZoKk= Subject key identifier: 72:FD:4C:14:C9:77:64:01:47:19:59:EB:17:C3:5A:AF:D1:FD:8D:E0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849FFFEF0BAA70EF2EFA8F70C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8231aed5-b897-322e-bd30-ddeb62472bb3.roa Signing time: Wed 28 May 2025 05:38:38 +0000 ROA not before: Wed 28 May 2025 05:38:38 +0000 ROA not after: Tue 26 Aug 2025 05:38:38 +0000 asID: 5065 IP address blocks: 216.133.144.0/24 maxlen: 24 216.133.145.0/24 maxlen: 24 216.133.146.0/24 maxlen: 24 216.133.147.0/24 maxlen: 24 216.133.148.0/24 maxlen: 24 216.133.149.0/24 maxlen: 24 216.133.150.0/24 maxlen: 24 216.133.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:fe:f0:ba:a7:0e:f2:ef:a8:f7:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 28 05:38:38 2025 GMT Not After : Aug 26 05:38:38 2025 GMT Subject: CN=57c1532a-c367-449d-a201-d02215cd17f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:3c:f1:88:46:a2:11:8a:09:f3:03:46:10: fc:3e:0c:17:3d:1e:9e:d0:10:81:b2:4a:e0:d4:32: 9c:6b:1c:2b:cb:69:d9:3b:d4:5a:29:9b:44:16:83: f1:a2:42:ab:ea:9d:81:47:c7:62:a8:1e:c8:75:fa: be:f7:61:ba:44:14:4c:0e:ba:05:78:c1:9d:b2:cb: de:29:ce:29:f7:62:33:fb:04:13:22:c0:31:00:ce: 4a:4f:9c:8e:28:53:55:cf:ee:8f:fb:31:e2:0c:e7: af:55:8e:78:49:64:0d:1a:d8:aa:83:4f:e7:8a:ee: 89:a7:24:79:2e:fc:92:60:71:c4:45:5a:c4:d1:8d: f1:0d:44:df:6c:58:70:58:ac:9c:25:88:91:af:02: 95:92:4d:f4:80:42:11:f8:df:86:89:2f:1e:45:4f: be:6a:e0:d1:ea:db:f7:e1:70:9d:64:5c:b7:0e:e0: f2:24:1a:50:39:4e:3d:c5:1a:c8:e1:d9:e4:c8:34: 09:4b:da:0a:4e:6a:7a:b8:5a:72:4f:9f:6c:65:29: a4:a9:38:83:6e:78:09:7d:b8:76:9b:95:26:61:05: 27:02:f6:1a:15:89:82:56:cb:3c:71:cd:93:81:e1: 0e:60:34:4d:fb:3a:13:85:c5:9f:6b:38:2d:30:69: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:4C:14:C9:77:64:01:47:19:59:EB:17:C3:5A:AF:D1:FD:8D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8231aed5-b897-322e-bd30-ddeb62472bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:40:75:0f:cd:10:1d:97:30:bb:e4:48:57:f6:c2:d1:4b:35: 07:29:78:bf:22:8a:78:b8:60:3f:5e:79:07:5f:64:f3:af:d0: d4:b1:07:df:fe:ee:82:48:5b:f6:71:1c:61:43:b5:46:cf:4b: 48:94:18:22:65:e4:a9:ea:f8:08:d9:51:33:fe:93:ed:f2:ba: 91:bc:79:cf:b6:69:b8:56:00:67:16:34:c9:5f:07:7a:a5:4a: 6c:27:54:56:12:75:ec:f3:63:67:c6:8d:fc:9f:4c:09:04:87: d6:ee:61:1e:a0:68:41:d3:8c:1b:dd:db:6c:41:00:f1:dd:c8: c7:c8:71:37:c2:b1:0d:83:f0:3d:6c:a3:a7:d3:d0:4c:4d:08: ed:9f:06:18:b3:8d:29:c4:4b:49:4d:36:85:e2:a4:d4:3f:71: 0b:b9:e9:04:ff:15:3a:61:fb:e9:7a:b1:be:7a:8c:f8:06:92: 63:12:b3:79:e2:82:b5:7f:a0:90:c8:a4:70:9b:7a:3a:78:5a: 95:c2:74:18:fe:f3:76:01:43:ce:4f:7a:f0:8f:9c:29:7a:71: af:9f:f8:75:45:39:bb:70:18:ea:2f:85:0b:d0:38:f9:49:c0: 8e:fa:c0:98:f0:20:90:3d:dc:33:98:1c:c1:3f:78:a4:6b:33: 81:95:16:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn//vC6pw7y76j3DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUyODA1MzgzOFoXDTI1MDgyNjA1MzgzOFowLzEtMCsGA1UEAxMk NTdjMTUzMmEtYzM2Ny00NDlkLWEyMDEtZDAyMjE1Y2QxN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUE88YhGohGKCfMDRhD8PgwXPR6e0BCBskrg 1DKcaxwry2nZO9RaKZtEFoPxokKr6p2BR8diqB7Idfq+92G6RBRMDroFeMGdssve Kc4p92Iz+wQTIsAxAM5KT5yOKFNVz+6P+zHiDOevVY54SWQNGtiqg0/niu6JpyR5 LvySYHHERVrE0Y3xDUTfbFhwWKycJYiRrwKVkk30gEIR+N+GiS8eRU++auDR6tv3 4XCdZFy3DuDyJBpQOU49xRrI4dnkyDQJS9oKTmp6uFpyT59sZSmkqTiDbngJfbh2 m5UmYQUnAvYaFYmCVss8cc2TgeEOYDRN+zoThcWfazgtMGkrNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL9TBTJd2QBRxlZ6xfDWq/R/Y3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODIzMWFlZDUtYjg5Ny0z MjJlLWJkMzAtZGRlYjYyNDcyYmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5AdQ/NEB2XMLvkSFf2wtFLNQcpeL8iini4YD9eeQdfZPOv0NSxB9/+ 7oJIW/ZxHGFDtUbPS0iUGCJl5Knq+AjZUTP+k+3yupG8ec+2abhWAGcWNMlfB3ql SmwnVFYSdezzY2fGjfyfTAkEh9buYR6gaEHTjBvd22xBAPHdyMfIcTfCsQ2D8D1s o6fT0ExNCO2fBhizjSnES0lNNoXipNQ/cQu56QT/FTph++l6sb56jPgGkmMSs3ni grV/oJDIpHCbejp4WpXCdBj+83YBQ85PevCPnCl6ca+f+HVFObtwGOovhQvQOPlJ wI76wJjwIJA93DOYHME/eKRrM4GVFhk= -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:05 2025 by rpki-client