$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa File: 5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json) Hash identifier: Po2uxh60NvhJY3gTk6MYzDUQ6rJPkNtTJpb+azbnOcM= Subject key identifier: 18:BD:9A:C3:94:EA:10:BC:D0:3E:9B:EF:36:10:94:8C:5D:8A:A4:68 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F43285849CE9A51FDD821C5C8D6CCAB00 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 397865 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:51:fd:d8:21:c5:c8:d6:cc:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=dbc52094-91c4-4bb9-9f36-9563a8b2e8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:36:0d:40:be:1f:df:b4:4d:ec:b3:f9:2b: 99:fe:8a:70:08:e4:55:bd:80:9c:a2:f5:03:a7:f1: 84:09:9c:e8:9a:9c:a7:1c:d0:ce:4d:b6:c9:e8:15: 9b:c7:d0:4e:e6:15:97:23:49:56:4c:21:ca:37:38: 69:20:08:fa:dc:34:5c:77:00:16:30:90:3b:2e:e7: 65:8c:0f:5f:41:cc:28:71:77:b6:b7:68:f2:f4:ae: 57:14:b6:61:de:ac:33:cc:bb:1e:43:a4:09:d1:13: 46:b9:14:cd:a1:9b:7c:88:c6:77:b5:78:e1:6b:2a: ff:80:b0:b1:1d:a7:06:7c:b8:66:b8:dd:de:ad:08: 1b:73:ce:13:f2:47:9a:82:b1:10:f2:7b:75:c6:bd: 50:f6:98:df:05:a2:cb:70:92:a8:37:0b:72:6a:46: 46:2d:92:71:0d:7e:da:d0:84:ee:da:1c:4b:dd:15: c2:7e:82:11:ec:f8:ba:c5:e6:b4:3c:c4:b4:a0:7f: 76:30:12:36:ae:2d:92:e5:b9:82:4e:94:46:5f:a6: 65:33:4c:2a:e4:5c:f7:de:f5:a3:82:72:ec:f5:cf: 38:aa:ed:67:3a:c0:47:9e:cd:1b:a4:e7:b6:eb:03: 84:42:ce:4b:6a:60:21:49:ee:82:62:fd:d4:88:ed: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:9A:C3:94:EA:10:BC:D0:3E:9B:EF:36:10:94:8C:5D:8A:A4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:72:7a:d9:d9:5e:73:ae:d2:5b:bc:1d:56:e7:14:ee:7f:8b: 64:20:c3:76:cb:c7:44:4d:e4:45:45:4d:79:0c:0f:88:80:2a: 48:ea:b7:10:2a:1f:bc:2b:40:a8:3a:a8:3a:44:d3:96:ab:b5: 7f:d8:cb:9a:02:fa:8e:ef:a8:79:e0:df:5f:6d:38:f5:6f:c9: ae:48:f6:81:a6:1a:47:dc:0c:9d:e9:6d:ff:c5:94:16:ec:c4: ff:fb:94:d7:d4:eb:14:8e:b8:db:35:56:d4:9c:41:b0:a3:01: 3e:ed:6a:d3:f3:c4:27:45:f4:95:b6:53:9f:39:07:8b:b9:35: 5c:8e:a6:08:fb:73:dd:97:4e:de:95:de:a7:8e:a2:5d:35:ee: 64:f2:40:99:33:e3:2d:63:b1:15:aa:f7:9a:71:54:9a:05:a4: cc:4e:a6:35:7d:7e:ed:fd:06:5b:41:dd:bc:e7:6d:24:34:ba: a5:30:e5:b2:98:f5:66:23:ae:b5:a5:fa:9b:ea:50:92:8a:9b: a1:cf:5c:a7:c9:ed:40:09:af:02:54:7a:9d:75:a8:15:c1:3f: 32:a7:e3:c4:2f:da:21:7a:fb:cf:ae:fa:c2:7c:56:32:17:1e: 0b:95:88:e7:df:7f:d6:d5:ac:77:f9:93:f4:c8:30:9e:d0:50: 10:7c:95:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlH92CHFyNbMqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGJjNTIwOTQtOTFjNC00YmI5LTlmMzYtOTU2M2E4YjJlOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoss2DUC+H9+0Teyz+SuZ/opwCORVvYCcovUD p/GECZzompynHNDOTbbJ6BWbx9BO5hWXI0lWTCHKNzhpIAj63DRcdwAWMJA7Ludl jA9fQcwocXe2t2jy9K5XFLZh3qwzzLseQ6QJ0RNGuRTNoZt8iMZ3tXjhayr/gLCx HacGfLhmuN3erQgbc84T8keagrEQ8nt1xr1Q9pjfBaLLcJKoNwtyakZGLZJxDX7a 0ITu2hxL3RXCfoIR7Pi6xea0PMS0oH92MBI2ri2S5bmCTpRGX6ZlM0wq5Fz33vWj gnLs9c84qu1nOsBHns0bpOe26wOEQs5LamAhSe6CYv3UiO19RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi9msOU6hC80D6b7zYQlIxdiqRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNTU4NDYzNGMtMDdhNi0z Zjg1LTlmOTYtY2ViZDJhZTA3NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVyetnZXnOu0lu8HVbnFO5/i2Qgw3bLx0RN5EVFTXkMD4iAKkjqtxAq H7wrQKg6qDpE05artX/Yy5oC+o7vqHng319tOPVvya5I9oGmGkfcDJ3pbf/FlBbs xP/7lNfU6xSOuNs1VtScQbCjAT7tatPzxCdF9JW2U585B4u5NVyOpgj7c92XTt6V 3qeOol017mTyQJkz4y1jsRWq95pxVJoFpMxOpjV9fu39BltB3bznbSQ0uqUw5bKY 9WYjrrWl+pvqUJKKm6HPXKfJ7UAJrwJUep11qBXBPzKn48Qv2iF6+8+u+sJ8VjIX HguViOfff9bVrHf5k/TIMJ7QUBB8les= -----END CERTIFICATE-----Generated at Sun Jun 8 04:05:37 2025 by rpki-client