$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa File: c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa (raw, json) Hash identifier: 0Xm1DEzNQkaHsAtUttTbzcnU8VBV13bH1B/dr2oPVzw= Subject key identifier: 13:D3:2E:B5:5A:CA:61:80:3C:77:F3:46:CA:6D:E9:03:41:01:F7:39 Certificate issuer: /CN=aa90ea59-501e-46c9-884b-8efb5caec147 Certificate serial: 010D0C9F4328584A5FC5CDFC5DFC8DF2A8AB1E00 Authority key identifier: 81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 12070 IP address blocks: 185.224.168.0/24 maxlen: 24 185.224.169.0/24 maxlen: 24 185.224.170.0/24 maxlen: 24 185.224.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:cd:fc:5d:fc:8d:f2:a8:ab:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa90ea59-501e-46c9-884b-8efb5caec147 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=eb2fe32c-163f-4d89-9828-d3c4a1a70a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:e2:d1:55:cf:cc:a8:0c:c7:c9:4a:32:a1: 13:00:28:f6:f8:59:a6:1e:c6:31:e0:b1:37:46:54: 2c:35:df:54:38:46:e3:61:9a:17:5d:63:18:2d:49: c7:53:ae:87:27:00:8a:0c:c6:85:06:8f:a6:76:6d: d1:a3:42:15:c4:2d:73:a4:2b:1e:00:87:70:8b:3d: d9:de:1e:05:f8:52:46:f7:74:6d:45:8a:d3:21:1a: 63:fb:a5:92:c6:6a:13:b1:d2:81:74:84:61:db:25: 4a:4e:a2:05:75:5a:35:bc:ec:8d:3d:b6:22:98:f7: 80:e4:e3:17:29:20:d2:d5:0c:5e:1d:64:aa:c9:bb: 87:ec:84:4f:69:35:e5:c8:d1:43:aa:01:a8:29:07: f2:d1:6a:52:bb:ed:9c:7a:f4:28:e9:d4:bf:04:d1: 56:44:1f:2b:da:58:c3:c0:ed:87:3f:24:bf:40:74: 95:d6:1b:cd:15:96:91:ec:88:49:69:07:88:b1:de: b3:bb:32:e7:5a:5f:4a:dd:67:7c:47:ac:b5:64:18: 3b:e9:5c:44:43:85:b3:c7:4a:6e:d9:4d:8d:65:1b: 49:d4:d8:e7:ad:ad:f3:c0:90:af:28:07:18:e8:bd: e5:d6:b9:2d:46:4e:de:db:f1:45:4e:8d:e4:85:16: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:2E:B5:5A:CA:61:80:3C:77:F3:46:CA:6D:E9:03:41:01:F7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl X509v3 Authority Key Identifier: keyid:81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer sbgp-ipAddrBlock: critical IPv4: 185.224.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:13:2c:11:b6:af:41:bf:b8:5c:d9:18:c3:20:32:26:91:93: 1d:e4:29:8f:a3:e1:58:04:2c:67:e5:b9:30:aa:b3:b6:79:84: 23:1e:e5:e4:b8:77:e5:fb:55:3f:1d:3d:ee:f2:3d:10:6b:f2: 62:5b:ca:75:54:08:2d:1c:8a:f6:fe:ab:70:51:75:e8:81:ad: f3:f7:3b:ca:93:6f:9c:68:f8:b0:11:09:ff:b1:77:4c:b0:cb: 5d:ba:c3:55:39:57:18:65:a9:e9:a0:b6:0c:b9:c3:5d:ff:a3: a3:63:d4:bb:4a:0c:e5:15:a7:7b:6d:fd:85:07:24:ac:57:7c: 62:7f:88:23:44:da:7e:39:db:82:d5:51:63:95:62:16:1b:3f: 28:62:7c:13:79:75:8e:d9:cd:fb:95:3d:55:10:43:94:e5:72: 43:25:f3:d6:8c:02:8e:c1:38:3e:a1:dd:1e:06:b1:6a:2b:03: 91:e2:13:31:b7:24:33:91:a6:35:e1:44:48:31:3e:8f:e0:cf: d0:f1:33:64:3e:49:6c:3e:c7:33:01:76:e9:ff:4d:a9:0a:a5: 10:51:84:d1:34:ee:81:79:d6:df:75:c8:6f:78:bd:c0:44:e6: c6:7d:06:f8:b5:74:66:e6:e2:79:2f:9a:6a:79:b5:3d:78:f7: 68:85:3e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxc38XfyN8qirHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MGVhNTktNTAxZS00NmM5LTg4NGItOGVmYjVjYWVj MTQ3MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZWIyZmUzMmMtMTYzZi00ZDg5LTk4MjgtZDNjNGExYTcwYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTzi0VXPzKgMx8lKMqETACj2+FmmHsYx4LE3 RlQsNd9UOEbjYZoXXWMYLUnHU66HJwCKDMaFBo+mdm3Ro0IVxC1zpCseAIdwiz3Z 3h4F+FJG93RtRYrTIRpj+6WSxmoTsdKBdIRh2yVKTqIFdVo1vOyNPbYimPeA5OMX KSDS1QxeHWSqybuH7IRPaTXlyNFDqgGoKQfy0WpSu+2cevQo6dS/BNFWRB8r2ljD wO2HPyS/QHSV1hvNFZaR7IhJaQeIsd6zuzLnWl9K3Wd8R6y1ZBg76VxEQ4Wzx0pu 2U2NZRtJ1Njnra3zwJCvKAcY6L3l1rktRk7e2/FFTo3khRaz7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPTLrVaymGAPHfzRspt6QNBAfc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTkw ZWE1OS01MDFlLTQ2YzktODg0Yi04ZWZiNWNhZWMxNDcvYzg5MmJlZDktNWUyYy0z NWVkLThhZmItYjBjY2M1ODU2ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWE5MGVhNTktNTAxZS00NmM5LTg4 NGItOGVmYjVjYWVjMTQ3L2FhOTBlYTU5LTUwMWUtNDZjOS04ODRiLThlZmI1Y2Fl YzE0Ny5jcmwwHwYDVR0jBBgwFoAUgYUNw46E27WwU3bxuGMy3R40e0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTkwZWE1OS01MDFlLTQ2YzktODg0Yi04ZWZi NWNhZWMxNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYTLBG2r0G/uFzZGMMgMiaRkx3kKY+j4VgELGfluTCqs7Z5hCMe5eS4 d+X7VT8dPe7yPRBr8mJbynVUCC0civb+q3BRdeiBrfP3O8qTb5xo+LARCf+xd0yw y126w1U5Vxhlqemgtgy5w13/o6Nj1LtKDOUVp3tt/YUHJKxXfGJ/iCNE2n4524LV UWOVYhYbPyhifBN5dY7ZzfuVPVUQQ5TlckMl89aMAo7BOD6h3R4GsWorA5HiEzG3 JDORpjXhREgxPo/gz9DxM2Q+SWw+xzMBdun/TakKpRBRhNE07oF51t91yG94vcBE 5sZ9Bvi1dGbm4nkvmmp5tT1492iFPm4= -----END CERTIFICATE-----Generated at Wed Jul 9 05:24:08 2025 by rpki-client