$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa File: 5f538c17-1400-3f27-809c-12dd726dc36b.roa (raw, json) Hash identifier: 9LezKHLge0LAMhBTWBYqwz78N0cFaBhcBO6KEKJ9ZaQ= Subject key identifier: 81:CA:61:47:71:E1:CF:E8:9D:82:A9:2C:EC:7D:11:9F:20:81:01:33 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849EBEA4935BFB2D788F3F9A000 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 209 IP address blocks: 192.216.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:49:35:bf:b2:d7:88:f3:f9:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=d5e0eb0f-ab90-41bd-bd00-e16c206b5b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:46:ab:81:d9:84:82:cd:0c:d5:73:ed:a9:ef: 0b:92:8e:d0:dd:c6:59:82:9c:01:04:55:1e:90:5a: cd:1f:34:57:05:99:9e:cc:19:99:55:f9:74:02:e4: e5:be:db:ea:33:77:2a:9c:cf:4c:9b:e2:88:34:dd: 9a:ee:4f:1c:3f:86:a8:2b:0d:08:a6:71:c4:5b:0a: ee:9b:23:c8:aa:38:c3:d5:3c:c6:75:5c:0d:45:63: ac:28:5c:29:07:5f:c2:e1:1e:58:8f:a1:63:ce:9a: 47:7d:2b:53:64:c0:ad:f6:74:37:f3:ed:34:c4:aa: 43:f7:51:96:54:4a:15:03:40:ff:4c:ea:f1:de:75: fd:7f:3b:52:50:a5:0f:58:87:45:c7:8a:d1:77:c1: 98:3e:ca:bc:c6:bf:9c:bd:84:e9:48:05:37:11:0a: d1:e9:04:44:7e:d7:e8:cf:77:67:4b:df:17:fd:9d: bd:82:c4:80:c0:fc:63:d9:3a:95:1b:6c:e5:21:59: 0a:7a:47:11:7b:77:25:da:5f:fe:94:52:d7:bd:94: 19:dc:27:34:ce:c4:e0:c7:0d:c8:28:75:db:72:eb: 17:81:05:ef:48:09:15:4d:99:a5:5b:82:b8:8e:b3: e4:f1:7b:00:45:e1:1f:c6:3d:e6:9f:a3:6e:69:a0: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CA:61:47:71:E1:CF:E8:9D:82:A9:2C:EC:7D:11:9F:20:81:01:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 192.216.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:64:3c:6d:2c:f7:57:74:fd:b7:a0:eb:f2:33:bb:60:29:9b: ea:32:ea:26:6a:37:e8:96:1f:48:01:25:ee:6d:a3:63:d4:31: 03:4c:47:b6:b4:fb:0d:60:90:64:f1:c7:2f:c7:f8:6f:dd:4a: 97:39:5c:1d:1e:c5:71:a4:e1:27:07:16:a9:92:5e:d9:55:e1: ac:a7:e9:8f:28:f1:2a:8d:89:0f:84:02:88:68:51:57:01:4c: 1a:61:af:40:44:de:6a:0a:9a:da:c9:de:51:2d:48:c2:13:8f: 6d:f9:62:c8:69:aa:78:11:45:47:29:b3:6f:29:fe:b9:00:2c: 78:b8:b2:0c:5a:34:00:fe:ff:34:88:79:35:bf:38:0e:f9:56: f6:f2:ce:fc:64:b9:17:67:10:c9:aa:45:a0:86:81:a3:2f:12: 9f:51:2f:ee:de:7e:7c:bc:7d:f2:08:16:71:d8:b4:67:1c:18: b6:3a:0a:3a:05:c0:28:5a:a8:15:79:5e:d6:9f:c9:30:33:54: 7e:01:87:24:5e:e1:21:b5:4a:e9:7f:a1:b3:82:ae:df:3c:2b: 15:2a:d1:b9:22:97:3c:02:ad:b0:51:08:60:75:4d:5f:54:d1: 86:2f:8c:22:df:f4:e2:b6:ee:ae:72:71:1d:93:7d:4b:44:5f: cc:32:7b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kk1v7LXiPP5oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZDVlMGViMGYtYWI5MC00MWJkLWJkMDAtZTE2YzIwNmI1YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUargdmEgs0M1XPtqe8Lko7Q3cZZgpwBBFUe kFrNHzRXBZmezBmZVfl0AuTlvtvqM3cqnM9Mm+KINN2a7k8cP4aoKw0IpnHEWwru myPIqjjD1TzGdVwNRWOsKFwpB1/C4R5Yj6FjzppHfStTZMCt9nQ38+00xKpD91GW VEoVA0D/TOrx3nX9fztSUKUPWIdFx4rRd8GYPsq8xr+cvYTpSAU3EQrR6QREftfo z3dnS98X/Z29gsSAwPxj2TqVG2zlIVkKekcRe3cl2l/+lFLXvZQZ3Cc0zsTgxw3I KHXbcusXgQXvSAkVTZmlW4K4jrPk8XsAReEfxj3mn6NuaaAqpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHKYUdx4c/onYKpLOx9EZ8ggQEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWY1MzhjMTctMTQwMC0z ZjI3LTgwOWMtMTJkZDcyNmRjMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNh5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtkPG0s91d0/beg6/Izu2Apm+oy6iZqN+iWH0gBJe5to2PUMQNMR7a0 +w1gkGTxxy/H+G/dSpc5XB0exXGk4ScHFqmSXtlV4ayn6Y8o8SqNiQ+EAohoUVcB TBphr0BE3moKmtrJ3lEtSMITj235YshpqngRRUcps28p/rkALHi4sgxaNAD+/zSI eTW/OA75VvbyzvxkuRdnEMmqRaCGgaMvEp9RL+7efny8ffIIFnHYtGccGLY6CjoF wChaqBV5XtafyTAzVH4BhyRe4SG1Sul/obOCrt88KxUq0bkilzwCrbBRCGB1TV9U 0YYvjCLf9OK27q5ycR2TfUtEX8wye/s= -----END CERTIFICATE-----Generated at Mon Jun 16 14:07:45 2025 by rpki-client